last executing test programs: 4m19.000012694s ago: executing program 4 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xd49f, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 4m17.429161053s ago: executing program 4 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0xfe}]}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m16.419780052s ago: executing program 4 (id=272): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}}, 0x0) 4m10.321852538s ago: executing program 4 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = timerfd_create(0x7, 0x0) timerfd_gettime(r3, &(0x7f0000000000)) 4m8.947224464s ago: executing program 4 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 4m7.779048596s ago: executing program 4 (id=305): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) 3m51.391460247s ago: executing program 32 (id=305): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) 1m47.418290947s ago: executing program 0 (id=671): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x4b65, 0x0) 1m45.605075321s ago: executing program 0 (id=677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m43.324164284s ago: executing program 0 (id=681): r0 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="9f01000083667d1040203a337acbdde138e428ff019dffae3cd16402d100000190f19cda"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x100010, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2]}}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2d, 0xffffffff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x86dd}}}]}, 0x38}}, 0x40c8480) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 1m42.208792965s ago: executing program 0 (id=684): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 1m37.999059806s ago: executing program 0 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x82100, 0x0) 1m36.781939348s ago: executing program 0 (id=701): syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2cf}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0), &(0x7f00000001c0)) io_uring_enter(r3, 0x100847c0, 0x20, 0x1, 0x0, 0x0) 1m19.945346057s ago: executing program 33 (id=701): syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2cf}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0), &(0x7f00000001c0)) io_uring_enter(r3, 0x100847c0, 0x20, 0x1, 0x0, 0x0) 11.558098578s ago: executing program 3 (id=869): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000400", @ANYRES16=r0, @ANYBLOB='5\x00#\x00'], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 11.503824039s ago: executing program 5 (id=870): r0 = socket$alg(0x26, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) times(0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x4001}, 0xc) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 11.425834031s ago: executing program 1 (id=871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x76, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r4, 0x8001, 0x1) 11.367138561s ago: executing program 3 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x8000) 8.885296129s ago: executing program 1 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000600)={@broadcast, @remote, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, 'o-\b', 0x28, 0x0, 0x0, @private1, @mcast2, {[@srh={0x32, 0x4, 0x4, 0x2, 0x0, 0x18, 0x4fd, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x10}]}]}}}}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 8.84075219s ago: executing program 3 (id=875): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r4], 0x20}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r2, 0x4, r2}, 0x10) 8.259238691s ago: executing program 2 (id=876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 8.157162193s ago: executing program 5 (id=877): mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x0) semop(r2, 0x0, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000680)) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1) r3 = socket$inet6(0xa, 0x3, 0xbe) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x35, 0x8001f24, 0x69, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x700, 0x80, 0x7, 0x9}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="f78756f61b1a9a996b0186ace246ec688e8ed7019d002bf82b1a1de3f26436dc9e442425147fcf50a546bb6633d0a8eef3af057639bd2716f0743e8431005e9e34c447aab1de3c6e74c706000000"], 0x20}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)=0x1, 0x12) 7.216718491s ago: executing program 2 (id=878): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00005c6000/0x3000)=nil, 0x3000, 0xb) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 7.013338735s ago: executing program 1 (id=879): syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) sendmsg$inet(r2, 0x0, 0x34004811) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000180), 0x0) fchown(r0, r6, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$kcm(0x10, 0x2, 0x4) 6.975654876s ago: executing program 1 (id=880): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf7473000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)='\x00\x00\x00', 0x3, 0x0, 0x0, 0x2}]) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 6.729257191s ago: executing program 5 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r5, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r5, 0xffffe000) 4.853815377s ago: executing program 2 (id=882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000005,iocharset=iso8859-3,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000005,fmask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharsjt=iso8859-3,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJMkOSTJIUmSJMkpIWmSLQmJIaekIQnJYUgOQ0gOE5PG+Xw+JCRJkyQhOSXrf0342+3a3977233bd31z/67ruaz7Xc+9nvW89/u8z8HMfNdlaM3Gtao1JCL4t+DFf5IAIBYABgLAdQAQAEC5uHJxWf05JSb9exthf65HUq/2DNjVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2ebpBa/nJfsu/Pw/O+Pz//8hmaXHfrW29I1dAWL+2RSuf/bG9f8/K/hnVuL6Z29c/+wq9mpPgP0vwMd/dpDj7/Zw/bM3rj9j2dnVfv58tReIZO/34Gp//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/BUKAC63r/a8GGOMMcYYY4wx9ufxOa72DBhjjDHGGGOMMfY/D0GABAUBxEAOiIWckAsEAFwLeeA6iMD1EAc3QF64EfJBfigABSEeCkFh0GAgBghCKAJFIQo3QTG4GYpDCSgJpcBBaUiAW6AM3Apl4TYoB7dDebgDKkBFqASV4U6oAndBVbgbqsE9UB1qQE2oBfdCbbgP6sD9UBcegHrwINSHh6ABPAwN4RFoBI9CY3gMmsDj0BSaQXNoAS3/W/kvQQ94GXpCL0iC3tAHXoG+0A/6wwAYCK/CIHgNBsPrkAxDYCi8AcPgTRgOb8EIGAmj4G0YDe/AGBgL42A8pMAEmAjvwiR4DybDFJgK0yAVpsMMeB9mwiyYDR/AHPgQ5sI8mA8LIA0+goWwCNLhY1gMn0AGLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJn8Iu+Ax2wx7YC5/DPvjiX8w//Tf5XREQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwL+bFfJgPC2ABjMd4LIyF0aBBQsIiWASjGMViWAyLY3EsiSXRocMETMAyeCuWxbJYDstheSyPFbAiVsTKWBmrYBWsilWxGlbD6lgda2JNvBfvxd5YB+tgXayL9bDe5cdT2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2wlbYGltjW2yL7bAdtsf2mIiJ2AE7YEfsiJ2wE3bGztgFu2BX7IbdMl/KAfgyvoy9sLrojX2wD/bF5Bz9cQAOwFdxEL6Gr+HrmIxDcCi+gW/gmzgcT+EIHImjcBRWEe/gGByLJMZjCqbgRJyIk3ASTsYpOAWnYSpOxxk4A2fiLJyFH+Ac/BA/xHk4DxdgGqbhQlyE6ZiOi/E0ZuASXIrLcDmuwOW4ClfjKlyL63AtbsANuAk34RbcgttwG+7AHfgpKgD8DPfgHkzGfbgP9+N+PIAH8CAexEzMxEN4CA/jYTyCR/AoHsVjeBxP4HE8iSfxFJ7GM3gGz+E5PI8vxH/T6NMSa5JBZFFCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8oq8Ip/IJwqIAiJexIvCorAwwggSYQwAiKiIimKimCguiouSoqRwwokEkSDKiDKirCgryonbRXlxh6ggKoo2rrKoLKqItq6quFtUE9VEdVFD1BS1RC1RW9QWdUQdUVfUFfVEPVFfPCQaiN7YHx8RWZVpLIZgEzEUm4pmQl76BmslhmNr0Ua0FU+JkTgC24tWLlE8KzqIMdhR/EWMxedFZzEeu4gXRVfRTXQXL4keorXrKXqJydhb9BHTsK/oJ/qLAWIm1hAf4JycNcXrIlkMEUPFG2IBvimGi7fECDFSjBJvi9HiHTFGjBXjxHiRIiaIieJdMUm8JyaLKWKqmCZSxXQxQ7wvZopZYrb4QMwRH4q5Yp6YLxaINPGRWCgWiXTxsVgsPhEZYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpPhW7xGdit9gj9orPxT7xhdgvvhQHxFfioPhaZIpvxCHxrTgsvhNHxPfiqPhBHBPHxQnxozgpfhKnxGlxRpwV58TP4rz4RVwQXoBEKaSUSgYyRuaQsTKnzCWvkbllcOndvV7GyRtkXnmjzCfzywKyoIyXhWRhqaWRVpIMZRFZVEblTbKYvFkWlyVkSVlKOllaJshbZBl5qywrb5Pl5O2yvLxDVpAVZSVZWd4pq8i7JEQubqO6rCFrylryXpkE98k68n5ZVz4g68kHZX35kGwgH5YN5SOykXxUNpaPySbycdlUNpPNZQvZUj4hW8knZWvZRraVT8l28mnZXj4jE+WzsoP0lz4iz8vO8gXZRb4ou8pusrv8RV6QXvaUvST0BtlHviL7yn6yvxwgB8pX5SD5mhwsX5fJcogcKt+Qw+Sbcrh8S46QI+Uo+bYcLd+RY+RYOU6Olylygpwo35WT5Htyspwip8ppMlVOl/0vjTRbyn+Y/+4f5A/+deub5Ga5RW6V2+R2uUPulJ/KXXKX3C13y71yr9wn98n9cr88IA/Ig/KgzJSZ8pA8JA/Lw/KIPCKPyqPymDwuz8of5Un5kzwlT8vT8qw8J8/J85feA1CohJJKqUDFqBwqVuVUudQ1Kre6VuVR16mIul7FqRtUXnWjyqfyqwKqoIpXhVRhpZVRVpEKVRFVVEXVTXjpA6NKqlLKqdIqQd3yr+SrYupmVVyV+E3+5fkl/Z35tVQtVSvVSrVWrVVb1Va1U+1Ue9VeJapE1UF1UB1VR9VJdVKdVWfVRXVRXVVX1V11Vz1UD9VT9VRJKkn1Ua+ovqqf6q8GqIHqVTVIDVKD1WCVrJLVUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVIpKURPVRDVJTVKT1WQ1VU1VqSpVzVAz1Ew1U81Ws9UcNUfNVXPVfDVfpak0tVAtVOkqXS1Wi1WGWqKWqGVqmVqhVqhVapVao9aodWqd2qA2qAy1WW1WW9VWtV1tVzvVTrVL7VK71W61V+1V+9Q+tV/tVwfUAXVQHVSZKlMdUofUYXVYHVFH1FF1VB1Tx9QJdUKdVCfVKXVKnVFn1Dl1Tp1X59UFdSHrsi8QgQhUkHWmjQlig9ggV5AryB3kDvIEeYJIEAnigrggb3BjkC/IHxQICgbxQaGgcKADE9hAXCp6NLgpKBbcHBQPSgQlg1KBC0oHCcEtQZng1qBscFtQLrg9KB/cEVQIKgaVgsrBnUGV4K6ganB3UC24J6ge1AhqBrWCe4PawX1BneD+oG7wQFAveDCoHzwUNAgeDhoGjwSNgkeDxsFjQZPg8aBp0CxoHrQIWv6p43t/Kv+TrqfupZN0b91Hv6L76n66vx6gB+pX9SD9mh6sX9fJeogeqt/Qw/Sberh+S4/QI/Uo/bYerd/RY/RYPU6P1yl6gp6o39WT9Ht6sp6ip+ppOlVP1zP0+3qmnqVn6w/0HP2hnqvn6fl6gU7TH+mFepFO1x/rxfoTnaGX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpTvUt/pnfrPXqv/lzv01/o/fpLfUB/pQ/qr3Wm/kYf0t/qw/o7fUR/r4/qH/QxfVyf0D/qk/onfUqf1mf0WX1O/6zP61/0Be2zLu6zTu9GGWViTIyJNbEml8llcpvcJo/JYyImYuJMnMlr8pp8Jp8pYAqYeBNvCpvCJgsZMkVMERM1UVPMFDPFTXFT0pQ0zjiTYBJMGVPGlDVlTTlTzpQ35U0FU8FUMpXMneZOc5e5y9xt7jb3mHtMDVPD1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDfNTUvT0rQyrUxr09q0NW1NO9POtDftTaJJNB1MB9PRdDSdTCfT2XQ2XUwX09V0Nd1Nd9PD9DA9TU+TZJJMH9PH9DV9TX/T3ww0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjsg4f844ZY8aacWa8STEpZqKZaCaZSWaymWymmqkm1aSaGWaGmWlmmtlmtplj5pi5Zq6Zb+abNJNmFpqFJt2km8VmsckwGWapWWqWm+VmpVlpVpvVZq1Za9bDerPRbDSbzWaz1Ww12812s9PsNLvMLrPb7DZ7zV6zz+wz+81+c8AcMAfNQZNpMs0hc8gcNofNEXPEHDVHzTFzzJwwJ8xJc9KcMqfMGXPGnDP5L50vvYm1OW0ue43Nba+1eex19m/jAragjbeFbGGrbT6b/zexsdYWtyVsSVvKOlvaJthbfhdXsBVtJVvZ3mmr2Lts1d/Fte19to6939a1D9ha9t7fxPXsg7a+fcw2QASwzWwj28I2to/ZJvZx29Q2s81tC9vOPm3b22dson3WdrDP/S5eaBfZ1XaNXWvX2d12jz1jz9rD9jt7zv5se9pedqB91Q6yr9nB9nWbbIf8Lh5l37aj7Tt2jB1rx9nxv4un2mk21U63M+z7dqad9bs4zX5k59h0O9fOs/Ptgl/jrDml24/tYvuJzbABLLXL7HK7wq60q/7/XJfZDXaj3WR32c/sVrvNbrc77M7LF8J2j91rP7f77Bf2kP3WHrBf2YP2iM203/waZ+3fEfu9PWp/sMfscXvC/mhP2p/U5eysff/R/mIvWG+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJenV5JKkaPSlEC3UBm6lcrSbVSObqfydAdVoIpUiSrTnVSF7qKqdDdVo3uoOtWgmlSL7qXadB/VofupLjxA9ehBqk8PUQN6mBrSI9SIHqXG9Bg1ocepKTWj5tSCWtIT1IqepNbUhtrSU9SOnqb29Awl0rPUgZ6jjvQX6kTPU2d6gbrQi9SVulF3eol60MvUk3pREvWmPvQK9aV+1J8G0EB6lQbRazSYXqdkGkJD6Q0aRm/ScHqLRtBIGkVv02h6h8bQWBpH4ymFJtBEepcm0Xs0mabQVJpGqTSdZtD7NJNm0Wz6gObQhzSX5tF8WkBp9BEtpEWUTh/TYvqEMmgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTvqUdtFntJv20F76nPbRF7SfvqQD9BUdpK8pk76hQ/QtHabv6Ah973vRD3SMjtMJ+pFO0k90ik7TGTpL5+hnOk+/0AXyBCGGIpShCoMwJswRxoY5w1zhNWHu8NowT3hdGAmvD+PCG8K84Y1hvjB/WCAsGMaHhcLCoQ5NaEMKw7BIWDSMhjeFxcKbw+JhibBkWCp0YekwIbwlLBPeGpYNbwvLhbeH5cM7wgphxfCxByqHd4ZVwrvCquHdYbXwnrB6WCOsGdYK7w1rh/eFdcL7w7rhA2HZ8MGwfvhQ2CB8OGwYPhI2Ch8NG4ePhU3Cx8OmYbOwedgibBk+EbYKnwxbh23CtuFTYbvw6bB9+EyYGD4bdgif+7X/wUV/vz8p7B32CV8JXwm9v1/Ojy6IpkU/ii6MLoqmRz+OLo5+Es2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel8rBzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qLuJlfM3eyKuxKupCvlnCvtElwL19K1dK3ck661a+PauqfcU+5p97R7xj3jnnUd3HOuo/uL6+Sed53dC+4F96Lr6rq57u4l18NNyHPxmExyfVwf19f1df1dfzfQDXSD3CA32A12yS7ZDXVD3TA3zA13w90IN8KNcqPcaDfajXFj3Dg3zqW4FDfRTXST3CQ32U12U91Ul+pS3Qw3w810M12VWRe3MtfNdfPdfJfm0txCl3XNmO4Wu8Uuw2W4pW6pW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrudbqfb5Xa53f66i4O6fW6/2+8OuAPuoPvaZbpv3CH3rTvsvnNH3PfuqPvBHXPH3Qn3ozvpfnKn3Gl3xp1159zP7rz7xV1w3qVEJkQmRt6NTIq8F5kcmRKZGpkWSY1Mj8yIvB+ZGZkVmR35IDIn8mFkbmReZH5kQSQt8lFkYWRRJD3ycWRx5JNIRmRJZGlkWWR5ZEXE+0JbQ1/EF/VRf5Mv5m/2xX0JX9KX8s6X9gn+Fl/G3+rL+tt8OX+7L+/v8BV8RV/JP+6b+ma+uW/hW/onfCv/pG/t2/i2/infzj/t2/tnfKJ/1nfwz/mO/i++k3/ed/Yv+C7+Rd/Vd/Pd/Uu+h3/Z9/S9fJLv7fv4V3xf38/39wP8QP+qH+Rf84P96z7ZD/FD/Rt+mH/TD/dv+RF+pB8V87YfffkWGcb7FD/BT/Tv+kn+PbjbT/FT/TSf6qf7Gf59P9PP8rP9B36O/9DP9fP8fL/Ap/mP/EK/yKf7j/1i/4nP8EsuP1T2K/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9p36X/8zv9nv8Xv+53+e/8Pv9l/6A/8of9F/7TP+NP+S/9Yf9d/6I/94f9T/4Y/64P+F/9Cf9T/6UP+3P+LP+nP/Zn/e/+Av8O2uMMcYYY/+UCVea4rc9Fx/n9/6DHPFXK/cBgGu3Fcz86/6sK8r1+S62+4n4dhEAeLZXl0cuL9WrJyUlXVo3Q0JQdB7A5f8JyhIDV+Il0BaehkRoA2X+cP79RLdz9A/Gj94OkOuvcmLhSnxl/C8BMOkPxn/iqVELy4dn4v6L8ecBFC96JScnXImXQNtfn6+0gbJ/Z/75W/2D+ef8KgWg9V/l5IYr8ZX5J8CT8Bwk/mZNxhhjjDHGGGPson6iUqfL95+Xf+Lzj+7P49WVnBxwJf5H9+eMMcYYY4wxxhi7+p7v1v2ZJxIT23T61xtV/1tZ/3SjCfxPjcyNP2x4D3D5FQUA/+aAAFkN+Z/ciy3/kW0lXzp0/rZr+VkfwP+OUv4Zjav8xcQYY4wxxhj701256P/t6+pqTYgxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/Tuxq7yNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//8BsgGO") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 4.853426667s ago: executing program 3 (id=883): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x50, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 4.838910397s ago: executing program 5 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0x0, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x3ab, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4008040) 4.68913832s ago: executing program 1 (id=885): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@fwd={0xd}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x9}, @fwd={0x4}]}, {0x0, [0x61, 0x30, 0x61]}}, &(0x7f00000007c0)=""/41, 0x45, 0x29, 0x0, 0x7}, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000097, 0x0, 0xcbdb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rename(0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000980)={[{@barrier}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 3.751077038s ago: executing program 2 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r7, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r7, 0x6, &(0x7f0000000000)) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200e00000000000000d0001007564703a"], 0x54}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 3.353264245s ago: executing program 3 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000080)="520003000100b8", 0x7) 3.11711834s ago: executing program 5 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.388563583s ago: executing program 5 (id=889): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$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") socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000400)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) 1.378442473s ago: executing program 2 (id=890): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffe]}, 0x8) mkdir(0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x1240}, 0xffffffffffffff3a) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x18}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.265176675s ago: executing program 3 (id=891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r4, 0x0, 0x7a, 0x5, 0x9, 0x0, {0x2, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)) 182.087116ms ago: executing program 2 (id=892): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$nl_generic(0x11, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 0s ago: executing program 1 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r4, 0x541c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.211' (ED25519) to the list of known hosts. [ 64.884799][ T4172] cgroup: Unknown subsys name 'net' [ 65.014842][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.492780][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.472110][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.556997][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.583216][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 68.615595][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.681430][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.689434][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.697692][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.719480][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.741231][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.748446][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.756360][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.813649][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.821046][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.830033][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.862098][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.869398][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.877342][ T4182] device bridge_slave_0 entered promiscuous mode [ 68.885081][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.892350][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.900854][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.910363][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.931976][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.939193][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.947051][ T4182] device bridge_slave_1 entered promiscuous mode [ 68.965447][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.983669][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.991206][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.999415][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.037550][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.044754][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.053133][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.077528][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.115780][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.127659][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.139356][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.152703][ T4185] team0: Port device team_slave_0 added [ 69.159114][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.166242][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.174771][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.184272][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.195069][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.213654][ T4185] team0: Port device team_slave_1 added [ 69.219994][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.227080][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.235387][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.294046][ T4182] team0: Port device team_slave_0 added [ 69.310189][ T4184] team0: Port device team_slave_0 added [ 69.334497][ T4182] team0: Port device team_slave_1 added [ 69.342542][ T4188] team0: Port device team_slave_0 added [ 69.350975][ T4184] team0: Port device team_slave_1 added [ 69.358871][ T4188] team0: Port device team_slave_1 added [ 69.365398][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.372432][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.398527][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.412786][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.451193][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.458341][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.484424][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.497097][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.541281][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.549329][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.576204][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.601949][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.609133][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.635182][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.646770][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.654046][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.680037][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.692658][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.700034][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.726501][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.740133][ T4183] team0: Port device team_slave_0 added [ 69.747039][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.754403][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.780799][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.792879][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.800038][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.826409][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.844180][ T4183] team0: Port device team_slave_1 added [ 69.886511][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.893809][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.920590][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.956520][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.963808][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.989885][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.004511][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.011783][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.058872][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.065679][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.072829][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.081052][ T4188] Cannot create hsr debugfs directory [ 70.089890][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.096723][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.104129][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.108636][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 70.111584][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.122807][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 70.122899][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.129326][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 70.141944][ T4182] Cannot create hsr debugfs directory [ 70.184084][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.191095][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.197723][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.205577][ T4184] Cannot create hsr debugfs directory [ 70.258786][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.265573][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.272380][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.280248][ T4183] Cannot create hsr debugfs directory [ 70.589265][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.624630][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.634354][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.644342][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.691661][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.712918][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.723638][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.737643][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.783433][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.794112][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.805954][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.831953][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.900189][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.923088][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.939033][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.962465][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.976545][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.987151][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.997102][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.011334][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.043897][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.052793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.066751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.076086][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.083578][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.120218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.130630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.139234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.147261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.157050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.166006][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.173190][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.190975][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.222097][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.228961][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.242063][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.251931][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.262083][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.269222][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.277578][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.287001][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.296413][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.306232][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.315149][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.323715][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.348678][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.356468][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.367116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.381356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.390476][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.397565][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.405789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.415130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.423910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.446233][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.456677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.473402][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.486710][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.509025][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.517750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.526871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.536783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.545890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.555285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.564046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.572469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.581442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.590549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.598605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.609261][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.618782][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.678012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.687966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.709090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.717870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.729619][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.736695][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.745272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.771154][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.780914][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.790935][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.798042][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.806312][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.825171][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.836943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.848036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.860759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.898092][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.910107][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.923308][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.939322][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.955542][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.984637][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.993771][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.003350][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.011714][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.020689][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.030410][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.039704][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.048545][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.057170][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.067981][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.081075][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.090304][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.127412][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.147408][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.168583][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.178621][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 72.184707][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 72.185110][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 72.191264][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.197617][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 72.208565][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.218341][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.226720][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.227356][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 72.241923][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.252967][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.262270][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.271514][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.278644][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.286851][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.295996][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.305388][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.339513][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.351462][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.362772][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.374094][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.389568][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.426934][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.438874][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.447699][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.464023][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.483786][ T4182] device veth0_vlan entered promiscuous mode [ 72.496781][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.510487][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.520795][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.529725][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.538100][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.546640][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.556947][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.565167][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.573853][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.584908][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.602343][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.610332][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.639299][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.649281][ T4182] device veth1_vlan entered promiscuous mode [ 72.667493][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.676848][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.686276][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.696158][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.727959][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.741887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.750983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.762114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.772465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.781386][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.788520][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.796310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.804589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.812670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.821611][ T4185] device veth0_vlan entered promiscuous mode [ 72.836640][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.846514][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.855700][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.864655][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.871816][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.894450][ T4185] device veth1_vlan entered promiscuous mode [ 72.949232][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.964404][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.973663][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.985375][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.994318][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.003621][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.012720][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.024602][ T4182] device veth0_macvtap entered promiscuous mode [ 73.069811][ T4182] device veth1_macvtap entered promiscuous mode [ 73.079428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.087706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.104126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.115116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.126047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.136454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.146192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.154984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.163868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.172874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.200046][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.214013][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.227453][ T4188] device veth0_vlan entered promiscuous mode [ 73.235339][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.245879][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.255129][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.264034][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.272749][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.281906][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.291160][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.300868][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.310024][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.317992][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.333747][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.353187][ T4188] device veth1_vlan entered promiscuous mode [ 73.364530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.373456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.383219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.397501][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.407265][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.416705][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.426205][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.445335][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.460216][ T4185] device veth0_macvtap entered promiscuous mode [ 73.498901][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.520532][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.536112][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.556085][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.579800][ T4185] device veth1_macvtap entered promiscuous mode [ 73.602654][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.614092][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.657997][ T4188] device veth0_macvtap entered promiscuous mode [ 73.694924][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.731137][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.744303][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.758061][ T4188] device veth1_macvtap entered promiscuous mode [ 73.769941][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.780370][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.789181][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.797893][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.816698][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.825273][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.842152][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.867710][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.885736][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.905073][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.932247][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.946151][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.956895][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.967707][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.979727][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.987169][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.996263][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.005529][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.014513][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.026988][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.036418][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.045471][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.055050][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.094216][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.107267][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.117836][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.128607][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.142183][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.176842][ T1417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.183919][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.194490][ T1417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.211066][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.221605][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.230834][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.239959][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.248861][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.261685][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.270938][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 74.271025][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.278838][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 74.286879][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.297311][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 74.301467][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.306586][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 74.328552][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 74.347394][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.377575][ T4183] device veth0_vlan entered promiscuous mode [ 74.395627][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.405339][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.414531][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.424685][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.433644][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.441996][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.450792][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.459228][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.489364][ T4184] device veth0_vlan entered promiscuous mode [ 74.512543][ T4183] device veth1_vlan entered promiscuous mode [ 74.538397][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.546467][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.564697][ T4184] device veth1_vlan entered promiscuous mode [ 74.582243][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.596215][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.600489][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.606771][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.620881][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.630811][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.639027][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.646916][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.656002][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.689445][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.697468][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.703147][ T4183] device veth0_macvtap entered promiscuous mode [ 74.729825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.741173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.770768][ T4183] device veth1_macvtap entered promiscuous mode [ 74.815578][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.831197][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.852448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.871295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.899210][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.910343][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.910732][ T4184] device veth0_macvtap entered promiscuous mode [ 74.932960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.942348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.951440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.962834][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.980182][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.994783][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.006706][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.021435][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.034977][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.052952][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.066822][ T4184] device veth1_macvtap entered promiscuous mode [ 75.089575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.105405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.115118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.127370][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.142309][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.161945][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.177390][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.189747][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.203885][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.217546][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.250022][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.306159][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.335812][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.363947][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.373028][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.390441][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.554728][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.587506][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.696055][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.797703][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.871002][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.945515][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.040345][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.120811][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.233545][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.251612][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.340909][ T2239] Bluetooth: hci3: command 0x0419 tx timeout [ 76.355103][ T2239] Bluetooth: hci0: command 0x0419 tx timeout [ 76.362480][ T2239] Bluetooth: hci1: command 0x0419 tx timeout [ 76.368969][ T2239] Bluetooth: hci2: command 0x0419 tx timeout [ 76.376443][ T2239] Bluetooth: hci4: command 0x0419 tx timeout [ 76.378456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.425790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.461660][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.477227][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.495740][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.507055][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.517208][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.528034][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.538122][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.553884][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.572142][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.606540][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 76.646764][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.656931][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.683050][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.694974][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.704049][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.713110][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.739184][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.748041][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.771383][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.815977][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.831836][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.878130][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.967935][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.000745][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.040943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.071638][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.080973][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.125044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.298722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.308415][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.350364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.455782][ T4329] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 77.495805][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.598135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.698799][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.802931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.038240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.211281][ T4332] binder_alloc: 4330: binder_alloc_buf, no vma [ 78.339248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.348318][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.690127][ T4357] vcan0: tx drop: invalid da for name 0x0000000200000004 [ 79.912264][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880277ae400: rx timeout, send abort [ 80.281243][ T4368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.412371][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880277acc00: rx timeout, send abort [ 80.422388][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880277ae400: abort rx timeout. Force session deactivation [ 80.587525][ T4376] syz.1.29[4376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.587743][ T4376] syz.1.29[4376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.974466][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880277acc00: abort rx timeout. Force session deactivation [ 83.240556][ T4398] mkiss: ax0: crc mode is auto. [ 83.333719][ T4402] process 'syz.0.35' launched '/dev/fd/4' with NULL argv: empty string added [ 83.583269][ T4406] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.679243][ T4412] loop2: detected capacity change from 0 to 2048 [ 83.878545][ T4193] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.954351][ T4412] loop2: p1 < > p4 [ 83.973794][ T4412] loop2: p4 size 722688 extends beyond EOD, truncated [ 85.078463][ T4193] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.105648][ T4193] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.141587][ T4193] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.172307][ T4193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.197177][ T4433] loop0: detected capacity change from 0 to 512 [ 85.209373][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 85.227833][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 85.249343][ T4409] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.333612][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 85.634410][ T4433] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 86.464746][ T4440] loop4: detected capacity change from 0 to 32768 [ 86.794652][ T23] cfg80211: failed to load regulatory.db [ 86.795380][ T4438] udevd[4438]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 87.009955][ T4431] netlink: 'syz.2.41': attribute type 10 has an invalid length. [ 87.128152][ T4433] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.339381][ T4431] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.675290][ T4193] usb 2-1: USB disconnect, device number 2 [ 88.018306][ T2239] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.213734][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.388543][ T2239] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.407160][ T2239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.508586][ T2239] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.533171][ T2239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.549857][ T4193] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.561858][ T2239] usb 3-1: SerialNumber: syz [ 88.999097][ T4193] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.112639][ T4193] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.160719][ T2239] usb 3-1: 0:2 : does not exist [ 89.425108][ T4193] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.763827][ T2239] usb 3-1: USB disconnect, device number 2 [ 89.774614][ T4193] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 89.789769][ T4193] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 89.920900][ T4193] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.936174][ T4193] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.963883][ T4193] usb 1-1: Product: syz [ 90.030080][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.030635][ T4193] usb 1-1: Manufacturer: syz [ 90.365676][ T4193] cdc_wdm 1-1:1.0: skipping garbage [ 90.377937][ T4193] cdc_wdm 1-1:1.0: skipping garbage [ 90.449447][ T4193] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 90.455625][ T4193] cdc_wdm 1-1:1.0: Unknown control protocol [ 90.628486][ T4530] loop4: detected capacity change from 0 to 32768 [ 90.706454][ T4530] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.53 (4530) [ 90.752425][ T13] usb 1-1: USB disconnect, device number 2 [ 90.811213][ T4530] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 90.821037][ T4530] BTRFS info (device loop4): enabling auto defrag [ 90.827629][ T4530] BTRFS info (device loop4): doing ref verification [ 90.834439][ T4530] BTRFS info (device loop4): turning on sync discard [ 90.841308][ T4530] BTRFS info (device loop4): force clearing of disk cache [ 90.848606][ T4530] BTRFS info (device loop4): turning off discard [ 90.855450][ T4530] BTRFS info (device loop4): disabling free space tree [ 90.868384][ T4530] BTRFS info (device loop4): has skinny extents [ 91.560830][ T4543] loop2: detected capacity change from 0 to 64 [ 91.656587][ T4543] hfs: invalid btree extent records [ 92.244197][ T4543] hfs: unable to open extent tree [ 92.353373][ T4543] hfs: can't find a HFS filesystem on dev loop2 [ 92.844763][ T4530] BTRFS info (device loop4): enabling ssd optimizations [ 92.857987][ T4530] BTRFS info (device loop4): clearing free space tree [ 92.865765][ T4530] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.875859][ T4530] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.938897][ T4530] BTRFS info (device loop4): checking UUID tree [ 93.073230][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 93.093078][ T26] audit: type=1800 audit(1759269251.400:2): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.53" name="bus" dev="loop4" ino=264 res=0 errno=0 [ 93.185188][ T26] audit: type=1800 audit(1759269251.400:3): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.53" name="bus" dev="loop4" ino=264 res=0 errno=0 [ 93.461195][ T4575] loop0: detected capacity change from 0 to 512 [ 94.034989][ T4591] Zero length message leads to an empty skb [ 94.322255][ T4599] tipc: Started in network mode [ 94.336215][ T4599] tipc: Node identity 9a9a0663254d, cluster identity 4711 [ 94.353261][ T4599] tipc: Enabled bearer , priority 0 [ 94.405501][ T4598] tipc: Disabling bearer [ 94.551290][ T4604] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 94.975851][ T4618] capability: warning: `syz.2.71' uses deprecated v2 capabilities in a way that may be insecure [ 95.112005][ T4622] loop2: detected capacity change from 0 to 512 [ 95.176702][ T4622] EXT4-fs error (device loop2): ext4_fill_super:4841: inode #2: comm syz.2.73: iget: bad i_size value: -1 [ 95.193755][ T4622] EXT4-fs (loop2): get root inode failed [ 95.199557][ T4622] EXT4-fs (loop2): mount failed [ 96.316919][ T4628] loop2: detected capacity change from 0 to 128 [ 96.389931][ T4628] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2. [ 96.591433][ T4636] sd 0:0:1:0: PR command failed: 2 [ 96.596794][ T4636] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 96.604834][ T4636] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 96.817099][ T4646] binder_alloc: 4644: binder_alloc_buf, no vma [ 99.539749][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.571342][ T4655] netlink: 72 bytes leftover after parsing attributes in process `syz.1.82'. [ 99.615332][ T4661] device batadv_slave_0 entered promiscuous mode [ 100.998948][ T4684] syz.1.90 (4684) used greatest stack depth: 20968 bytes left [ 101.114978][ T4689] loop0: detected capacity change from 0 to 128 [ 101.265233][ T4689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.308503][ T4689] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.546622][ T4702] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 105.052027][ T4760] loop3: detected capacity change from 0 to 40427 [ 105.215118][ T4760] F2FS-fs (loop3): invalid crc value [ 105.256619][ T4760] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.332456][ T4760] F2FS-fs (loop3): Start checkpoint disabled! [ 105.362631][ T4760] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 105.425401][ T4781] loop2: detected capacity change from 0 to 4096 [ 105.511680][ T4781] EXT4-fs (loop2): Unrecognized mount option "uid=00000000000000000000" or missing value [ 106.032714][ T4446] attempt to access beyond end of device [ 106.032714][ T4446] loop3: rw=2049, want=40976, limit=40427 [ 106.179275][ T4793] loop2: detected capacity change from 0 to 128 [ 106.310080][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 106.338046][ T4795] device veth1_macvtap left promiscuous mode [ 106.852163][ T4810] loop4: detected capacity change from 0 to 1024 [ 106.889151][ T4810] ======================================================= [ 106.889151][ T4810] WARNING: The mand mount option has been deprecated and [ 106.889151][ T4810] and is ignored by this kernel. Remove the mand [ 106.889151][ T4810] option from the mount to silence this warning. [ 106.889151][ T4810] ======================================================= [ 107.028691][ T4810] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.129: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 107.053686][ T4810] EXT4-fs (loop4): get root inode failed [ 107.065237][ T4810] EXT4-fs (loop4): mount failed [ 107.098419][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.358466][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 107.648554][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.119431][ T13] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 109.168391][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.363094][ T4830] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 109.427678][ T4830] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0/file1 [ 109.448548][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 109.501991][ T4824] sched: RT throttling activated [ 109.507436][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 109.522324][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 109.658999][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.744317][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.836425][ T13] usb 1-1: SerialNumber: syz [ 110.008642][ T13] usb 1-1: can't set config #1, error -71 [ 110.099900][ T13] usb 1-1: USB disconnect, device number 3 [ 111.538985][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.608472][ T21] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 111.616114][ T21] usb 4-1: can't read configurations, error -71 [ 111.941895][ T4854] loop1: detected capacity change from 0 to 40427 [ 112.041064][ T4854] F2FS-fs (loop1): invalid crc value [ 112.057731][ T4854] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.108325][ T4854] F2FS-fs (loop1): Start checkpoint disabled! [ 112.123263][ T4854] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 112.790313][ T4514] attempt to access beyond end of device [ 112.790313][ T4514] loop1: rw=2049, want=40984, limit=40427 [ 113.126301][ T4881] loop4: detected capacity change from 0 to 40427 [ 113.761943][ T4881] F2FS-fs (loop4): invalid crc value [ 113.880134][ T4881] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.910393][ T4892] loop3: detected capacity change from 0 to 128 [ 113.922043][ T4881] F2FS-fs (loop4): Start checkpoint disabled! [ 113.978304][ T4881] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 113.989223][ T4892] FAT-fs (loop3): Directory bread(block 414) failed [ 113.996621][ T4892] FAT-fs (loop3): Directory bread(block 415) failed [ 114.072682][ T4892] FAT-fs (loop3): Directory bread(block 416) failed [ 114.190441][ T4892] FAT-fs (loop3): Directory bread(block 417) failed [ 114.272217][ T4892] FAT-fs (loop3): Directory bread(block 418) failed [ 114.396379][ T4892] FAT-fs (loop3): Directory bread(block 419) failed [ 114.489382][ T4892] FAT-fs (loop3): Directory bread(block 420) failed [ 114.496075][ T4892] FAT-fs (loop3): Directory bread(block 421) failed [ 114.726854][ T4892] FAT-fs (loop3): FAT read failed (blocknr 128) [ 114.853114][ T4517] attempt to access beyond end of device [ 114.853114][ T4517] loop4: rw=2049, want=40984, limit=40427 [ 115.044241][ T4903] binder: 4902:4903 ioctl c0306201 2000000001c0 returned -14 [ 115.377202][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 117.430654][ T4969] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.668689][ T26] audit: type=1804 audit(1759269275.970:4): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.169" name="/newroot/40/file1" dev="fuse" ino=1 res=1 errno=0 [ 118.298240][ T26] audit: type=1800 audit(1759269276.070:5): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.169" name="/" dev="fuse" ino=1 res=0 errno=0 [ 120.623751][ T5004] APIC base relocation is unsupported by KVM [ 120.826696][ T5007] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.593178][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 122.677340][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.686250][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.522769][ T5030] device syzkaller0 entered promiscuous mode [ 125.619267][ T4247] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.644336][ T5058] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 127.079694][ T4992] syz.3.171 (4992): drop_caches: 1 [ 127.888303][ T4247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.898842][ T4247] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.cf [ 127.910626][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.933717][ T4247] usb 5-1: config 0 descriptor?? [ 127.981814][ T5077] binder: BINDER_SET_CONTEXT_MGR already set [ 127.991765][ T5077] binder: 5075:5077 ioctl 4018620d 200000000040 returned -16 [ 128.012886][ T5077] binder: 5075:5077 ioctl c0306201 200000000240 returned -11 [ 128.180917][ T4247] pwc: Askey VC010 type 2 USB webcam detected. [ 129.008421][ T4247] pwc: send_video_command error -71 [ 129.013656][ T4247] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 129.048510][ T4247] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 129.093639][ T4247] usb 5-1: USB disconnect, device number 2 [ 129.414645][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 129.553737][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 129.676922][ T5103] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.723482][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 130.218358][ T5104] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.277504][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 130.474737][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 130.523204][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 130.570787][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 130.731915][ T5099] syz.3.209 (5099) used greatest stack depth: 20576 bytes left [ 131.535617][ T5118] loop4: detected capacity change from 0 to 40427 [ 131.567489][ T5118] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 131.575586][ T5118] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 131.588601][ T5118] F2FS-fs (loop4): invalid crc value [ 131.600135][ T5113] loop3: detected capacity change from 0 to 32768 [ 131.697129][ T5118] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.732949][ T5118] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 131.740190][ T5118] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.670531][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.676940][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.763163][ T26] audit: type=1326 audit(1759269291.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 132.897653][ T5113] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 132.928423][ T26] audit: type=1326 audit(1759269291.130:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 133.071633][ T26] audit: type=1326 audit(1759269291.150:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 133.154701][ T5133] tipc: Started in network mode [ 133.198697][ T5133] tipc: Node identity 4, cluster identity 4711 [ 133.255813][ T5133] tipc: Node number set to 4 [ 133.261538][ T26] audit: type=1326 audit(1759269291.150:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 133.360466][ T26] audit: type=1326 audit(1759269291.150:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 133.484432][ T5113] (syz.3.212,5113,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 133.500663][ T26] audit: type=1326 audit(1759269291.150:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 133.565057][ T26] audit: type=1326 audit(1759269291.150:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 133.698694][ T26] audit: type=1326 audit(1759269291.150:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 133.757657][ T5134] syz.3.212 (5134) used greatest stack depth: 18792 bytes left [ 133.790766][ T26] audit: type=1326 audit(1759269291.150:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 133.965257][ T26] audit: type=1326 audit(1759269291.150:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 134.045896][ T4182] ocfs2: Unmounting device (7,3) on (node local) [ 134.915978][ T5163] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 134.946327][ T5165] binder: 5164:5165 unknown command 0 [ 134.955322][ T5165] binder: 5164:5165 ioctl c0306201 200000000080 returned -22 [ 134.963534][ T5163] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.227'. [ 135.165736][ T5168] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.236591][ T5168] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.576101][ T5187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.635540][ T5191] netlink: 'syz.4.237': attribute type 4 has an invalid length. [ 135.970010][ T5197] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.979711][ T5197] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.988543][ T5197] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.997278][ T5197] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.076106][ T5197] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 136.258266][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 136.264468][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 136.286940][ T5207] kvm: pic: non byte write [ 136.476622][ T5212] syz.4.245 uses obsolete (PF_INET,SOCK_PACKET) [ 137.439423][ T5219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.247'. [ 137.452747][ T5223] overlayfs: failed to clone upperpath [ 137.488240][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 137.516097][ T5224] kvm: pic: non byte write [ 137.719557][ T5232] comedi comedi0: Minor 511 is invalid! [ 138.694575][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.704574][ T4259] Bluetooth: hci5: command 0x1001 tx timeout [ 138.711290][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 139.159215][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 139.181864][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.249331][ T13] usb 4-1: config 0 descriptor?? [ 139.324033][ T13] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 140.805393][ T2239] Bluetooth: hci5: command 0x1009 tx timeout [ 140.934420][ T5253] delete_channel: no stack [ 141.215011][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 142.810847][ T13] usb 4-1: USB disconnect, device number 4 [ 143.004680][ T5282] binder: BINDER_SET_CONTEXT_MGR already set [ 143.057597][ T5282] binder: 5280:5282 ioctl 4018620d 200000004a80 returned -16 [ 144.276384][ T5299] tipc: Failed to remove unknown binding: 66,3,3/0:944008456/944008457 [ 144.366901][ T5303] fuse: Bad value for 'fd' [ 146.932290][ T5341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.286'. [ 147.930365][ T5355] loop3: detected capacity change from 0 to 128 [ 150.250210][ T154] attempt to access beyond end of device [ 150.250210][ T154] loop3: rw=1, want=1041, limit=128 [ 150.576229][ T5370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.296'. [ 151.699530][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 151.731545][ T5378] binder: BINDER_SET_CONTEXT_MGR already set [ 151.824488][ T5386] loop3: detected capacity change from 0 to 8192 [ 151.839617][ T5378] binder: 5376:5378 ioctl 4018620d 200000004a80 returned -16 [ 151.892587][ T5378] binder: 5376:5378 ioctl c0306201 0 returned -14 [ 151.908114][ T5386] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 151.932132][ T5386] REISERFS (device loop3): using ordered data mode [ 151.948404][ T5386] reiserfs: using flush barriers [ 151.957460][ T5386] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.987488][ T5386] REISERFS (device loop3): checking transaction log (loop3) [ 152.963019][ T5398] x_tables: unsorted underflow at hook 3 [ 152.994610][ T5386] REISERFS (device loop3): Using tea hash to sort names [ 153.005848][ T5386] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 153.393405][ T5406] syz.0.307[5406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.393888][ T5406] syz.0.307[5406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.709443][ T5420] loop2: detected capacity change from 0 to 128 [ 155.737580][ T5420] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 157.085362][ T5437] loop2: detected capacity change from 0 to 256 [ 157.129456][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 157.835579][ T5437] exfat: Deprecated parameter 'utf8' [ 157.857665][ T5437] exfat: Deprecated parameter 'namecase' [ 157.969844][ T5437] exfat: Deprecated parameter 'utf8' [ 158.059731][ T5437] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 158.137178][ T5445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.320'. [ 158.252373][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 158.340244][ T5454] netlink: 'syz.3.320': attribute type 10 has an invalid length. [ 158.348521][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.355842][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.377759][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.384945][ T5454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.393066][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.400242][ T5454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.507444][ T4194] Bluetooth: hci3: link tx timeout [ 158.513170][ T4194] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.527878][ T4194] Bluetooth: hci3: link tx timeout [ 158.533432][ T4194] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.542016][ T4194] Bluetooth: hci3: link tx timeout [ 158.571477][ T4194] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.616614][ T4194] Bluetooth: hci3: link tx timeout [ 158.647507][ T4194] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.692013][ T4194] Bluetooth: hci3: link tx timeout [ 158.722014][ T4194] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.061222][ T5454] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 160.703542][ T4247] Bluetooth: hci3: command 0x0406 tx timeout [ 160.772557][ T5484] loop3: detected capacity change from 0 to 256 [ 163.715717][ T5507] kvm: emulating exchange as write [ 164.825514][ T5529] binder_alloc: 5523: binder_alloc_buf, no vma [ 166.072537][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 166.234611][ T5549] team0 (unregistering): Port device team_slave_0 removed [ 166.264910][ T5549] team0 (unregistering): Port device team_slave_1 removed [ 167.652205][ T5560] loop2: detected capacity change from 0 to 32768 [ 169.144221][ T5570] overlayfs: missing 'lowerdir' [ 170.734264][ T5584] chnl_net:caif_netlink_parms(): no params data found [ 170.933630][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.946545][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.959183][ T5584] device bridge_slave_0 entered promiscuous mode [ 171.125358][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.132912][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.179528][ T5584] device bridge_slave_1 entered promiscuous mode [ 171.473140][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.891484][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.082850][ T5584] team0: Port device team_slave_0 added [ 172.104699][ T5584] team0: Port device team_slave_1 added [ 172.154526][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.165737][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.198237][ T4247] Bluetooth: hci5: command 0x0409 tx timeout [ 172.207045][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.229218][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.236399][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.272042][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.357196][ T5584] device hsr_slave_0 entered promiscuous mode [ 172.369250][ T5584] device hsr_slave_1 entered promiscuous mode [ 172.380966][ T5584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.389561][ T5584] Cannot create hsr debugfs directory [ 172.675436][ T5584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.686196][ T5584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.704601][ T5584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.717185][ T5584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.795973][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.827608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.840795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.863968][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.886945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.904901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.917921][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.925147][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.943295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.955497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.972528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.988228][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.995432][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.011917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.025310][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.066136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.083075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.310476][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 174.319384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.328221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.337172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.347071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.247265][ T5584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.270074][ T5584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.309888][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.330374][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.349287][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.261929][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 177.288865][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.299117][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.432584][ T2302] Bluetooth: hci5: command 0x040f tx timeout [ 177.488726][ T2239] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 177.726515][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.742099][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.798386][ T2239] usb 3-1: Using ep0 maxpacket: 32 [ 177.816725][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.918328][ T7] usb 4-1: device descriptor read/all, error -71 [ 177.918465][ T2239] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 177.995987][ T2239] usb 3-1: config 0 has no interface number 0 [ 178.539237][ T2239] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 178.622951][ T2239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.759816][ T2239] usb 3-1: Product: syz [ 178.988457][ T2239] usb 3-1: Manufacturer: syz [ 178.993116][ T2239] usb 3-1: SerialNumber: syz [ 179.008990][ T2239] usb 3-1: config 0 descriptor?? [ 179.508638][ T2239] usb 3-1: can't set config #0, error -71 [ 179.530756][ T2239] usb 3-1: USB disconnect, device number 3 [ 179.722030][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.738529][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.754093][ T4589] Bluetooth: hci5: command 0x0419 tx timeout [ 179.823824][ T5584] device veth0_vlan entered promiscuous mode [ 180.952564][ T5584] device veth1_vlan entered promiscuous mode [ 181.341547][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.373109][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.611195][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.622894][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.631604][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.667782][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.723577][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.205839][ T5584] device veth0_macvtap entered promiscuous mode [ 183.217138][ T5584] device veth1_macvtap entered promiscuous mode [ 183.237389][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.332232][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.038714][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.239597][ T5712] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.321560][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.543714][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.570472][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.874117][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.014420][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.276733][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.308738][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.317300][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.489786][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.999130][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.031590][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.053550][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 186.053564][ T26] audit: type=1326 audit(1759269344.360:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 186.101314][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.138203][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.149500][ T26] audit: type=1326 audit(1759269344.400:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 186.183853][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.201710][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.215031][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.218237][ T26] audit: type=1326 audit(1759269344.400:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 186.237139][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.266582][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.277717][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.308714][ T26] audit: type=1326 audit(1759269344.400:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 186.319011][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.378253][ T26] audit: type=1326 audit(1759269344.400:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 186.385327][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.437203][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.438642][ T26] audit: type=1326 audit(1759269344.400:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 186.478364][ T5584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.518517][ T5584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.529846][ T26] audit: type=1326 audit(1759269344.400:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 187.877678][ T5734] ODEBUG: Out of memory. ODEBUG disabled [ 188.364390][ T26] audit: type=1326 audit(1759269344.410:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 188.399142][ T5584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.408019][ T5584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.536639][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.566904][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.609086][ T26] audit: type=1326 audit(1759269344.410:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 189.675318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.731304][ T26] audit: type=1326 audit(1759269344.410:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa5e32ec9 code=0x7ffc0000 [ 189.769004][ T5746] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 189.769833][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.787723][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.796019][ T5746] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0/file1 [ 190.887737][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.643809][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 191.911810][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 191.918419][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 191.924635][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 191.930810][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 191.953998][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 191.994117][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 192.037926][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 192.077433][ T5763] netlink: 156 bytes leftover after parsing attributes in process `syz.1.405'. [ 192.102298][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 192.131334][ T5765] netlink: 156 bytes leftover after parsing attributes in process `syz.1.405'. [ 192.186005][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 192.194233][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 192.214984][ T5759] bond0: (slave bridge0): Releasing backup interface [ 192.421234][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.428479][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.452534][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.220972][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.258570][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.465237][ T5759] device bridge_slave_0 left promiscuous mode [ 193.482113][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.921163][ T5759] device bridge_slave_1 left promiscuous mode [ 193.928417][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.949861][ T5759] bond0: (slave bond_slave_0): Releasing backup interface [ 194.375293][ T5759] bond0: (slave bond_slave_1): Releasing backup interface [ 194.457261][ T5759] team0: Port device team_slave_0 removed [ 194.527114][ T5759] team0: Port device team_slave_1 removed [ 194.545651][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.556222][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.573971][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.590024][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.923959][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.930428][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.957248][ T5764] team0: Mode changed to "activebackup" [ 195.189229][ T4523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.106440][ T4523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.914493][ T5828] device bridge_slave_0 left promiscuous mode [ 197.933103][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.809532][ T5828] device bridge_slave_1 left promiscuous mode [ 198.957482][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.055365][ T5828] bond0: (slave bond_slave_0): Releasing backup interface [ 200.172640][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 200.172655][ T26] audit: type=1804 audit(1759269358.480:70): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.426" name="/newroot/78/file1" dev="fuse" ino=1 res=1 errno=0 [ 200.182468][ T5828] bond0: (slave bond_slave_1): Releasing backup interface [ 200.239143][ T26] audit: type=1800 audit(1759269358.490:71): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.426" name="/" dev="fuse" ino=1 res=0 errno=0 [ 200.385362][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.451417][ T5854] loop5: detected capacity change from 0 to 32768 [ 200.459665][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.468529][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.475996][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.515425][ T5828] bond0: (slave vxlan0): Releasing backup interface [ 200.553803][ T5828] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.562853][ T5828] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.572122][ T5828] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.581791][ T5828] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.621663][ T5854] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.428 (5854) [ 200.767610][ T5854] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 200.777262][ T5854] BTRFS info (device loop5): using free space tree [ 200.783924][ T5854] BTRFS info (device loop5): has skinny extents [ 200.958914][ T4523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.785847][ T4523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.678686][ T5854] BTRFS error (device loop5): open_ctree failed: -12 [ 205.469691][ T5918] device syzkaller0 entered promiscuous mode [ 205.478666][ T4176] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by udevd (4176) [ 206.760654][ T5941] device syzkaller0 entered promiscuous mode [ 206.779015][ T4523] tipc: Left network mode [ 208.495628][ T5966] ALSA: mixer_oss: invalid OSS volume 'A141=wVe]' [ 208.502912][ T5966] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 208.511518][ T5966] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 210.661357][ T5994] device veth1_macvtap left promiscuous mode [ 210.667815][ T5994] device macsec0 entered promiscuous mode [ 212.632898][ T6022] loop3: detected capacity change from 0 to 2048 [ 214.765455][ T6022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.243037][ T6055] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 220.333105][ T4523] device hsr_slave_0 left promiscuous mode [ 220.796272][ T4523] device hsr_slave_1 left promiscuous mode [ 220.934669][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.097049][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.155985][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.177616][ T4523] device bridge_slave_1 left promiscuous mode [ 222.195044][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.232147][ T4523] device bridge_slave_0 left promiscuous mode [ 222.247592][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.375823][ T4523] device veth1_macvtap left promiscuous mode [ 222.398798][ T4523] device veth0_macvtap left promiscuous mode [ 222.915285][ T4523] device veth1_vlan left promiscuous mode [ 223.419813][ T4523] device veth0_vlan left promiscuous mode [ 224.756185][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 227.109299][ T6164] xt_cluster: node mask cannot exceed total number of nodes [ 227.997634][ T4523] team0 (unregistering): Port device team_slave_1 removed [ 228.014368][ T4523] team0 (unregistering): Port device team_slave_0 removed [ 228.045348][ T4523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.076081][ T4523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.270047][ T4523] bond0 (unregistering): Released all slaves [ 229.392358][ T6169] loop5: detected capacity change from 0 to 32768 [ 229.620650][ T6146] IPVS: Unknown mcast interface: vcan0 [ 230.584670][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 234.673544][ T6233] netlink: 'syz.2.511': attribute type 3 has an invalid length. [ 234.682221][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.511'. [ 237.850791][ T6274] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 240.234672][ T6304] device netdevsim0 entered promiscuous mode [ 248.686814][ T6424] delete_channel: no stack [ 251.073254][ T6449] tipc: Started in network mode [ 251.075360][ T6455] loop5: detected capacity change from 0 to 64 [ 251.109441][ T6449] tipc: Node identity 420ba09e4a15, cluster identity 4711 [ 251.782564][ T6449] tipc: Enabled bearer , priority 0 [ 251.861056][ T6461] device syzkaller0 entered promiscuous mode [ 252.058493][ T6449] tipc: Resetting bearer [ 252.364570][ T6448] tipc: Resetting bearer [ 252.747955][ T6448] tipc: Disabling bearer [ 253.363880][ T6483] fuse: Bad value for 'fd' [ 254.476059][ T6494] netlink: zone id is out of range [ 256.390081][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.396424][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.869068][ T6545] device netdevsim0 entered promiscuous mode [ 258.920509][ T6551] device bridge_slave_0 entered promiscuous mode [ 258.982084][ T6554] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 259.000152][ T6545] loop5: detected capacity change from 0 to 512 [ 259.047144][ T6554] kvm: pic: non byte read [ 259.066417][ T6554] kvm: pic: level sensitive irq not supported [ 259.067822][ T6554] kvm: pic: non byte read [ 259.121669][ T6554] kvm: pic: level sensitive irq not supported [ 259.122006][ T6554] kvm: pic: non byte read [ 259.175453][ T6554] kvm: pic: level sensitive irq not supported [ 259.176171][ T6554] kvm: pic: non byte read [ 259.212685][ T6545] EXT4-fs (loop5): Ignoring removed oldalloc option [ 259.240164][ T6554] kvm: pic: level sensitive irq not supported [ 259.240255][ T6554] kvm: pic: non byte read [ 259.333721][ T6545] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 260.217926][ T6545] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 265.991847][ T6629] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 268.063794][ T6658] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 268.278246][ T6661] tipc: Enabling of bearer rejected, failed to enable media [ 268.692737][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 269.765806][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.5.616'. [ 270.276606][ T6694] tipc: Enabled bearer , priority 0 [ 270.318881][ T6694] device syzkaller0 entered promiscuous mode [ 270.502426][ T6694] tipc: Resetting bearer [ 271.181013][ T6692] tipc: Resetting bearer [ 271.321146][ T4247] tipc: Node number set to 136224926 [ 271.375627][ T6692] tipc: Disabling bearer [ 271.423545][ T6706] tipc: Started in network mode [ 271.451371][ T6706] tipc: Node identity 62be6b341853, cluster identity 4711 [ 272.155275][ T6706] tipc: Enabled bearer , priority 0 [ 272.187854][ T6708] device syzkaller0 entered promiscuous mode [ 273.168433][ T6708] tipc: Resetting bearer [ 273.246197][ T6708] tipc: Disabling bearer [ 273.569048][ T6742] tipc: Enabling of bearer rejected, failed to enable media [ 273.593935][ T6739] tipc: Enabled bearer , priority 0 [ 274.177347][ T6739] tipc: Resetting bearer [ 274.291080][ T6750] device syzkaller0 entered promiscuous mode [ 274.306769][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 274.343948][ T6736] tipc: Resetting bearer [ 274.424897][ T6753] loop5: detected capacity change from 0 to 32768 [ 274.906108][ T6736] tipc: Disabling bearer [ 278.171033][ T6796] tipc: Enabling of bearer rejected, failed to enable media [ 278.271917][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 279.457996][ T6805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.638'. [ 279.555342][ T6807] tipc: Enabling of bearer rejected, failed to enable media [ 280.814281][ T6815] tipc: Enabled bearer , priority 0 [ 280.888768][ T6821] device syzkaller0 entered promiscuous mode [ 281.042582][ T6815] tipc: Resetting bearer [ 281.067661][ T6829] tipc: Enabling of bearer rejected, failed to enable media [ 281.076793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.077097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.202456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.211229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.556199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.628368][ T6808] tipc: Resetting bearer [ 282.418413][ T5910] tipc: Node number set to 2062379828 [ 282.591390][ T6808] tipc: Disabling bearer [ 285.359373][ T6865] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 286.528694][ T6867] xt_socket: unknown flags 0x50 [ 288.593899][ T6887] tipc: Enabled bearer , priority 0 [ 288.698867][ T6887] device syzkaller0 entered promiscuous mode [ 288.713365][ T6887] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 288.846160][ T6887] tipc: Resetting bearer [ 288.920767][ T6886] tipc: Resetting bearer [ 288.995083][ T6886] tipc: Disabling bearer [ 293.498226][ T2239] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 294.876476][ T5910] Bluetooth: hci5: command 0x0406 tx timeout [ 294.996424][ T6964] tipc: Enabling of bearer rejected, failed to enable media [ 297.417820][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.335597][ T7032] ipt_REJECT: TCP_RESET invalid for non-tcp [ 301.859319][ T7040] loop3: detected capacity change from 0 to 4096 [ 301.874980][ T7038] tipc: Enabling of bearer rejected, failed to enable media [ 301.909384][ T7040] EXT4-fs (loop3): Test dummy encryption mode enabled [ 302.620247][ T7040] EXT4-fs (loop3): unsupported descriptor size 255 [ 304.812645][ T7077] tipc: Enabling of bearer rejected, failed to enable media [ 306.850136][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'. [ 314.476174][ T7149] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 315.275283][ T7162] loop5: detected capacity change from 0 to 128 [ 315.841119][ T7162] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 315.841119][ T7162] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 315.841119][ T7162] [ 316.580686][ T7162] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 316.622193][ T7162] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouser_xattr,mblk_io_submit,nodelalloc,grpid,auto_da_alloc,nodiscard,journal_dev=0x0000000000000002,inode_readahead_blks=0x0000000000000004,,errors=continue. Quota mode: none. [ 316.670151][ T7162] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 316.754032][ T7171] tipc: Enabling of bearer rejected, failed to enable media [ 317.004938][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.022197][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.182548][ T7235] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.998619][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.830175][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.900519][ T7252] tipc: Enabling of bearer rejected, failed to enable media [ 325.107688][ T7274] loop3: detected capacity change from 0 to 32768 [ 325.523469][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.371907][ T7286] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.940589][ T5908] Bluetooth: hci2: command 0x0409 tx timeout [ 327.464385][ T7295] capability: warning: `syz.2.745' uses 32-bit capabilities (legacy support in use) [ 328.944395][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.714861][ T5908] Bluetooth: hci2: command 0x041b tx timeout [ 330.668638][ T7299] block nbd5: shutting down sockets [ 330.766525][ T7316] loop3: detected capacity change from 0 to 128 [ 331.968681][ T5908] Bluetooth: hci2: command 0x040f tx timeout [ 332.198510][ T7244] chnl_net:caif_netlink_parms(): no params data found [ 332.285884][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 334.018297][ T4589] Bluetooth: hci2: command 0x0419 tx timeout [ 336.703317][ T7391] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 336.721348][ T7391] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 336.747681][ T7391] CIFS mount error: No usable UNC path provided in device string! [ 336.747681][ T7391] [ 336.758309][ T7391] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 339.701925][ T7244] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.718654][ T7244] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.742967][ T7244] device bridge_slave_0 entered promiscuous mode [ 339.945024][ T7244] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.952944][ T7244] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.961765][ T7244] device bridge_slave_1 entered promiscuous mode [ 341.056662][ T7418] tipc: Enabling of bearer rejected, failed to enable media [ 342.320130][ T7428] tipc: Enabling of bearer rejected, failed to enable media [ 342.412876][ T7244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.471203][ T7244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.277725][ T7244] team0: Port device team_slave_0 added [ 344.583009][ T7244] team0: Port device team_slave_1 added [ 345.035658][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.779'. [ 345.644108][ T7485] netlink: 28 bytes leftover after parsing attributes in process `syz.5.783'. [ 345.685528][ T7244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.711734][ T7244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.804411][ T7244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.817050][ T7244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.828377][ T7244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.100036][ T7244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.858720][ T7498] tipc: Enabling of bearer rejected, failed to enable media [ 346.920481][ T7244] device hsr_slave_0 entered promiscuous mode [ 346.942414][ T7244] device hsr_slave_1 entered promiscuous mode [ 346.965058][ T7244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.517267][ T7244] Cannot create hsr debugfs directory [ 351.857871][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 355.090597][ T154] device hsr_slave_0 left promiscuous mode [ 355.101358][ T154] device hsr_slave_1 left promiscuous mode [ 356.198592][ T7590] xt_socket: unknown flags 0x4c [ 356.606670][ T154] device veth0_macvtap left promiscuous mode [ 356.633339][ T7586] loop3: detected capacity change from 0 to 2048 [ 356.658319][ T154] device veth1_vlan left promiscuous mode [ 356.688188][ T154] device veth0_vlan left promiscuous mode [ 356.977773][ T7603] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.187924][ T26] audit: type=1800 audit(1759269515.490:72): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.803" name="bus" dev="loop3" ino=2097152 res=0 errno=0 [ 357.437161][ T7609] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 358.004330][ T7609] Remounting filesystem read-only [ 358.104529][ T7609] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 358.168464][ T154] bond0 (unregistering): Released all slaves [ 358.288811][ T7577] tipc: Enabling of bearer rejected, failed to enable media [ 359.020506][ T7244] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 359.113231][ T7244] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 359.182825][ T7244] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 359.321929][ T7633] loop5: detected capacity change from 0 to 128 [ 361.765316][ T7244] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 363.042941][ T7244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.238722][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.246747][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.359207][ T7244] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.456892][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.469347][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.696653][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.703888][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.147435][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.322894][ T7683] tipc: Enabling of bearer rejected, failed to enable media [ 364.435440][ T7244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.447144][ T7244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.601910][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.626690][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.799543][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.806720][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.045685][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.107919][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.164285][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.195672][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.204495][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.213660][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.222847][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.231946][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.244866][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.254166][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.268758][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.276876][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.310138][ T7690] netlink: 830 bytes leftover after parsing attributes in process `syz.1.810'. [ 366.816377][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.846577][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.935683][ T7244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.944811][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 368.000637][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.095876][ T7244] device veth0_vlan entered promiscuous mode [ 368.534654][ T7244] device veth1_vlan entered promiscuous mode [ 368.685596][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.708871][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.739805][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 368.763144][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 368.795133][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 368.822522][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 368.852475][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 368.867083][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 368.924398][ T7244] device veth0_macvtap entered promiscuous mode [ 368.952073][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 368.998441][ T7244] device veth1_macvtap entered promiscuous mode [ 369.062559][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.158498][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.303436][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.395854][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.468154][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.534636][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.607295][ T7244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.635141][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'. [ 370.644314][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'. [ 370.665160][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.701115][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.758447][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.780366][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.872295][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.097361][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.468275][ T7244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.556844][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 372.758781][ T7244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.114710][ T7244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.279013][ T7244] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.287789][ T7244] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.351319][ T7244] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.360266][ T7244] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.088766][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 375.955916][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.063421][ T7816] loop5: detected capacity change from 0 to 32768 [ 376.893233][ T7816] XFS (loop5): Mounting V5 Filesystem [ 376.979284][ T4521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.207322][ T4521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.822959][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 378.010817][ T7816] XFS (loop5): Ending clean mount [ 378.320271][ T5584] XFS (loop5): Unmounting Filesystem [ 378.826710][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.836995][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.861299][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.967065][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.035099][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 383.049041][ T7914] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 383.116137][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.211264][ T7911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.858'. [ 383.381971][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.515716][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.969133][ T4233] Bluetooth: hci2: command 0x0409 tx timeout [ 385.080672][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.121104][ T7938] loop5: detected capacity change from 0 to 128 [ 385.337181][ T7943] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 385.536197][ T7938] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.861604][ T7938] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 388.955393][ T2239] Bluetooth: hci2: command 0x041b tx timeout [ 389.252612][ T7902] chnl_net:caif_netlink_parms(): no params data found [ 391.720375][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 393.840549][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 395.466386][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.485387][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.539644][ T7902] device bridge_slave_0 entered promiscuous mode [ 395.585006][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.594838][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.607863][ T7902] device bridge_slave_1 entered promiscuous mode [ 395.687942][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.717933][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.706688][ T7902] team0: Port device team_slave_0 added [ 399.274370][ T7902] team0: Port device team_slave_1 added [ 399.303075][ T8063] loop5: detected capacity change from 0 to 1024 [ 505.898008][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 505.905055][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7997/1:b..l [ 505.913721][ C1] (detected by 1, t=10504 jiffies, g=22149, q=28) [ 505.920250][ C1] task:udevd state:R running task stack:25216 pid: 7997 ppid: 3561 flags:0x00004002 [ 505.932548][ C1] Call Trace: [ 505.935856][ C1] [ 505.938811][ C1] __schedule+0x11bb/0x4390 [ 505.943374][ C1] ? __queue_work+0x9e2/0xd50 [ 505.948080][ C1] ? try_to_wake_up+0x6cf/0x1050 [ 505.953040][ C1] ? release_firmware_map_entry+0x190/0x190 [ 505.958962][ C1] ? preempt_schedule+0xa7/0xb0 [ 505.963834][ C1] preempt_schedule_common+0x82/0xd0 [ 505.969142][ C1] preempt_schedule+0xa7/0xb0 [ 505.973843][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 505.979510][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 505.985519][ C1] ? lock_chain_count+0x20/0x20 [ 505.990395][ C1] preempt_schedule_thunk+0x16/0x18 [ 505.995621][ C1] _raw_spin_unlock_irq+0x3c/0x40 [ 506.000666][ C1] loop_queue_rq+0x9e0/0xac0 [ 506.005285][ C1] __blk_mq_try_issue_directly+0x497/0x810 [ 506.011121][ C1] ? blk_mq_request_issue_directly+0xa0/0xa0 [ 506.017133][ C1] blk_mq_try_issue_list_directly+0x1a1/0x530 [ 506.023236][ C1] blk_mq_sched_insert_requests+0x2d6/0x5c0 [ 506.029156][ C1] blk_mq_flush_plug_list+0x57f/0x660 [ 506.034590][ C1] ? trace_block_rq_insert+0x1c0/0x1c0 [ 506.040081][ C1] ? dio_await_one+0x390/0x390 [ 506.044881][ C1] blk_flush_plug_list+0x3ec/0x430 [ 506.050054][ C1] ? blk_check_plugged+0x250/0x250 [ 506.055207][ C1] ? local_lock_release+0x97/0x170 [ 506.060348][ C1] blk_finish_plug+0x59/0x80 [ 506.064965][ C1] read_pages+0x4c2/0x920 [ 506.069446][ C1] ? page_cache_ra_unbounded+0x930/0x930 [ 506.075108][ C1] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 506.080604][ C1] page_cache_ra_unbounded+0x830/0x930 [ 506.086105][ C1] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 506.092663][ C1] force_page_cache_ra+0x3e5/0x440 [ 506.097808][ C1] filemap_read+0x589/0x2480 [ 506.102455][ C1] ? find_get_pages_range_tag+0x450/0x450 [ 506.108317][ C1] ? aa_file_perm+0x3a3/0xe20 [ 506.113160][ C1] ? memset+0x1e/0x40 [ 506.117208][ C1] ? generic_file_read_iter+0x96/0x490 [ 506.122699][ C1] blkdev_read_iter+0x11d/0x150 [ 506.127574][ C1] vfs_read+0x725/0xcf0 [ 506.131746][ C1] ? preempt_count_add+0x8d/0x190 [ 506.136796][ C1] ? kernel_read+0x1e0/0x1e0 [ 506.141408][ C1] ? __context_tracking_exit+0x4c/0x80 [ 506.146986][ C1] ? __fdget_pos+0x1e2/0x370 [ 506.151607][ C1] ksys_read+0x14d/0x250 [ 506.155885][ C1] ? vfs_write+0xd00/0xd00 [ 506.160322][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 506.165541][ C1] do_syscall_64+0x4c/0xa0 [ 506.169974][ C1] ? clear_bhb_loop+0x30/0x80 [ 506.174771][ C1] ? clear_bhb_loop+0x30/0x80 [ 506.179477][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 506.185406][ C1] RIP: 0033:0x7f3b0dd9f407 [ 506.189939][ C1] RSP: 002b:00007ffd6abcbea0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 506.198376][ C1] RAX: ffffffffffffffda RBX: 00007f3b0dcb1880 RCX: 00007f3b0dd9f407 [ 506.206369][ C1] RDX: 0000000000000200 RSI: 00007f3b0d35c000 RDI: 0000000000000009 [ 506.214445][ C1] RBP: 000055fb8a2ca050 R08: 0000000000000000 R09: 0000000000000000 [ 506.222429][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000001f6 [ 506.230415][ C1] R13: 0000000000007e00 R14: 000055fb8a2d2ee8 R15: 00007f3b0e4f539c [ 506.238430][ C1] [ 506.241480][ C1] rcu: rcu_preempt kthread starved for 10480 jiffies! g22149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 506.252696][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 506.262688][ C1] rcu: RCU grace-period kthread stack dump: [ 506.268588][ C1] task:rcu_preempt state:R running task stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 506.279397][ C1] Call Trace: [ 506.282700][ C1] [ 506.285648][ C1] __schedule+0x11bb/0x4390 [ 506.290183][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 506.295591][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 506.301702][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 506.307640][ C1] ? _raw_spin_unlock+0x40/0x40 [ 506.312526][ C1] ? rcu_is_watching+0x11/0xa0 [ 506.317314][ C1] ? release_firmware_map_entry+0x190/0x190 [ 506.323238][ C1] schedule+0x11b/0x1e0 [ 506.327413][ C1] schedule_timeout+0x15c/0x280 [ 506.332285][ C1] ? console_conditional_schedule+0x40/0x40 [ 506.338198][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 506.344111][ C1] ? update_process_times+0x200/0x200 [ 506.349512][ C1] ? prepare_to_swait_event+0x331/0x350 [ 506.355087][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 506.359961][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 506.365191][ C1] ? dump_blkd_tasks+0x7e0/0x7e0 [ 506.370149][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 506.374937][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 506.380155][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 506.385389][ C1] rcu_gp_kthread+0x98/0x350 [ 506.390004][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 506.395130][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 506.401054][ C1] ? __kthread_parkme+0x157/0x1b0 [ 506.406104][ C1] kthread+0x436/0x520 [ 506.410194][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 506.415323][ C1] ? kthread_blkcg+0xd0/0xd0 [ 506.419947][ C1] ret_from_fork+0x1f/0x30 [ 506.424397][ C1] [ 506.427427][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 506.433760][ C1] NMI backtrace for cpu 1 [ 506.438095][ C1] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 506.445650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 506.455718][ C1] Workqueue: netns cleanup_net [ 506.460544][ C1] Call Trace: [ 506.463836][ C1] [ 506.466691][ C1] dump_stack_lvl+0x168/0x230 [ 506.471393][ C1] ? show_regs_print_info+0x20/0x20 [ 506.476610][ C1] ? load_image+0x3b0/0x3b0 [ 506.481141][ C1] ? irq_work_queue+0xbf/0x140 [ 506.485934][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 506.490888][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 506.497058][ C1] ? _printk+0xcc/0x110 [ 506.501236][ C1] ? cpu_online+0x1d/0x30 [ 506.505580][ C1] ? load_image+0x3b0/0x3b0 [ 506.510121][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 506.516213][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 506.522214][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 506.528474][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 506.533962][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 506.538920][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 506.544238][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 506.549469][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 506.554346][ C1] ? account_process_tick+0x227/0x3a0 [ 506.559741][ C1] update_process_times+0x193/0x200 [ 506.564956][ C1] tick_sched_timer+0x37d/0x560 [ 506.569827][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 506.575053][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 506.580633][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 506.585765][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 506.591856][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 506.596847][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 506.602849][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 506.608501][ C1] [ 506.611447][ C1] [ 506.614480][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 506.620476][ C1] RIP: 0010:smp_call_function_single+0x212/0x490 [ 506.626823][ C1] Code: 48 44 89 f6 83 e6 01 31 ff e8 ca 5e 0b 00 41 83 e6 01 49 bc 00 00 00 00 00 fc ff df 75 0a e8 55 5b 0b 00 e9 a3 00 00 00 f3 90 44 24 48 01 00 00 00 0f 84 8e 00 00 00 e8 3b 5b 0b 00 eb e9 e8 [ 506.646448][ C1] RSP: 0018:ffffc900020477a0 EFLAGS: 00000293 [ 506.652532][ C1] RAX: ffffffff816c6fe5 RBX: 0000000000000000 RCX: ffff88801d48d940 [ 506.660515][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 506.668501][ C1] RBP: ffffc90002047890 R08: dffffc0000000000 R09: ffffed1017207681 [ 506.676487][ C1] R10: ffffed1017207681 R11: 1ffff11017207680 R12: dffffc0000000000 [ 506.684471][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff92000408ef8 [ 506.692461][ C1] ? smp_call_function_single+0x225/0x490 [ 506.698205][ C1] ? rcu_rdp_is_offloaded+0x180/0x180 [ 506.703589][ C1] ? flush_smp_call_function_from_idle+0x230/0x230 [ 506.710200][ C1] ? rcu_rdp_is_offloaded+0x180/0x180 [ 506.715589][ C1] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 506.720900][ C1] rcu_barrier+0x25d/0x4b0 [ 506.725336][ C1] ? cond_synchronize_rcu+0x20/0x20 [ 506.730547][ C1] ? unregister_netdevice_many+0x172f/0x18f0 [ 506.736557][ C1] netdev_run_todo+0x2ee/0xa40 [ 506.741336][ C1] ? alloc_netdev_mqs+0xc40/0xc40 [ 506.746375][ C1] ? netdev_refcnt_read+0x50/0x50 [ 506.751411][ C1] ? unregister_netdevice_queue+0x1aa/0x360 [ 506.757321][ C1] ? list_netdevice+0x450/0x450 [ 506.762200][ C1] vti6_exit_batch_net+0x3cb/0x410 [ 506.767335][ C1] ? vti6_init_net+0x2c0/0x2c0 [ 506.772115][ C1] ? remove_proc_subtree+0x3e1/0x520 [ 506.777424][ C1] ? vti6_init_net+0x2c0/0x2c0 [ 506.782291][ C1] cleanup_net+0x77b/0xb80 [ 506.786733][ C1] ? ops_free_list+0x330/0x330 [ 506.791511][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 506.796916][ C1] process_one_work+0x863/0x1000 [ 506.801885][ C1] ? worker_detach_from_pool+0x240/0x240 [ 506.807532][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 506.812838][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 506.817878][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 506.823267][ C1] ? wq_worker_running+0x97/0x170 [ 506.828308][ C1] worker_thread+0xaa8/0x12a0 [ 506.833030][ C1] kthread+0x436/0x520 [ 506.837111][ C1] ? rcu_lock_release+0x20/0x20 [ 506.841979][ C1] ? kthread_blkcg+0xd0/0xd0 [ 506.846586][ C1] ret_from_fork+0x1f/0x30 [ 506.851036][ C1]