last executing test programs: 39.093566512s ago: executing program 0 (id=252): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x80, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x39f, 0x6, 0x10, 0x4, {0xa, 0x25, 0x25, 0x0, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0x66fc, 0x6, 0x6}}}}}}}}]}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 37.473474376s ago: executing program 3 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000440), 0x1001) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) fanotify_init(0x2, 0x8000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x68) fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x0, 0xf}, 0x28) gettimeofday(0x0, 0xfffffffffffffffe) r8 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6277, 0x8, 0xffffffff, 0x400000}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_enter(r8, 0x1, 0x21, 0x1, 0x0, 0x0) 35.920332057s ago: executing program 0 (id=259): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e1e, @local}}) chdir(0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 35.575595665s ago: executing program 0 (id=261): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 35.281170101s ago: executing program 0 (id=263): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x42, 0x0) 34.799771506s ago: executing program 0 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000440), 0x1001) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) fanotify_init(0x2, 0x8000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x68) fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x0, 0xf}, 0x28) gettimeofday(0x0, 0xfffffffffffffffe) r8 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6277, 0x8, 0xffffffff, 0x400000}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_enter(r8, 0x1, 0x21, 0x1, 0x0, 0x0) 34.564760918s ago: executing program 3 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x80140912, 0x200000000005) 33.725194032s ago: executing program 3 (id=269): syz_io_uring_setup(0x1e0c, &(0x7f00000000c0)={0x0, 0x9d58, 0x0, 0x2, 0x2b2}, 0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0xfffffff9, 0x2376}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000040)) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 33.712008722s ago: executing program 0 (id=270): inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x15) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f00000003c0)={[{@shortname_lower}, {@utf8no}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_mixed}, {@rodir}, {@shortname_win95}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0xff, 0x350, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x80400, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(r0, &(0x7f0000000540)=""/173, 0xad) 33.017826689s ago: executing program 32 (id=270): inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x15) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f00000003c0)={[{@shortname_lower}, {@utf8no}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_mixed}, {@rodir}, {@shortname_win95}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0xff, 0x350, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x80400, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(r0, &(0x7f0000000540)=""/173, 0xad) 33.009238989s ago: executing program 3 (id=272): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f00000002c0)={[{@utf8no}, {@utf8}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@rodir}, {@fat=@flush}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@shortname_win95}]}, 0x0, 0x2ce, &(0x7f0000000700)="$eJzs3UFPE00YwPGHFtpSAu2BvMn7Jm98ohe9bKB+gsZAYmyiAWrEg8kiW226tqRbMTVGuHn1E/gBiN48aaLeDRdv3o0XLiZeOIhrut21pSyhjYGt8P8lZIaZfbozzJQ83cDuzq3nDyolxyiZDYmlVGIim7Irkm3VfCN+GfPqCem2KZcmvn/+f3H59rV8oTC3oDqfX7qcU9Wpc+8ePXl5/kNj4ubrqbdJ2c7e2fmW+7L9z/a/Oz+XgleviZi6Uqs1zBXb0tWyUzFUb9iW6VharjpWvaFd/SW7trbWVLO6Opleq1uOo2a1qRWrqY2aNupNNe+Z5aoahqGT6d7hn3rxgSOKewmR/LEMBlEYD2us1/NmPLSzuHUSgwIAAMMlqvz/ftnRsqPVWiu/b73wIfl/TAbI/0XC8n8cqri1sGCS/59yrfw/7b9/9yP/BwAAAAAAAAAAAAAAAAAAAADgb7ArknFdN7Prul4ZfCVFJCUiwfdRjxPHI1h31v9sWlweEf8f91Ii9rP1YkLaZbs/X5Ky2GLJzJjID28/+Nr1+auFuRn1ZOW9vbFebEW2yrgkg/hANjx+th2v3fEbMibp7vPnJCPT4fG5kPjWPC5ecJP+mS0xJCOf7kpNbFn19nUn/ums6pXrhZ74ce84AAAAAABOA0N/O/D53es3NLhtSE9/u7FzfUAynesDc2HXB3o+X4/Kf6PRzRsAAAAAgLPEaT6umLZt1Y+qpDotH/uPGqpK8PyDgcPjIV3BX8REN51UvwePiojf8mZY1qKfSuwPfrzxAVZ57OB+TojIvpbpk9/zr14M8Pbsr/L1Yf+bNqrfSAAAAACOS5D0n5mHZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMIT6vXlYcPyBrj3XdY8I7zpdPJpZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPhVwAAAP//ZXYNzw==") write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 32.412745s ago: executing program 3 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000008000000950000000000000076d503017495"], 0x0, 0x5}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 31.321780677s ago: executing program 3 (id=277): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = timerfd_create(0x0, 0x800) timerfd_gettime(r3, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 30.800718314s ago: executing program 33 (id=277): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = timerfd_create(0x0, 0x800) timerfd_gettime(r3, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 7.67587621s ago: executing program 2 (id=323): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES8], 0x0, 0x34, 0x0, 0x1}, 0x28) syz_io_uring_setup(0x8007b6, &(0x7f0000000080)={0x0, 0x6273, 0x1000, 0x3, 0x400000}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r1, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/249, 0xf9, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000200df0c240a25d3a7caef4b"], &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x6, 0x7, 0x8000}, 0x10, r2, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, r0], &(0x7f0000000880)}, 0x94) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r7) 6.413009935s ago: executing program 1 (id=324): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r2}, 0x10) 6.268046133s ago: executing program 2 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000440), 0x1001) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) fanotify_init(0x2, 0x8000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x68) fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x0, 0xf}, 0x28) gettimeofday(0x0, 0xfffffffffffffffe) r8 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6277, 0x8, 0xffffffff, 0x400000}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_enter(r8, 0x1, 0x21, 0x1, 0x0, 0x0) 5.239033587s ago: executing program 2 (id=326): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x4) io_uring_setup(0x1694, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) 5.117212673s ago: executing program 1 (id=327): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x4) io_uring_setup(0x1694, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) 4.237165109s ago: executing program 2 (id=328): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x4) io_uring_setup(0x1694, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) 3.232598662s ago: executing program 1 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000440), 0x1001) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) fanotify_init(0x2, 0x8000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x68) fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x0, 0xf}, 0x28) gettimeofday(0x0, 0xfffffffffffffffe) r8 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6277, 0x8, 0xffffffff, 0x400000}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_enter(r8, 0x1, 0x21, 0x1, 0x0, 0x0) 2.240979493s ago: executing program 1 (id=330): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x124) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='^\x00', &(0x7f0000000080)='./file0\x00', r0) 2.136426349s ago: executing program 2 (id=331): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES8], 0x0, 0x34, 0x0, 0x1}, 0x28) syz_io_uring_setup(0x8007b6, &(0x7f0000000080)={0x0, 0x6273, 0x1000, 0x3, 0x400000}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r1, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/249, 0xf9, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000200df0c240a25d3a7caef4b"], &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x6, 0x7, 0x8000}, 0x10, r2, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, r0], &(0x7f0000000880)}, 0x94) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r7) 1.208983787s ago: executing program 1 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000440), 0x1001) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) fanotify_init(0x2, 0x8000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x68) fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x0, 0xf}, 0x28) gettimeofday(0x0, 0xfffffffffffffffe) r8 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6277, 0x8, 0xffffffff, 0x400000}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_enter(r8, 0x1, 0x21, 0x1, 0x0, 0x0) 1.119965402s ago: executing program 2 (id=333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4401000010000100000000000000000064010101000000000000000000000000e00000020000000000000000000000000000f6b9fffe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000001740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='ext4\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 109.264784ms ago: executing program 1 (id=334): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x4) io_uring_setup(0x1694, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) 0s ago: executing program 4 (id=271): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 80.586697][ T5753] cgroup: Unknown subsys name 'net' [ 80.728543][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.432442][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.163373][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.171748][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.187924][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.199492][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.200019][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.214463][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.219724][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.224290][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.240905][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.248849][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.250019][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.263229][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.268916][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.280426][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.288489][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.295772][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.301126][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.306708][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.317125][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.321082][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.331518][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.339787][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.351005][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.358985][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.861273][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 84.898014][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 84.944931][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 85.038894][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 85.156464][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.164999][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.172757][ T5767] bridge_slave_0: entered allmulticast mode [ 85.180311][ T5767] bridge_slave_0: entered promiscuous mode [ 85.189078][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.198007][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.206865][ T5766] bridge_slave_0: entered allmulticast mode [ 85.215528][ T5766] bridge_slave_0: entered promiscuous mode [ 85.252541][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.259953][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.267686][ T5767] bridge_slave_1: entered allmulticast mode [ 85.275314][ T5767] bridge_slave_1: entered promiscuous mode [ 85.282945][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.290263][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.297467][ T5766] bridge_slave_1: entered allmulticast mode [ 85.305512][ T5766] bridge_slave_1: entered promiscuous mode [ 85.326563][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.333800][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.341237][ T5769] bridge_slave_0: entered allmulticast mode [ 85.348692][ T5769] bridge_slave_0: entered promiscuous mode [ 85.392887][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.400304][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.407592][ T5769] bridge_slave_1: entered allmulticast mode [ 85.414925][ T5769] bridge_slave_1: entered promiscuous mode [ 85.446344][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.453747][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.461390][ T5765] bridge_slave_0: entered allmulticast mode [ 85.468914][ T5765] bridge_slave_0: entered promiscuous mode [ 85.498982][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.508968][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.517365][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.526546][ T5765] bridge_slave_1: entered allmulticast mode [ 85.534424][ T5765] bridge_slave_1: entered promiscuous mode [ 85.553291][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.565809][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.577619][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.618836][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.639223][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.664047][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.675422][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.698324][ T5766] team0: Port device team_slave_0 added [ 85.731988][ T5767] team0: Port device team_slave_0 added [ 85.740579][ T5766] team0: Port device team_slave_1 added [ 85.771187][ T5765] team0: Port device team_slave_0 added [ 85.791529][ T5769] team0: Port device team_slave_0 added [ 85.808743][ T5767] team0: Port device team_slave_1 added [ 85.826532][ T5765] team0: Port device team_slave_1 added [ 85.846628][ T5769] team0: Port device team_slave_1 added [ 85.875367][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.882457][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.908891][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.932420][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.941723][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.969408][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.993144][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.000265][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.026574][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.055740][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.062848][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.096837][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.108874][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.118871][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.148037][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.167322][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.174391][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.200373][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.213089][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.220218][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.246313][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.276614][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.283887][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.310142][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.373307][ T5765] hsr_slave_0: entered promiscuous mode [ 86.380415][ T5765] hsr_slave_1: entered promiscuous mode [ 86.390549][ T5781] Bluetooth: hci3: command tx timeout [ 86.396246][ T5781] Bluetooth: hci0: command tx timeout [ 86.402431][ T5778] Bluetooth: hci2: command tx timeout [ 86.408355][ T5778] Bluetooth: hci1: command tx timeout [ 86.425889][ T5766] hsr_slave_0: entered promiscuous mode [ 86.432648][ T5766] hsr_slave_1: entered promiscuous mode [ 86.439022][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.446967][ T5766] Cannot create hsr debugfs directory [ 86.504634][ T5769] hsr_slave_0: entered promiscuous mode [ 86.511773][ T5769] hsr_slave_1: entered promiscuous mode [ 86.518062][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.526396][ T5769] Cannot create hsr debugfs directory [ 86.555282][ T5767] hsr_slave_0: entered promiscuous mode [ 86.562338][ T5767] hsr_slave_1: entered promiscuous mode [ 86.568656][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.576465][ T5767] Cannot create hsr debugfs directory [ 87.021621][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.036250][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.052966][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.066128][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.246537][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.270152][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.313440][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.358191][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.412184][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.458972][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.485715][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.518015][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.546843][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.584803][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.675619][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.683070][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.720097][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.727410][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.762302][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.774760][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.800358][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.811134][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.942886][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.982793][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.027603][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.034951][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.045637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.052881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.145919][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.227030][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.256575][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.271877][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.279085][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.326674][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.333937][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.363209][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.396071][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.403319][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.433535][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.440790][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.472655][ T5778] Bluetooth: hci1: command tx timeout [ 88.478249][ T5778] Bluetooth: hci0: command tx timeout [ 88.481880][ T5781] Bluetooth: hci2: command tx timeout [ 88.489722][ T5778] Bluetooth: hci3: command tx timeout [ 88.497474][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.767048][ T5766] veth0_vlan: entered promiscuous mode [ 88.812653][ T5766] veth1_vlan: entered promiscuous mode [ 88.845594][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.953285][ T5766] veth0_macvtap: entered promiscuous mode [ 88.991390][ T5766] veth1_macvtap: entered promiscuous mode [ 89.037528][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.083979][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.098499][ T5765] veth0_vlan: entered promiscuous mode [ 89.125824][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.149967][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158707][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.168095][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.208361][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.224684][ T5765] veth1_vlan: entered promiscuous mode [ 89.336568][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.362528][ T5765] veth0_macvtap: entered promiscuous mode [ 89.392393][ T5769] veth0_vlan: entered promiscuous mode [ 89.415816][ T5765] veth1_macvtap: entered promiscuous mode [ 89.448691][ T5769] veth1_vlan: entered promiscuous mode [ 89.475974][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.494765][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.516025][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.528641][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.542046][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.573717][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.586141][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.600459][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.645271][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.656662][ T5769] veth0_macvtap: entered promiscuous mode [ 89.663046][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.675416][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.684873][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.694980][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.704651][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.766438][ T5767] veth0_vlan: entered promiscuous mode [ 89.780118][ T5769] veth1_macvtap: entered promiscuous mode [ 89.843930][ T5767] veth1_vlan: entered promiscuous mode [ 89.900165][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.929888][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.941796][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.953537][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.967465][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.014044][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.028326][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.049184][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.064707][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.077974][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.121318][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.134025][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.144691][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.164726][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.186904][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.209730][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.444797][ T5767] veth0_macvtap: entered promiscuous mode [ 90.456307][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.468646][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.530690][ T5767] veth1_macvtap: entered promiscuous mode [ 90.550836][ T5778] Bluetooth: hci2: command tx timeout [ 90.550858][ T5773] Bluetooth: hci3: command tx timeout [ 90.557105][ T5778] Bluetooth: hci0: command tx timeout [ 90.566633][ T5781] Bluetooth: hci1: command tx timeout [ 90.621597][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.633281][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.634357][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.643294][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.643330][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.643340][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.643353][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.647897][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.729368][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.766858][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.783943][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.801122][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.811170][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.819740][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.830762][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.847750][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.858901][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.888921][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.939166][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.967899][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.984842][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.994379][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.018984][ T5844] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.588536][ T5860] syz.0.7[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.634376][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.661382][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.672151][ T5860] loop0: detected capacity change from 0 to 512 [ 91.756056][ T5860] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.7: inode has both inline data and extents flags [ 91.831275][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.839180][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.857771][ T5860] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.7: couldn't read orphan inode 15 (err -117) [ 91.903055][ T5860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.985266][ T5864] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.134655][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.263823][ T786] cfg80211: failed to load regulatory.db [ 92.311660][ T5866] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 92.596126][ T5849] syz.3.6: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 92.629994][ T5773] Bluetooth: hci3: command tx timeout [ 92.635499][ T5773] Bluetooth: hci1: command tx timeout [ 92.641095][ T5781] Bluetooth: hci0: command tx timeout [ 92.642146][ T5778] Bluetooth: hci2: command tx timeout [ 92.679625][ T5849] CPU: 1 PID: 5849 Comm: syz.3.6 Not tainted syzkaller #0 [ 92.686958][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.697092][ T5849] Call Trace: [ 92.700439][ T5849] [ 92.703428][ T5849] dump_stack_lvl+0x18c/0x250 [ 92.708200][ T5849] ? show_regs_print_info+0x20/0x20 [ 92.713501][ T5849] ? load_image+0x420/0x420 [ 92.718076][ T5849] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 92.724558][ T5849] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 92.731134][ T5849] warn_alloc+0x246/0x340 [ 92.735548][ T5849] ? zone_watermark_ok_safe+0x230/0x230 [ 92.741170][ T5849] ? _raw_spin_unlock+0x28/0x40 [ 92.746088][ T5849] ? netlink_rcv_skb+0x241/0x4d0 [ 92.751095][ T5849] __vmalloc_node_range+0x662/0x1330 [ 92.756547][ T5849] ? __asan_memset+0x22/0x40 [ 92.761236][ T5849] ? free_vm_area+0x50/0x50 [ 92.765808][ T5849] ? kvmalloc_node+0x70/0x180 [ 92.770561][ T5849] ? rcu_is_watching+0x15/0xb0 [ 92.775376][ T5849] ? kvmalloc_node+0x70/0x180 [ 92.780093][ T5849] ? trace_kmalloc+0x1f/0x90 [ 92.784724][ T5849] kvmalloc_node+0x13f/0x180 [ 92.789357][ T5849] ? hash_ipportnet6_resize+0x28f/0x1e50 [ 92.795037][ T5849] hash_ipportnet6_resize+0x28f/0x1e50 [ 92.800553][ T5849] ? lockdep_hardirqs_on+0x98/0x150 [ 92.805802][ T5849] call_ad+0x454/0xb40 [ 92.809924][ T5849] ? ip_set_ad+0x9c0/0x9c0 [ 92.814393][ T5849] ? __nla_parse+0x40/0x50 [ 92.818862][ T5849] ip_set_ad+0x81a/0x9c0 [ 92.823149][ T5849] ? ip_set_dump_done+0x1e0/0x1e0 [ 92.828206][ T5849] ? rcu_is_watching+0x15/0xb0 [ 92.833047][ T5849] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 92.838109][ T5849] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.844212][ T5849] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 92.849473][ T5849] ? nfnetlink_unbind+0x160/0x160 [ 92.854554][ T5849] ? __dev_queue_xmit+0x19a3/0x3660 [ 92.859791][ T5849] ? __netlink_deliver_tap+0x5ab/0x830 [ 92.865293][ T5849] ? netlink_deliver_tap+0x19c/0x1b0 [ 92.870617][ T5849] ? netlink_unicast+0x72c/0x8d0 [ 92.875594][ T5849] ? netlink_sendmsg+0x8d0/0xbf0 [ 92.880566][ T5849] ? ____sys_sendmsg+0x5ba/0x960 [ 92.885715][ T5849] ? ___sys_sendmsg+0x2a6/0x360 [ 92.890621][ T5849] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 92.895671][ T5849] ? do_syscall_64+0x55/0xa0 [ 92.900302][ T5849] netlink_rcv_skb+0x241/0x4d0 [ 92.905107][ T5849] ? nfnetlink_unbind+0x160/0x160 [ 92.910164][ T5849] ? netlink_ack+0x1180/0x1180 [ 92.914976][ T5849] ? apparmor_capable+0x137/0x1a0 [ 92.920035][ T5849] ? bpf_lsm_capable+0x9/0x10 [ 92.924753][ T5849] ? security_capable+0x89/0xb0 [ 92.929650][ T5849] nfnetlink_rcv+0x2c9/0x24a0 [ 92.934537][ T5849] ? __local_bh_enable_ip+0x13a/0x1c0 [ 92.939937][ T5849] ? lockdep_hardirqs_on+0x98/0x150 [ 92.945195][ T5849] ? __local_bh_enable_ip+0x13a/0x1c0 [ 92.950604][ T5849] ? _local_bh_enable+0xa0/0xa0 [ 92.955482][ T5849] ? __dev_queue_xmit+0x265/0x3660 [ 92.960630][ T5849] ? __dev_queue_xmit+0x265/0x3660 [ 92.965772][ T5849] ? __dev_queue_xmit+0x1b2c/0x3660 [ 92.971005][ T5849] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 92.976590][ T5849] ? __dev_queue_xmit+0x265/0x3660 [ 92.981748][ T5849] ? ref_tracker_free+0x690/0x840 [ 92.986812][ T5849] ? refcount_inc+0x70/0x70 [ 92.991346][ T5849] ? __asan_memcpy+0x40/0x70 [ 92.995970][ T5849] ? __skb_clone+0x63/0x790 [ 93.000505][ T5849] ? __skb_clone+0x480/0x790 [ 93.005140][ T5849] ? __netlink_deliver_tap+0x7e8/0x830 [ 93.010639][ T5849] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.015884][ T5849] ? __lock_acquire+0x7d40/0x7d40 [ 93.020951][ T5849] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.026200][ T5849] netlink_unicast+0x751/0x8d0 [ 93.031031][ T5849] netlink_sendmsg+0x8d0/0xbf0 [ 93.035877][ T5849] ? netlink_getsockopt+0x590/0x590 [ 93.041124][ T5849] ? aa_sock_msg_perm+0x94/0x150 [ 93.046101][ T5849] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 93.051435][ T5849] ? security_socket_sendmsg+0x80/0xa0 [ 93.056925][ T5849] ? netlink_getsockopt+0x590/0x590 [ 93.062167][ T5849] ____sys_sendmsg+0x5ba/0x960 [ 93.066973][ T5849] ? __asan_memset+0x22/0x40 [ 93.071598][ T5849] ? __sys_sendmsg_sock+0x30/0x30 [ 93.076657][ T5849] ? __import_iovec+0x5f2/0x850 [ 93.081544][ T5849] ? import_iovec+0x73/0xa0 [ 93.086080][ T5849] ___sys_sendmsg+0x2a6/0x360 [ 93.090793][ T5849] ? __sys_sendmsg+0x2a0/0x2a0 [ 93.095626][ T5849] __se_sys_sendmsg+0x1c2/0x2b0 [ 93.100513][ T5849] ? __x64_sys_sendmsg+0x80/0x80 [ 93.105501][ T5849] ? lockdep_hardirqs_on+0x98/0x150 [ 93.110745][ T5849] do_syscall_64+0x55/0xa0 [ 93.115194][ T5849] ? clear_bhb_loop+0x40/0x90 [ 93.119941][ T5849] ? clear_bhb_loop+0x40/0x90 [ 93.124664][ T5849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.130594][ T5849] RIP: 0033:0x7ffb9999cdd9 [ 93.135055][ T5849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.154696][ T5849] RSP: 002b:00007ffb9a8c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.163146][ T5849] RAX: ffffffffffffffda RBX: 00007ffb99c15fa0 RCX: 00007ffb9999cdd9 [ 93.171149][ T5849] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 93.179151][ T5849] RBP: 00007ffb99a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 93.187176][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.195184][ T5849] R13: 00007ffb99c16038 R14: 00007ffb99c15fa0 R15: 00007ffed5fb5ed8 [ 93.203388][ T5849] [ 93.306592][ T5849] Mem-Info: [ 93.309912][ T5849] active_anon:5402 inactive_anon:0 isolated_anon:0 [ 93.309912][ T5849] active_file:993 inactive_file:39929 isolated_file:0 [ 93.309912][ T5849] unevictable:768 dirty:1724 writeback:19 [ 93.309912][ T5849] slab_reclaimable:9902 slab_unreclaimable:91853 [ 93.309912][ T5849] mapped:24157 shmem:1361 pagetables:525 [ 93.309912][ T5849] sec_pagetables:0 bounce:0 [ 93.309912][ T5849] kernel_misc_reclaimable:0 [ 93.309912][ T5849] free:1360276 free_pcp:13659 free_cma:0 [ 93.359965][ T5849] Node 0 active_anon:21608kB inactive_anon:0kB active_file:3972kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96628kB dirty:6888kB writeback:60kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10412kB pagetables:2100kB sec_pagetables:0kB all_unreclaimable? no [ 93.402180][ T5849] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:16kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 93.469891][ T5849] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 93.497640][ T5883] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.527895][ T5849] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 93.538040][ T5849] Node 0 DMA32 free:1535048kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21568kB inactive_anon:0kB active_file:3972kB inactive_file:158692kB unevictable:1536kB writepending:6836kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:32972kB local_pcp:18040kB free_cma:0kB [ 93.639790][ T5849] lowmem_reserve[]: 0 0 0 0 0 [ 93.650382][ T5849] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 93.719789][ T5849] lowmem_reserve[]: 0 0 0 0 0 [ 93.724672][ T5849] Node 1 Normal free:3889576kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:24kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23148kB local_pcp:10060kB free_cma:0kB [ 93.801250][ T5849] lowmem_reserve[]: 0 0 0 0 0 [ 93.806075][ T5849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 93.840510][ T5849] Node 0 DMA32: 152*4kB (UME) 81*8kB (UME) 50*16kB (ME) 33*32kB (UME) 18*64kB (UME) 8*128kB (ME) 7*256kB (UM) 5*512kB (M) 5*1024kB (M) 2*2048kB (UM) 370*4096kB (M) = 1534376kB [ 93.887639][ T5849] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 93.936427][ T5849] Node 1 Normal: 260*4kB (UME) 63*8kB (UME) 42*16kB (UME) 40*32kB (UME) 8*64kB (UE) 8*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889576kB [ 93.975134][ T5849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 93.985557][ T5849] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.996164][ T5849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.030828][ T5849] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.049283][ T5849] 42284 total pagecache pages [ 94.103843][ T5849] 1 pages in swap cache [ 94.108095][ T5849] Free swap = 124728kB [ 94.153011][ T5849] Total swap = 124996kB [ 94.162581][ T5849] 2097051 pages RAM [ 94.172453][ T5849] 0 pages HighMem/MovableOnly [ 94.186748][ T5849] 416927 pages reserved [ 94.196707][ T5849] 0 pages cma reserved [ 94.410010][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.411518][ T5910] loop1: detected capacity change from 0 to 40427 [ 95.449772][ T5910] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 95.468832][ T5910] F2FS-fs (loop1): Image doesn't support compression [ 95.495975][ T5910] F2FS-fs (loop1): Image doesn't support compression [ 95.507697][ T5910] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 95.543417][ T5910] F2FS-fs (loop1): invalid crc value [ 95.560705][ T5910] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.710958][ T5910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.884814][ T28] audit: type=1800 audit(1777009624.667:2): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.23" name="file1" dev="loop1" ino=14 res=0 errno=0 [ 95.931322][ T5910] syz.1.23: attempt to access beyond end of device [ 95.931322][ T5910] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 96.064660][ T5943] syz.3.36 uses obsolete (PF_INET,SOCK_PACKET) [ 96.126780][ T5769] syz-executor: attempt to access beyond end of device [ 96.126780][ T5769] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 96.157982][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 96.176599][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 96.303088][ T5948] trusted_key: syz.2.39 sent an empty control message without MSG_MORE. [ 96.701412][ T5957] syzkaller1: entered promiscuous mode [ 96.707209][ T5957] syzkaller1: entered allmulticast mode [ 98.665166][ T5980] Zero length message leads to an empty skb [ 98.714608][ T5808] IPVS: starting estimator thread 0... [ 98.774066][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 98.840677][ T5985] IPVS: using max 18 ests per chain, 43200 per kthread [ 98.978401][ T5991] loop1: detected capacity change from 0 to 64 [ 99.125166][ T5991] overlayfs: upper fs needs to support d_type. [ 99.141752][ T5991] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.148867][ T5991] overlayfs: failed to set xattr on upper [ 99.154850][ T5991] overlayfs: ...falling back to redirect_dir=nofollow. [ 99.162628][ T5991] overlayfs: ...falling back to index=off. [ 99.168481][ T5991] overlayfs: ...falling back to uuid=null. [ 99.315506][ T5769] Trying to free block not in datazone [ 100.138569][ T6000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.049591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 104.039900][ T5813] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.253163][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.446503][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.607142][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.700355][ T5813] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.709881][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.739941][ T5811] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.805603][ T5813] usb 2-1: config 0 descriptor?? [ 104.949458][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 104.997889][ T5811] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.019709][ T5811] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.046846][ T5811] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.060344][ T5811] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.086793][ T5811] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.119371][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.482836][ T5811] usb 3-1: GET_CAPABILITIES returned 0 [ 105.493006][ T5811] usbtmc 3-1:16.0: can't read capabilities [ 105.680516][ T5813] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 105.940498][ T5813] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 106.004277][ T5811] usb 3-1: USB disconnect, device number 2 [ 106.037564][ T5813] usb 2-1: USB disconnect, device number 2 [ 106.172067][ T6067] fido_id[6067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 106.955192][ T5813] IPVS: starting estimator thread 0... [ 107.157688][ T6080] IPVS: using max 16 ests per chain, 38400 per kthread [ 107.647726][ T6093] netlink: 11 bytes leftover after parsing attributes in process `syz.3.79'. [ 108.688812][ T5808] IPVS: starting estimator thread 0... [ 108.789711][ T6116] IPVS: using max 20 ests per chain, 48000 per kthread [ 109.499598][ T5755] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.770139][ T5755] usb 4-1: Using ep0 maxpacket: 8 [ 109.786077][ T5755] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 109.809889][ T5755] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.839656][ T5755] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.873851][ T5755] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.949549][ T5755] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.958679][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.490603][ T5755] usb 4-1: GET_CAPABILITIES returned 0 [ 110.515343][ T5755] usbtmc 4-1:16.0: can't read capabilities [ 110.744358][ T5755] usb 4-1: USB disconnect, device number 2 [ 110.929552][ T6095] warn_alloc: 1 callbacks suppressed [ 110.929568][ T6095] syz.1.81: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 110.967264][ T6095] CPU: 1 PID: 6095 Comm: syz.1.81 Not tainted syzkaller #0 [ 110.974553][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.984670][ T6095] Call Trace: [ 110.988030][ T6095] [ 110.991099][ T6095] dump_stack_lvl+0x18c/0x250 [ 110.995840][ T6095] ? show_regs_print_info+0x20/0x20 [ 111.001137][ T6095] ? load_image+0x420/0x420 [ 111.005706][ T6095] ? __rcu_read_unlock+0x7c/0xd0 [ 111.010708][ T6095] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 111.017270][ T6095] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 111.023830][ T6095] warn_alloc+0x246/0x340 [ 111.028234][ T6095] ? zone_watermark_ok_safe+0x230/0x230 [ 111.033850][ T6095] ? _raw_spin_unlock+0x28/0x40 [ 111.038762][ T6095] ? netlink_rcv_skb+0x241/0x4d0 [ 111.043777][ T6095] __vmalloc_node_range+0x662/0x1330 [ 111.049139][ T6095] ? __asan_memset+0x22/0x40 [ 111.053823][ T6095] ? free_vm_area+0x50/0x50 [ 111.058390][ T6095] ? kvmalloc_node+0x70/0x180 [ 111.063132][ T6095] ? rcu_is_watching+0x15/0xb0 [ 111.067958][ T6095] ? kvmalloc_node+0x70/0x180 [ 111.072693][ T6095] ? trace_kmalloc+0x1f/0x90 [ 111.077404][ T6095] kvmalloc_node+0x13f/0x180 [ 111.082072][ T6095] ? hash_ipportnet6_resize+0x28f/0x1e50 [ 111.087776][ T6095] hash_ipportnet6_resize+0x28f/0x1e50 [ 111.093313][ T6095] ? lockdep_hardirqs_on+0x98/0x150 [ 111.098580][ T6095] call_ad+0x454/0xb40 [ 111.102716][ T6095] ? ip_set_ad+0x9c0/0x9c0 [ 111.107199][ T6095] ? __nla_parse+0x40/0x50 [ 111.111682][ T6095] ip_set_ad+0x81a/0x9c0 [ 111.115991][ T6095] ? ip_set_dump_done+0x1e0/0x1e0 [ 111.121065][ T6095] ? rcu_is_watching+0x15/0xb0 [ 111.125930][ T6095] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 111.131024][ T6095] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.137145][ T6095] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 111.142429][ T6095] ? nfnetlink_unbind+0x160/0x160 [ 111.147674][ T6095] ? __dev_queue_xmit+0x19a3/0x3660 [ 111.152940][ T6095] ? __netlink_deliver_tap+0x5ab/0x830 [ 111.158467][ T6095] ? netlink_deliver_tap+0x19c/0x1b0 [ 111.163819][ T6095] ? netlink_unicast+0x72c/0x8d0 [ 111.168827][ T6095] ? netlink_sendmsg+0x8d0/0xbf0 [ 111.173832][ T6095] ? ____sys_sendmsg+0x5ba/0x960 [ 111.178831][ T6095] ? ___sys_sendmsg+0x2a6/0x360 [ 111.183741][ T6095] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 111.188874][ T6095] ? do_syscall_64+0x55/0xa0 [ 111.193540][ T6095] netlink_rcv_skb+0x241/0x4d0 [ 111.198366][ T6095] ? nfnetlink_unbind+0x160/0x160 [ 111.203458][ T6095] ? netlink_ack+0x1180/0x1180 [ 111.208313][ T6095] ? apparmor_capable+0x137/0x1a0 [ 111.213413][ T6095] ? bpf_lsm_capable+0x9/0x10 [ 111.218149][ T6095] ? security_capable+0x89/0xb0 [ 111.223074][ T6095] nfnetlink_rcv+0x2c9/0x24a0 [ 111.227829][ T6095] ? __local_bh_enable_ip+0x13a/0x1c0 [ 111.233266][ T6095] ? lockdep_hardirqs_on+0x98/0x150 [ 111.238537][ T6095] ? __local_bh_enable_ip+0x13a/0x1c0 [ 111.243968][ T6095] ? _local_bh_enable+0xa0/0xa0 [ 111.248893][ T6095] ? __dev_queue_xmit+0x265/0x3660 [ 111.254063][ T6095] ? __dev_queue_xmit+0x265/0x3660 [ 111.259238][ T6095] ? __dev_queue_xmit+0x1b2c/0x3660 [ 111.264500][ T6095] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 111.270135][ T6095] ? __dev_queue_xmit+0x265/0x3660 [ 111.275367][ T6095] ? ref_tracker_free+0x690/0x840 [ 111.280451][ T6095] ? refcount_inc+0x70/0x70 [ 111.285013][ T6095] ? __asan_memcpy+0x40/0x70 [ 111.289673][ T6095] ? __skb_clone+0x63/0x790 [ 111.294232][ T6095] ? __skb_clone+0x480/0x790 [ 111.298884][ T6095] ? __netlink_deliver_tap+0x7e8/0x830 [ 111.304406][ T6095] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.309687][ T6095] ? __lock_acquire+0x7d40/0x7d40 [ 111.314784][ T6095] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.320060][ T6095] netlink_unicast+0x751/0x8d0 [ 111.324904][ T6095] netlink_sendmsg+0x8d0/0xbf0 [ 111.329747][ T6095] ? netlink_getsockopt+0x590/0x590 [ 111.335012][ T6095] ? aa_sock_msg_perm+0x94/0x150 [ 111.340024][ T6095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 111.345367][ T6095] ? security_socket_sendmsg+0x80/0xa0 [ 111.350891][ T6095] ? netlink_getsockopt+0x590/0x590 [ 111.356166][ T6095] ____sys_sendmsg+0x5ba/0x960 [ 111.361001][ T6095] ? __asan_memset+0x22/0x40 [ 111.365666][ T6095] ? __sys_sendmsg_sock+0x30/0x30 [ 111.370745][ T6095] ? __import_iovec+0x5f2/0x850 [ 111.375672][ T6095] ? import_iovec+0x73/0xa0 [ 111.380242][ T6095] ___sys_sendmsg+0x2a6/0x360 [ 111.384976][ T6095] ? __sys_sendmsg+0x2a0/0x2a0 [ 111.389843][ T6095] __se_sys_sendmsg+0x1c2/0x2b0 [ 111.394759][ T6095] ? __x64_sys_sendmsg+0x80/0x80 [ 111.399769][ T6095] ? lockdep_hardirqs_on+0x98/0x150 [ 111.405037][ T6095] do_syscall_64+0x55/0xa0 [ 111.409548][ T6095] ? clear_bhb_loop+0x40/0x90 [ 111.414284][ T6095] ? clear_bhb_loop+0x40/0x90 [ 111.419021][ T6095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.425010][ T6095] RIP: 0033:0x7f704399cdd9 [ 111.429474][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.449175][ T6095] RSP: 002b:00007f70447cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.457713][ T6095] RAX: ffffffffffffffda RBX: 00007f7043c15fa0 RCX: 00007f704399cdd9 [ 111.465803][ T6095] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 111.473869][ T6095] RBP: 00007f7043a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 111.481941][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.490002][ T6095] R13: 00007f7043c16038 R14: 00007f7043c15fa0 R15: 00007ffd71c99fb8 [ 111.498123][ T6095] [ 111.529929][ T6095] Mem-Info: [ 111.533207][ T6095] active_anon:5936 inactive_anon:0 isolated_anon:0 [ 111.533207][ T6095] active_file:1189 inactive_file:39965 isolated_file:0 [ 111.533207][ T6095] unevictable:768 dirty:163 writeback:0 [ 111.533207][ T6095] slab_reclaimable:9985 slab_unreclaimable:94421 [ 111.533207][ T6095] mapped:24441 shmem:1361 pagetables:555 [ 111.533207][ T6095] sec_pagetables:0 bounce:0 [ 111.533207][ T6095] kernel_misc_reclaimable:0 [ 111.533207][ T6095] free:1362999 free_pcp:6746 free_cma:0 [ 111.581526][ T6095] Node 0 active_anon:23344kB inactive_anon:0kB active_file:4756kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97764kB dirty:648kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10480kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 111.641141][ T6095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 111.674303][ T6095] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.834752][ T6095] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 111.866831][ T6095] Node 0 DMA32 free:1542588kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22504kB inactive_anon:0kB active_file:4756kB inactive_file:158836kB unevictable:1536kB writepending:648kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:6936kB local_pcp:4112kB free_cma:0kB [ 112.223244][ T6095] lowmem_reserve[]: 0 0 0 0 0 [ 112.314835][ T6095] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 112.500513][ T6095] lowmem_reserve[]: 0 0 0 0 0 [ 112.505361][ T6095] Node 1 Normal free:3890876kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22016kB local_pcp:9344kB free_cma:0kB [ 112.581414][ T6095] lowmem_reserve[]: 0 0 0 0 0 [ 112.586266][ T6095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.623525][ T6095] Node 0 DMA32: 2*4kB (UE) 641*8kB (UE) 508*16kB (UME) 159*32kB (UME) 81*64kB (UME) 13*128kB (UME) 15*256kB (UM) 6*512kB (UM) 8*1024kB (UME) 3*2048kB (ME) 365*4096kB (UM) = 1541488kB [ 112.646402][ T6095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 112.662359][ T6095] Node 1 Normal: 265*4kB (UME) 63*8kB (UME) 42*16kB (UME) 62*32kB (UME) 17*64kB (UE) 8*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890876kB [ 112.693871][ T6095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.714621][ T6095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.727474][ T6095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.741816][ T6095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.786759][ T6095] 42515 total pagecache pages [ 112.800919][ T6095] 0 pages in swap cache [ 112.805356][ T6095] Free swap = 124728kB [ 112.828065][ T6095] Total swap = 124996kB [ 112.835592][ T6095] 2097051 pages RAM [ 112.842210][ T6095] 0 pages HighMem/MovableOnly [ 112.847589][ T6095] 416927 pages reserved [ 112.855626][ T6095] 0 pages cma reserved [ 124.099996][ T6240] loop2: detected capacity change from 0 to 40427 [ 124.158826][ T6240] F2FS-fs (loop2): invalid crc value [ 124.196699][ T6240] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.387534][ T6240] F2FS-fs (loop2): Start checkpoint disabled! [ 124.444649][ T6240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 125.444873][ T59] kworker/u4:4: attempt to access beyond end of device [ 125.444873][ T59] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 125.467896][ T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 128.000171][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'. [ 128.009528][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 129.128797][ T6314] block device autoloading is deprecated and will be removed. [ 130.116350][ T6331] loop1: detected capacity change from 0 to 64 [ 131.530944][ T5812] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.765008][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.789934][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.811625][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.841156][ T5812] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.852420][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.900699][ T5812] usb 2-1: config 0 descriptor?? [ 132.405165][ T5812] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 132.453028][ T5812] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.192818][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.200226][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.442841][ T5813] usb 2-1: USB disconnect, device number 3 [ 134.731161][ T6376] binder: 6374:6376 ioctl c0306201 200000000480 returned -14 [ 138.760381][ T6414] loop0: detected capacity change from 0 to 256 [ 138.820994][ T6414] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.907856][ T6423] loop2: detected capacity change from 0 to 128 [ 139.984731][ T6423] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.086385][ T6423] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.672741][ T6423] syz.2.173 (pid 6423) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 141.050525][ T6423] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 141.072870][ T6423] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 141.257407][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.169753][ T6466] binder: 6462:6466 ioctl c0306201 200000000480 returned -14 [ 144.292777][ T6489] loop2: detected capacity change from 0 to 128 [ 144.364373][ T6489] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 147.951565][ T6512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.223169][ T6532] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 153.044902][ T1195] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 153.105753][ T1195] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.296395][ T6623] loop1: detected capacity change from 0 to 64 [ 157.439050][ T28] audit: type=1800 audit(1777009686.217:3): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.225" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 157.533778][ T28] audit: type=1800 audit(1777009686.317:4): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.225" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 159.859579][ T6659] loop1: detected capacity change from 0 to 512 [ 159.931852][ T6659] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 160.062457][ T6659] overlayfs: failed to resolve './file0': -2 [ 160.308695][ T6645] loop0: detected capacity change from 0 to 32768 [ 160.468237][ T6645] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.564205][ T6645] XFS (loop0): Ending clean mount [ 160.585917][ T6645] XFS (loop0): Quotacheck needed: Please wait. [ 160.661717][ T6645] XFS (loop0): Quotacheck: Done. [ 161.017973][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.309688][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 162.317500][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 164.417450][ T6707] Illegal XDP return value 51 on prog (id 9) dev syz_tun, expect packet loss! [ 165.080022][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 166.306217][ T786] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 166.329840][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.369999][ T786] usb 1-1: Product: syz [ 166.374416][ T786] usb 1-1: Manufacturer: syz [ 166.379095][ T786] usb 1-1: SerialNumber: syz [ 167.205952][ T786] usb 1-1: USB disconnect, device number 2 [ 167.278570][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.354330][ T6741] loop2: detected capacity change from 0 to 256 [ 167.449053][ T6741] FAT-fs (loop2): Unrecognized mount option "fmask=0000000080000006675" or missing value [ 167.577994][ T6741] xt_hashlimit: size too large, truncated to 1048576 [ 167.840911][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 167.866975][ T6744] netlink: 'syz.1.258': attribute type 25 has an invalid length. [ 167.894772][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 167.919218][ T6747] process 'syz.0.259' launched './file0' with NULL argv: empty string added [ 168.557443][ T6757] loop0: detected capacity change from 0 to 1024 [ 168.575546][ T6757] EXT4-fs: Ignoring removed bh option [ 168.611102][ T6757] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 168.658722][ T6757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.948436][ T5765] EXT4-fs error (device loop0): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /69/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 169.025692][ T5765] EXT4-fs (loop0): Remounting filesystem read-only [ 169.815734][ T6770] block device autoloading is deprecated and will be removed. [ 169.869934][ T6772] loop1: detected capacity change from 0 to 128 [ 169.920406][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.151151][ T5812] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.166391][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.199821][ T5812] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.377430][ T6775] fido_id[6775]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.443643][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.572716][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.722358][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.804338][ T6779] loop3: detected capacity change from 0 to 128 [ 170.858499][ T6779] ======================================================= [ 170.858499][ T6779] WARNING: The mand mount option has been deprecated and [ 170.858499][ T6779] and is ignored by this kernel. Remove the mand [ 170.858499][ T6779] option from the mount to silence this warning. [ 170.858499][ T6779] ======================================================= [ 171.008349][ T6779] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 171.921066][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.948839][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.963525][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.983351][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.999176][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.009251][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.156945][ T5778] Bluetooth: hci0: command tx timeout [ 174.570651][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.596740][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.614565][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.677634][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.710467][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.727196][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.744830][ T6792] chnl_net:caif_netlink_parms(): no params data found [ 175.624342][ T11] hsr_slave_0: left promiscuous mode [ 175.642559][ T11] hsr_slave_1: left promiscuous mode [ 175.661403][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.675177][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.708561][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.738718][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.761003][ T11] bridge_slave_1: left allmulticast mode [ 175.766728][ T11] bridge_slave_1: left promiscuous mode [ 175.785785][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.809526][ T11] bridge_slave_0: left allmulticast mode [ 175.815337][ T11] bridge_slave_0: left promiscuous mode [ 175.827196][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.905273][ T11] veth1_macvtap: left promiscuous mode [ 175.929830][ T11] veth0_macvtap: left promiscuous mode [ 175.940479][ T11] veth1_vlan: left promiscuous mode [ 175.948575][ T11] veth0_vlan: left promiscuous mode [ 176.237753][ T5778] Bluetooth: hci0: command tx timeout [ 176.596334][ T6866] loop2: detected capacity change from 0 to 512 [ 176.607091][ T6866] EXT4-fs: Ignoring removed oldalloc option [ 176.618907][ T6866] EXT4-fs: Ignoring removed nobh option [ 176.761939][ T6866] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.289: iget: bad extra_isize 90 (inode size 256) [ 176.792580][ T6866] EXT4-fs (loop2): Remounting filesystem read-only [ 176.807609][ T6866] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 176.810296][ T5778] Bluetooth: hci1: command tx timeout [ 176.829510][ T6866] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 176.843338][ T6866] EXT4-fs (loop2): 1 orphan inode deleted [ 176.852250][ T6866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.056731][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.088058][ T11] team0 (unregistering): Port device team_slave_1 removed [ 177.183645][ T11] team0 (unregistering): Port device team_slave_0 removed [ 178.073881][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.180299][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.309407][ T5778] Bluetooth: hci0: command tx timeout [ 178.918401][ T5778] Bluetooth: hci1: command tx timeout [ 179.471787][ T11] bond0 (unregistering): Released all slaves [ 179.782965][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.821435][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.828718][ T6792] bridge_slave_0: entered allmulticast mode [ 179.862572][ T6792] bridge_slave_0: entered promiscuous mode [ 179.895965][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.903796][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.923914][ T6792] bridge_slave_1: entered allmulticast mode [ 179.935486][ T6792] bridge_slave_1: entered promiscuous mode [ 180.073409][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.095991][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.176337][ T6792] team0: Port device team_slave_0 added [ 180.200139][ T6792] team0: Port device team_slave_1 added [ 180.283528][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.341890][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.400908][ T5778] Bluetooth: hci0: command tx timeout [ 180.483369][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.533457][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.549881][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.609424][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.949630][ T5778] Bluetooth: hci1: command tx timeout [ 181.069600][ T11] IPVS: stop unused estimator thread 0... [ 181.275085][ T6792] hsr_slave_0: entered promiscuous mode [ 181.329609][ T6792] hsr_slave_1: entered promiscuous mode [ 181.617249][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 181.801189][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.759023][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.045132][ T5778] Bluetooth: hci1: command tx timeout [ 183.256598][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.616302][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.745994][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.777511][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.799636][ T6826] bridge_slave_0: entered allmulticast mode [ 183.807011][ T6826] bridge_slave_0: entered promiscuous mode [ 183.834680][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.843667][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.851359][ T6826] bridge_slave_1: entered allmulticast mode [ 183.859052][ T6826] bridge_slave_1: entered promiscuous mode [ 183.962523][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.002888][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.186987][ T6792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.273924][ T6826] team0: Port device team_slave_0 added [ 184.294510][ T6826] team0: Port device team_slave_1 added [ 184.305020][ T6792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.352271][ T6792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.364128][ T6792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.471865][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.479472][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.800188][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.264213][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.287271][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.336218][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.643841][ T6826] hsr_slave_0: entered promiscuous mode [ 186.672479][ T6826] hsr_slave_1: entered promiscuous mode [ 186.707796][ T6826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.740237][ T6826] Cannot create hsr debugfs directory [ 187.857012][ T6982] loop2: detected capacity change from 0 to 128 [ 187.968077][ T6967] loop1: detected capacity change from 0 to 32768 [ 188.019953][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.040033][ T6901] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.103636][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.103600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.111071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.275405][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.282655][ T6458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.408494][ T6826] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.485089][ T6826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.961385][ T6826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.252990][ T6826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.346715][ T11] hsr_slave_0: left promiscuous mode [ 190.380680][ T11] hsr_slave_1: left promiscuous mode [ 190.533242][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.588545][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.708503][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.775978][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.870352][ T11] bridge_slave_1: left allmulticast mode [ 190.923539][ T11] bridge_slave_1: left promiscuous mode [ 190.971796][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.032611][ T11] bridge_slave_0: left allmulticast mode [ 191.038764][ T11] bridge_slave_0: left promiscuous mode [ 191.055854][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.143825][ T11] veth1_macvtap: left promiscuous mode [ 191.149863][ T11] veth0_macvtap: left promiscuous mode [ 191.156097][ T11] veth1_vlan: left promiscuous mode [ 191.161746][ T11] veth0_vlan: left promiscuous mode [ 192.477820][ T11] team0 (unregistering): Port device team_slave_1 removed [ 192.535036][ T11] team0 (unregistering): Port device team_slave_0 removed [ 192.591882][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.650731][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.036099][ T11] bond0 (unregistering): Released all slaves [ 193.322487][ T7023] loop1: detected capacity change from 0 to 256 [ 193.417835][ T7023] FAT-fs (loop1): Directory bread(block 64) failed [ 193.438168][ T7023] FAT-fs (loop1): Directory bread(block 65) failed [ 193.545574][ T7023] FAT-fs (loop1): Directory bread(block 66) failed [ 193.677740][ T7023] FAT-fs (loop1): Directory bread(block 67) failed [ 193.832786][ T7023] FAT-fs (loop1): Directory bread(block 68) failed [ 193.971351][ T7023] FAT-fs (loop1): Directory bread(block 69) failed [ 194.127386][ T7023] FAT-fs (loop1): Directory bread(block 70) failed [ 194.258714][ T7023] FAT-fs (loop1): Directory bread(block 71) failed [ 194.278200][ T7023] FAT-fs (loop1): Directory bread(block 72) failed [ 194.315827][ T7023] FAT-fs (loop1): Directory bread(block 73) failed [ 194.316766][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.413180][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.459613][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.467060][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.536029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.543288][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.636971][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.643935][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.863568][ T11] IPVS: stop unused estimator thread 0... [ 194.874229][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.532925][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.747802][ T7079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.749503][ T6792] veth0_vlan: entered promiscuous mode [ 198.993740][ T6792] veth1_vlan: entered promiscuous mode [ 199.466476][ T6792] veth0_macvtap: entered promiscuous mode [ 199.600644][ T6792] veth1_macvtap: entered promiscuous mode [ 199.944573][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.045757][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.057974][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.190790][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.300289][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.445036][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.504653][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.533080][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.565797][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.587630][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.615397][ T6792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.624315][ T6792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.633846][ T6792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.644646][ T6792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.801035][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.808931][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.128614][ T6826] veth0_vlan: entered promiscuous mode [ 202.389128][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.415974][ T6826] veth1_vlan: entered promiscuous mode [ 202.440384][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.515318][ T6826] veth0_macvtap: entered promiscuous mode [ 202.558933][ T6826] veth1_macvtap: entered promiscuous mode [ 202.625024][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.669652][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.689781][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.729023][ T7123] loop2: detected capacity change from 0 to 2048 [ 202.739381][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.811349][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.155938][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.413682][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.546721][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.566559][ T7123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.619354][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.629246][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.651660][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.680652][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.711851][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.729266][ T7123] [ 203.731666][ T7123] ====================================================== [ 203.738718][ T7123] WARNING: possible circular locking dependency detected [ 203.745787][ T7123] syzkaller #0 Not tainted [ 203.750238][ T7123] ------------------------------------------------------ [ 203.757298][ T7123] syz.2.333/7123 is trying to acquire lock: [ 203.763226][ T7123] ffff88805ce3c6c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 203.773063][ T7123] [ 203.773063][ T7123] but task is already holding lock: [ 203.780476][ T7123] ffff88803101cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 203.790572][ T7123] [ 203.790572][ T7123] which lock already depends on the new lock. [ 203.790572][ T7123] [ 203.801022][ T7123] [ 203.801022][ T7123] the existing dependency chain (in reverse order) is: [ 203.810076][ T7123] [ 203.810076][ T7123] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 203.818587][ T7123] percpu_down_read+0x44/0x1a0 [ 203.823935][ T7123] ext4_writepages+0x1a4/0x350 [ 203.829275][ T7123] do_writepages+0x3b3/0x630 [ 203.834441][ T7123] __writeback_single_inode+0x153/0xec0 [ 203.840579][ T7123] writeback_single_inode+0x21f/0x760 [ 203.846530][ T7123] write_inode_now+0x183/0x210 [ 203.851883][ T7123] iput+0x5ae/0x920 [ 203.856255][ T7123] ext4_xattr_block_set+0x273f/0x32b0 [ 203.862196][ T7123] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 203.868667][ T7123] __ext4_expand_extra_isize+0x306/0x400 [ 203.874886][ T7123] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 203.880936][ T7123] ext4_evict_inode+0x7f3/0xea0 [ 203.886387][ T7123] evict+0x4ca/0x8d0 [ 203.890860][ T7123] ext4_orphan_cleanup+0xbec/0x1420 [ 203.896632][ T7123] ext4_fill_super+0x5eea/0x67b0 [ 203.902182][ T7123] get_tree_bdev+0x3f3/0x520 [ 203.907439][ T7123] vfs_get_tree+0x8c/0x280 [ 203.912434][ T7123] do_new_mount+0x24b/0xa40 [ 203.917513][ T7123] __se_sys_mount+0x2e7/0x3d0 [ 203.922777][ T7123] do_syscall_64+0x55/0xa0 [ 203.927785][ T7123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.934260][ T7123] [ 203.934260][ T7123] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 203.941893][ T7123] __lock_acquire+0x2df1/0x7d40 [ 203.947321][ T7123] lock_acquire+0x19e/0x420 [ 203.952403][ T7123] down_write+0x97/0x200 [ 203.957214][ T7123] ext4_destroy_inline_data+0x28/0xe0 [ 203.963186][ T7123] ext4_do_writepages+0x4f0/0x3990 [ 203.968885][ T7123] ext4_writepages+0x1dd/0x350 [ 203.974245][ T7123] do_writepages+0x3b3/0x630 [ 203.979413][ T7123] filemap_fdatawrite_wbc+0x122/0x180 [ 203.985363][ T7123] file_write_and_wait_range+0x197/0x280 [ 203.991557][ T7123] generic_buffers_fsync_noflush+0x6f/0x160 [ 203.998014][ T7123] ext4_sync_file+0x45b/0xd30 [ 204.003248][ T7123] ext4_buffered_write_iter+0x2c0/0x350 [ 204.009344][ T7123] ext4_file_write_iter+0x1d9/0x1880 [ 204.015182][ T7123] vfs_write+0x46c/0x990 [ 204.019979][ T7123] __x64_sys_pwrite64+0x19b/0x230 [ 204.025571][ T7123] do_syscall_64+0x55/0xa0 [ 204.030535][ T7123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.037079][ T7123] [ 204.037079][ T7123] other info that might help us debug this: [ 204.037079][ T7123] [ 204.047343][ T7123] Possible unsafe locking scenario: [ 204.047343][ T7123] [ 204.054846][ T7123] CPU0 CPU1 [ 204.060232][ T7123] ---- ---- [ 204.065619][ T7123] rlock(&sbi->s_writepages_rwsem); [ 204.070942][ T7123] lock(&ei->xattr_sem); [ 204.077824][ T7123] lock(&sbi->s_writepages_rwsem); [ 204.085577][ T7123] lock(&ei->xattr_sem); [ 204.089941][ T7123] [ 204.089941][ T7123] *** DEADLOCK *** [ 204.089941][ T7123] [ 204.098109][ T7123] 2 locks held by syz.2.333/7123: [ 204.103153][ T7123] #0: ffff888030fd8418 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 204.112089][ T7123] #1: ffff88803101cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 204.122584][ T7123] [ 204.122584][ T7123] stack backtrace: [ 204.128541][ T7123] CPU: 1 PID: 7123 Comm: syz.2.333 Not tainted syzkaller #0 [ 204.135858][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.145966][ T7123] Call Trace: [ 204.149270][ T7123] [ 204.152229][ T7123] dump_stack_lvl+0x18c/0x250 [ 204.156954][ T7123] ? load_image+0x420/0x420 [ 204.161527][ T7123] ? show_regs_print_info+0x20/0x20 [ 204.166800][ T7123] ? print_circular_bug+0x12b/0x1a0 [ 204.172052][ T7123] check_noncircular+0x2fc/0x400 [ 204.177080][ T7123] ? print_deadlock_bug+0x5d0/0x5d0 [ 204.182318][ T7123] ? lockdep_lock+0xf5/0x230 [ 204.186968][ T7123] ? _find_first_zero_bit+0xd3/0x100 [ 204.192281][ T7123] __lock_acquire+0x2df1/0x7d40 [ 204.197183][ T7123] ? __lock_acquire+0x7d40/0x7d40 [ 204.202236][ T7123] ? verify_lock_unused+0x140/0x140 [ 204.207471][ T7123] ? is_bpf_text_address+0x28f/0x2a0 [ 204.212784][ T7123] ? is_bpf_text_address+0x26/0x2a0 [ 204.218013][ T7123] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.224123][ T7123] lock_acquire+0x19e/0x420 [ 204.228689][ T7123] ? ext4_destroy_inline_data+0x28/0xe0 [ 204.234296][ T7123] ? __might_sleep+0xe0/0xe0 [ 204.238925][ T7123] ? read_lock_is_recursive+0x20/0x20 [ 204.244334][ T7123] ? stack_trace_save+0xaa/0x100 [ 204.249306][ T7123] ? stack_trace_snprint+0xf0/0xf0 [ 204.254453][ T7123] ? check_noncircular+0x18a/0x400 [ 204.259600][ T7123] ? __might_sleep+0xe0/0xe0 [ 204.264226][ T7123] down_write+0x97/0x200 [ 204.268504][ T7123] ? ext4_destroy_inline_data+0x28/0xe0 [ 204.274082][ T7123] ? down_read_killable+0x340/0x340 [ 204.279305][ T7123] ? lockdep_unlock+0x146/0x2e0 [ 204.284184][ T7123] ? ext4_journal_check_start+0x178/0x250 [ 204.289988][ T7123] ext4_destroy_inline_data+0x28/0xe0 [ 204.295438][ T7123] ext4_do_writepages+0x4f0/0x3990 [ 204.300622][ T7123] ? verify_lock_unused+0x140/0x140 [ 204.305855][ T7123] ? __lock_acquire+0x1347/0x7d40 [ 204.310916][ T7123] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 204.317828][ T7123] ? rcu_read_lock_any_held+0xb4/0x140 [ 204.323325][ T7123] ext4_writepages+0x1dd/0x350 [ 204.328142][ T7123] ? ext4_read_folio+0x2f0/0x2f0 [ 204.333142][ T7123] ? __rwlock_init+0x150/0x150 [ 204.337941][ T7123] ? ext4_da_get_block_prep+0xde1/0x1020 [ 204.343620][ T7123] ? do_raw_spin_unlock+0x121/0x230 [ 204.348859][ T7123] ? ext4_read_folio+0x2f0/0x2f0 [ 204.353831][ T7123] do_writepages+0x3b3/0x630 [ 204.358504][ T7123] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 204.364285][ T7123] ? __lock_acquire+0x7d40/0x7d40 [ 204.369349][ T7123] ? __rwlock_init+0x150/0x150 [ 204.374150][ T7123] ? do_raw_spin_unlock+0x121/0x230 [ 204.379381][ T7123] filemap_fdatawrite_wbc+0x122/0x180 [ 204.384812][ T7123] file_write_and_wait_range+0x197/0x280 [ 204.390478][ T7123] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 204.395930][ T7123] ? __might_sleep+0xe0/0xe0 [ 204.400555][ T7123] ? folio_unlock+0x118/0x2e0 [ 204.405270][ T7123] generic_buffers_fsync_noflush+0x6f/0x160 [ 204.411211][ T7123] ext4_sync_file+0x45b/0xd30 [ 204.415962][ T7123] ? trace_ext4_fsmap_mapping+0x210/0x210 [ 204.421729][ T7123] ? vfs_fsync_range+0x130/0x1a0 [ 204.426877][ T7123] ext4_buffered_write_iter+0x2c0/0x350 [ 204.432466][ T7123] ext4_file_write_iter+0x1d9/0x1880 [ 204.437792][ T7123] ? rcu_read_lock_any_held+0xb4/0x140 [ 204.443319][ T7123] ? ext4_file_read_iter+0x670/0x670 [ 204.448646][ T7123] vfs_write+0x46c/0x990 [ 204.452971][ T7123] ? file_end_write+0x250/0x250 [ 204.457865][ T7123] ? __fget_files+0x43d/0x4b0 [ 204.462589][ T7123] ? __fdget+0x180/0x210 [ 204.466861][ T7123] ? __x64_sys_pwrite64+0xf6/0x230 [ 204.472006][ T7123] __x64_sys_pwrite64+0x19b/0x230 [ 204.477074][ T7123] ? ksys_pwrite64+0x1c0/0x1c0 [ 204.481876][ T7123] ? lockdep_hardirqs_on+0x98/0x150 [ 204.487128][ T7123] do_syscall_64+0x55/0xa0 [ 204.491571][ T7123] ? clear_bhb_loop+0x40/0x90 [ 204.496294][ T7123] ? clear_bhb_loop+0x40/0x90 [ 204.501013][ T7123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.506942][ T7123] RIP: 0033:0x7feb8b39cdd9 [ 204.511388][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.531034][ T7123] RSP: 002b:00007feb8c23a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 204.539479][ T7123] RAX: ffffffffffffffda RBX: 00007feb8b615fa0 RCX: 00007feb8b39cdd9 [ 204.547480][ T7123] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 204.555483][ T7123] RBP: 00007feb8b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 204.563482][ T7123] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 204.571566][ T7123] R13: 00007feb8b616038 R14: 00007feb8b615fa0 R15: 00007ffdf2db0438 [ 204.579583][ T7123] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 204.586009][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.634488][ T6826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.644714][ T7123] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 204.661255][ T6826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.676801][ T6826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.713895][ T6826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.759651][ T7123] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 204.773776][ T7123] EXT4-fs (loop2): This should not happen!! Data will be lost [ 204.773776][ T7123] [ 204.810676][ T7123] EXT4-fs (loop2): Total free blocks count 0 [ 204.856746][ T7123] EXT4-fs (loop2): Free/Dirty block details [ 204.974031][ T7123] EXT4-fs (loop2): free_blocks=4096 [ 204.979542][ T7123] EXT4-fs (loop2): dirty_blocks=48 [ 204.984729][ T7123] EXT4-fs (loop2): Block reservation details [ 204.991100][ T7123] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 205.183036][ T6343] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.996435][ T6792] syz-executor (6792) used greatest stack depth: 20296 bytes left [ 205.997054][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.086578][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.146286][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.216856][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.356564][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.494692][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.645636][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.687164][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.949596][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 206.949913][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 207.838380][ T34] hsr_slave_0: left promiscuous mode [ 207.845093][ T34] hsr_slave_1: left promiscuous mode [ 207.856478][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.864191][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.872373][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.880738][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.888572][ T34] bridge_slave_1: left allmulticast mode [ 207.894655][ T34] bridge_slave_1: left promiscuous mode [ 207.900816][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.911858][ T34] bridge_slave_0: left allmulticast mode [ 207.917571][ T34] bridge_slave_0: left promiscuous mode [ 207.925376][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.939167][ T34] hsr_slave_0: left promiscuous mode [ 207.946899][ T34] hsr_slave_1: left promiscuous mode [ 207.953463][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.966852][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.974946][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.984114][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.993388][ T34] bridge_slave_1: left allmulticast mode [ 207.999088][ T34] bridge_slave_1: left promiscuous mode [ 208.006730][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.017144][ T34] bridge_slave_0: left allmulticast mode [ 208.024578][ T34] bridge_slave_0: left promiscuous mode [ 208.031037][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.046991][ T34] veth1_macvtap: left promiscuous mode [ 208.052644][ T34] veth0_macvtap: left promiscuous mode [ 208.058305][ T34] veth1_vlan: left promiscuous mode [ 208.066245][ T34] veth0_vlan: left promiscuous mode [ 208.078304][ T34] veth1_macvtap: left promiscuous mode [ 208.087036][ T34] veth0_macvtap: left promiscuous mode [ 208.092818][ T34] veth1_vlan: left promiscuous mode [ 208.098179][ T34] veth0_vlan: left promiscuous mode [ 208.485829][ T34] team0 (unregistering): Port device team_slave_1 removed [ 208.514695][ T34] team0 (unregistering): Port device team_slave_0 removed [ 208.557392][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.591482][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.669683][ T34] bond0 (unregistering): Released all slaves [ 208.872609][ T34] team0 (unregistering): Port device team_slave_1 removed [ 208.905427][ T34] team0 (unregistering): Port device team_slave_0 removed [ 208.938726][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.977404][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.058414][ T34] bond0 (unregistering): Released all slaves [ 209.686609][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.747587][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.807264][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.865899][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.794567][ T34] hsr_slave_0: left promiscuous mode [ 210.803844][ T34] hsr_slave_1: left promiscuous mode [ 210.810526][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.818012][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.827254][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.834967][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.842975][ T34] bridge_slave_1: left allmulticast mode [ 210.848684][ T34] bridge_slave_1: left promiscuous mode [ 210.854959][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.864499][ T34] bridge_slave_0: left allmulticast mode [ 210.870631][ T34] bridge_slave_0: left promiscuous mode [ 210.876407][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.890849][ T34] veth1_macvtap: left promiscuous mode [ 210.896432][ T34] veth0_macvtap: left promiscuous mode [ 210.902558][ T34] veth1_vlan: left promiscuous mode [ 210.907874][ T34] veth0_vlan: left promiscuous mode [ 211.205056][ T34] team0 (unregistering): Port device team_slave_1 removed [ 211.247705][ T34] team0 (unregistering): Port device team_slave_0 removed [ 211.283573][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.314269][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.391446][ T34] bond0 (unregistering): Released all slaves [ 211.719864][ T34] IPVS: stop unused estimator thread 0...