last executing test programs: 3m1.649700984s ago: executing program 0 (id=81): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) 3m0.665238248s ago: executing program 0 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0), 0x0) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380), 0x0) 2m59.666800794s ago: executing program 0 (id=86): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES8], 0xde, 0x4b1, &(0x7f0000001d00)="$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") truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x6}]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r7, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 2m53.859196228s ago: executing program 1 (id=95): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x41, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) 2m52.685087628s ago: executing program 1 (id=97): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 2m51.073014207s ago: executing program 1 (id=100): futex(0x0, 0x7, 0x2, 0x0, &(0x7f00000000c0)=0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28101) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4040080) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r4, 0x603, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x0) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 2m50.917560632s ago: executing program 0 (id=103): syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x12, 0x82, 0xe0, 0x8, 0x2040, 0x9301, 0x30eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2d, 0x7, 0x30, 0x5, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0xae, 0x63, 0xb0, 0x8}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x43, 0x0, 0x0) syz_usb_connect$sierra_net(0x5, 0x0, 0x0, 0x0) 2m49.663719352s ago: executing program 1 (id=106): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 2m48.654545448s ago: executing program 1 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m47.257949283s ago: executing program 1 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x18000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0x103, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2m47.116562196s ago: executing program 0 (id=112): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000006b00)={&(0x7f0000006940)=[0x0, &(0x7f00000000c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, 0x0, &(0x7f0000000200)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x5}, &(0x7f0000000340)=@features={{0x4f32494e, 0x6, 0x10}}, 0x0, &(0x7f00000003c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x20000001}, {}, 0x546a}, &(0x7f0000000500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000000540)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000000580)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x6}, &(0x7f00000006c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2m46.853626573s ago: executing program 0 (id=114): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 2m28.926243049s ago: executing program 32 (id=114): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 2m28.281078385s ago: executing program 33 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x18000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0x103, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 47.485317557s ago: executing program 2 (id=378): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000400)=ANY=[], 0x55, 0x1) fallocate(0xffffffffffffffff, 0x3, 0x460e, 0x2) 46.163133241s ago: executing program 2 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x4010) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b5271"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000180)) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x5, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2bbea4138c1bc02d}}}, &(0x7f0000000300)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000640)={r10}) 45.018466889s ago: executing program 2 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x50) gettid() sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x10004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 38.279631677s ago: executing program 2 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="20571a8826a3e1ab4ba1f9d3e9", 0xd}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000240)=[{0x1, 0xfffffffffffffffe, {0x0, 0xff, 0x2}, {0x2, 0xf0}, 0xfd, 0xff}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xb, 0x1}, {0x9, 0xa}, {0x2, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 34.886596562s ago: executing program 2 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 33.975007934s ago: executing program 2 (id=410): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000180)={0x28}) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 17.136037924s ago: executing program 34 (id=410): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000180)={0x28}) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 17.124439484s ago: executing program 4 (id=437): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x5, @empty}, 0x1c) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x59}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_icmp(0xa, 0x2, 0x3a) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000002380)=""/4115, 0x1013}], 0x1, 0x145, 0xfffffffc) 15.009950727s ago: executing program 3 (id=444): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14.044409161s ago: executing program 6 (id=446): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f0000000a40)={[{@init_itable}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000ac0)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = socket$inet(0xa, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x2, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8ac2d78a}}, 0x0, 0x0, 0x36, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {0x0}], 0x2}}], 0x1, 0x4000800) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xffff) 12.718325274s ago: executing program 3 (id=448): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@mcast1, @local, 0x10, 0x16}}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x60000015}) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0xfe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) 12.120180939s ago: executing program 6 (id=450): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$audion(&(0x7f0000000180), 0xfffffbff, 0x800) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 9.937401953s ago: executing program 3 (id=452): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xa, @private1, 0x8}, 0x1c) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.923377789s ago: executing program 4 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), 0x0}, 0x20) 7.721577308s ago: executing program 4 (id=454): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="2f045ee5fe9249ed05b0ec37a721ec81ab367c04eced1ffc7fbe3af84e19dbc6046b923619a06e0b6ae2ebf0ab657d32cff916f0e3da24e4f26306f1c4527a44d729802f3e43485391176c630b0880ed637f5d351048b4203d62b3d96114252d70b4dd8bad5a321aa399", 0x6a}, {&(0x7f00000001c0)="2cf70e049d7ca10c2baa62463c54f8109cb8795a3d7b326bb81c6bc290875437b4a5a3bcbd199c2cbdd4a149005a94946713c9081c76822a626d60fcfac2830c3f1d48ca7bdc14c329b2602e5bb1e920ceeb1a", 0x53}, {&(0x7f0000000380)="31d72a6285c9f0fd", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa873fd7fee7e7e8c22d8b2ff575a", 0xcb}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483beb486531e1289271e9570708af6a5f7263238f654704ccd4235ee47f8511e5e3fe7c89d3bf43af863590301f1ef78", 0x7f}, {0x0}, {&(0x7f0000000a40)="8a0e0f88ac", 0x5}, {&(0x7f0000000a80)="0e5f5a2ebf89", 0x6}], 0x7}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdd}}], 0x48}}, {{&(0x7f0000000cc0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2, &(0x7f0000000ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5d62dc43b74cf", 0xd8}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d9230a6a294dbf3330b81f715b1ef502a434a85", 0xb4}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3bb894cdbfd1b53f85f80", 0xd8}, {&(0x7f00000012c0)="99b8979ec0fd5f721da667032cfc1f89a347faf9add0ff5faf7646e11e7526e29ac69c528df4de7e7bf50f40936336f6ab62d3b3e3", 0x35}, {&(0x7f0000001300)="88c28a2a8af39ce81f3b350e8d029b409bacf181a71c0d4559cb976dff2a1a381136daa1f0d4151e9203490eb924a37eb0c0501b733da3f2fed08209d65894a599168cb9e265b8cad73cac6480b00997024978d84171219077b3bd", 0x5b}, {&(0x7f0000001380)="19a8e41759f18c32758fc71f3c2d66a728219818f0ffe3e8601b4deb0e905eacc062d86a8cb2790444792b482646bd43f7d5b62bad22a5e981f01fafa9d5d5dd164970fe66bd83ef7c79a8cc8a7a2761acf1985d9318f84e8deddc763e737033da7dd91e7afbb686a0e8c2828747f37cc0aeca57c26f787cdb0023b2267521a6663e6aa1b317d646c4eb7e2f254bf8c04e1d4314fda26cf01f52bc5cc77b3850478fae6e0aea2ede6b343681bfe61884d63326b190c6043280147c7928a79c77e892d4c110585b", 0xc7}, {&(0x7f0000001480)}], 0x7}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000016c0)="7e8e8941827e99d258271d4d2b0e7660010d61882519e06baa1a850606a2a3942c", 0x21}], 0x1}}], 0x6, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.63521101s ago: executing program 5 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x4010) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b5271"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000640)) 7.573202262s ago: executing program 6 (id=456): futex(0x0, 0x7, 0x2, 0x0, &(0x7f00000000c0)=0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28101) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4040080) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r4, 0x603, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x0) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 7.551295743s ago: executing program 3 (id=457): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x18000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0x103, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 7.279192s ago: executing program 4 (id=458): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.520572589s ago: executing program 5 (id=459): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f0000000a40)={[{@init_itable}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = socket$inet(0xa, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x2, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8ac2d78a}}, 0x0, 0x0, 0x36, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {0x0}], 0x2}}], 0x1, 0x4000800) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xffff) 6.178036717s ago: executing program 6 (id=460): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4) ftruncate(r2, 0x6000000) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r3, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8}) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000740)={0xc, r0, 0x6, 0x0, 0xa697, 0x3}) 5.073393804s ago: executing program 5 (id=461): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@mcast1, @local, 0x10, 0x16}}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x60000015}) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0xfe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) 4.759118362s ago: executing program 6 (id=462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000800000000000000000850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000690f000085000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.361990012s ago: executing program 3 (id=463): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x5, @empty}, 0x1c) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x59}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_icmp(0xa, 0x2, 0x3a) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000002380)=""/4115, 0x1013}], 0x1, 0x145, 0xfffffffc) 4.345441482s ago: executing program 4 (id=464): mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='44100,48000,88200,96000,176400,192000\x00', 0x25) write(0xffffffffffffffff, &(0x7f0000000900)='44100,48000,88200,96000,176400,192000\x00', 0x25) symlink(&(0x7f0000000a00)='config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000b00)='config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='dummy_udc.0\x00', 0xb) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@nobh}, {@nobh}, {@errors_remount}, {@data_writeback, 0x0}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@nombcache}, {@nobh}, {@resuid}, {@dax_always}, {@nouid32}, {@jqfmt_vfsv1}, {@nodioread_nolock}, {@data_writeback}, {@grpid}], [], 0x2c}, 0x0, 0x523, &(0x7f0000000800)="$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") 4.135229317s ago: executing program 6 (id=465): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$audion(&(0x7f0000000180), 0xfffffbff, 0x800) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) syz_usb_connect(0x2, 0x24, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x23, 0x6b, 0x25, 0x10, 0x681, 0x10, 0x525e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x64, 0x99, 0x10, 0x70, "", [{{0x9, 0x4, 0x7c, 0x66, 0x0, 0xa, 0x65, 0x6d, 0xf2}}]}}]}}, 0x0) 3.364365497s ago: executing program 3 (id=466): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xa, @private1, 0x8}, 0x1c) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.204556011s ago: executing program 5 (id=467): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="2f045ee5fe9249ed05b0ec37a721ec81ab367c04eced1ffc7fbe3af84e19dbc6046b923619a06e0b6ae2ebf0ab657d32cff916f0e3da24e4f26306f1c4527a44d729802f3e43485391176c630b0880ed637f5d351048b4203d62b3d96114252d70b4dd8bad5a321aa399", 0x6a}, {&(0x7f00000001c0)="2cf70e049d7ca10c2baa62463c54f8109cb8795a3d7b326bb81c6bc290875437b4a5a3bcbd199c2cbdd4a149005a94946713c9081c76822a626d60fcfac2830c3f1d48ca7bdc14c329b2602e5bb1e920ceeb1a", 0x53}, {&(0x7f0000000380)="31d72a6285c9f0fd", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa873fd7fee7e7e8c22d8b2ff575a", 0xcb}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483beb486531e1289271e9570708af6a5f7263238f654704ccd4235ee47f8511e5e3fe7c89d3bf43af863590301f1ef78", 0x7f}, {0x0}, {&(0x7f0000000a40)="8a0e0f88ac", 0x5}, {&(0x7f0000000a80)="0e5f5a2ebf89", 0x6}], 0x7}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdd}}], 0x48}}, {{&(0x7f0000000cc0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2, &(0x7f0000000ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5d62dc43b74cf", 0xd8}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d9230a6a294dbf3330b81f715b1ef502a434a85", 0xb4}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3bb894cdbfd1b53f85f80", 0xd8}, {&(0x7f00000012c0)="99b8979ec0fd5f721da667032cfc1f89a347faf9add0ff5faf7646e11e7526e29ac69c528df4de7e7bf50f40936336f6ab62d3b3e3", 0x35}, {&(0x7f0000001300)="88c28a2a8af39ce81f3b350e8d029b409bacf181a71c0d4559cb976dff2a1a381136daa1f0d4151e9203490eb924a37eb0c0501b733da3f2fed08209d65894a599168cb9e265b8cad73cac6480b00997024978d84171219077b3bd", 0x5b}, {&(0x7f0000001380)="19a8e41759f18c32758fc71f3c2d66a728219818f0ffe3e8601b4deb0e905eacc062d86a8cb2790444792b482646bd43f7d5b62bad22a5e981f01fafa9d5d5dd164970fe66bd83ef7c79a8cc8a7a2761acf1985d9318f84e8deddc763e737033da7dd91e7afbb686a0e8c2828747f37cc0aeca57c26f787cdb0023b2267521a6663e6aa1b317d646c4eb7e2f254bf8c04e1d4314fda26cf01f52bc5cc77b3850478fae6e0aea2ede6b343681bfe61884d63326b190c6043280147c7928a79c77e892d4c110585b", 0xc7}, {&(0x7f0000001480)}], 0x7}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000016c0)="7e8e8941827e99d258271d4d2b0e7660010d61882519e06baa1a850606a2a3942c", 0x21}], 0x1}}], 0x6, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 931.140227ms ago: executing program 5 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x4010) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b5271"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000640)) 719.612513ms ago: executing program 4 (id=469): futex(0x0, 0x7, 0x2, 0x0, &(0x7f00000000c0)=0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28101) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4040080) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r4, 0x603, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x0) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 0s ago: executing program 5 (id=470): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f0000000a40)={[{@init_itable}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000ac0)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = socket$inet(0xa, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x2, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8ac2d78a}}, 0x0, 0x0, 0x36, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {0x0}], 0x2}}], 0x1, 0x4000800) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 74.402359][ T4262] cgroup: Unknown subsys name 'net' [ 74.508944][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.983026][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.072479][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.080553][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.094740][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.104306][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.111873][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.121874][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.129840][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.137528][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.145176][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.153887][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.161262][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.168779][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.176797][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.184411][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.192376][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.195854][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.201478][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.210145][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.215016][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.222953][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.229378][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.235062][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.243531][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.249474][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.262512][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.262545][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.277769][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.278906][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.376544][ T4293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.383993][ T4293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.774512][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 78.852282][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 78.937110][ T4290] chnl_net:caif_netlink_parms(): no params data found [ 78.959130][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 78.976250][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 79.047916][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.055848][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.064166][ T4274] device bridge_slave_0 entered promiscuous mode [ 79.078802][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.086101][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.094442][ T4274] device bridge_slave_1 entered promiscuous mode [ 79.102598][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.110454][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.119014][ T4286] device bridge_slave_0 entered promiscuous mode [ 79.154439][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.161583][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.170551][ T4286] device bridge_slave_1 entered promiscuous mode [ 79.225547][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.242334][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.249761][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.259113][ T4290] device bridge_slave_0 entered promiscuous mode [ 79.268608][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.287580][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.300463][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.322213][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.329558][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.338205][ T4290] device bridge_slave_1 entered promiscuous mode [ 79.389509][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.397674][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.406160][ T4276] device bridge_slave_0 entered promiscuous mode [ 79.415856][ T4290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.439633][ T4290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.450396][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.459064][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.467617][ T4282] device bridge_slave_0 entered promiscuous mode [ 79.475729][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.483024][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.491205][ T4276] device bridge_slave_1 entered promiscuous mode [ 79.501069][ T4286] team0: Port device team_slave_0 added [ 79.511921][ T4274] team0: Port device team_slave_0 added [ 79.534563][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.541906][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.553887][ T4282] device bridge_slave_1 entered promiscuous mode [ 79.561573][ T4286] team0: Port device team_slave_1 added [ 79.576439][ T4274] team0: Port device team_slave_1 added [ 79.621089][ T4290] team0: Port device team_slave_0 added [ 79.642766][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.657908][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.667774][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.674812][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.701165][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.714627][ T4290] team0: Port device team_slave_1 added [ 79.721399][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.728775][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.755215][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.768802][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.775958][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.802176][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.815271][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.837871][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.868713][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.875748][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.901945][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.939817][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.950336][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.977249][ T4290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.009424][ T4282] team0: Port device team_slave_0 added [ 80.015966][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.024167][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.050675][ T4290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.074051][ T4282] team0: Port device team_slave_1 added [ 80.091445][ T4276] team0: Port device team_slave_0 added [ 80.123583][ T4286] device hsr_slave_0 entered promiscuous mode [ 80.130484][ T4286] device hsr_slave_1 entered promiscuous mode [ 80.138726][ T4276] team0: Port device team_slave_1 added [ 80.151122][ T4274] device hsr_slave_0 entered promiscuous mode [ 80.158219][ T4274] device hsr_slave_1 entered promiscuous mode [ 80.164829][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.172690][ T4274] Cannot create hsr debugfs directory [ 80.186723][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.194110][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.220450][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.233639][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.240636][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.267216][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.317006][ T4290] device hsr_slave_0 entered promiscuous mode [ 80.323908][ T4293] Bluetooth: hci1: command 0x0409 tx timeout [ 80.330470][ T4290] device hsr_slave_1 entered promiscuous mode [ 80.340162][ T4290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.347854][ T4290] Cannot create hsr debugfs directory [ 80.357353][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.367454][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.393908][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.404565][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 80.404587][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 80.404900][ T4293] Bluetooth: hci0: command 0x0409 tx timeout [ 80.410873][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 80.455519][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.462513][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.489010][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.579608][ T4282] device hsr_slave_0 entered promiscuous mode [ 80.586833][ T4282] device hsr_slave_1 entered promiscuous mode [ 80.594391][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.601989][ T4282] Cannot create hsr debugfs directory [ 80.670666][ T4276] device hsr_slave_0 entered promiscuous mode [ 80.681658][ T4276] device hsr_slave_1 entered promiscuous mode [ 80.688325][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.699744][ T4276] Cannot create hsr debugfs directory [ 80.943195][ T4286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.972177][ T4286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.990198][ T4286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.007144][ T4286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.061414][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.070612][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.085687][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.096611][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.138571][ T4290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.165644][ T4290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.185198][ T4290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.195947][ T4290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.284350][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.308269][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.320166][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.329358][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.342406][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.369865][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.383658][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.398884][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.408167][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.415587][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.435071][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.448545][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.459796][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.486686][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.496196][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.505339][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.512476][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.531876][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.581552][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.607075][ T4286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.618413][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.635647][ T4282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.649418][ T4282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.658811][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.669351][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.679160][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.688868][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.698194][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.706975][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.716375][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.725789][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.734813][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.742654][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.762325][ T4290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.769677][ T4282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.784755][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.811427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.826482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.838725][ T4282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.859821][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.871943][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.888789][ T4290] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.913735][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.933655][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.951067][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.960653][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.967910][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.977161][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.032405][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.043505][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.052599][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.059776][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.070672][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.079603][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.088515][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.095734][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.104748][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.117099][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.162096][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.172083][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.188532][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.200835][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.213768][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.222634][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.232414][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.239665][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.248964][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.260250][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.307545][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.326055][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.335039][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.345667][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.354874][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.367250][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.376564][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.386158][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.400798][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.408676][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 82.417957][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.426813][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.436810][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.446646][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.469933][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.481978][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.489734][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 82.489771][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 82.496425][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 82.502206][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 82.534818][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.544031][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.555031][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.565253][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.573852][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.580988][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.588934][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.597635][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.606244][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.615646][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.624957][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.632071][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.655673][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.683689][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.704724][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.714472][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.724249][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.731795][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.753522][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.772368][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.798019][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.808871][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.818071][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.851165][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.877699][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.887864][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.897499][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.906747][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.916260][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.924680][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.935472][ T4286] device veth0_vlan entered promiscuous mode [ 82.956122][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.983748][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.999791][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.009646][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.025155][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.040965][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.050589][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.059878][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.069320][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.078245][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.093963][ T4286] device veth1_vlan entered promiscuous mode [ 83.130378][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.174355][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.190251][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.200161][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.207367][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.238359][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.261289][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.276838][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.284089][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.297764][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.332415][ T4286] device veth0_macvtap entered promiscuous mode [ 83.348445][ T4286] device veth1_macvtap entered promiscuous mode [ 83.368463][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.377422][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.386950][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.406765][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.441077][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.450833][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.474314][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.518493][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.537872][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.549257][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.564414][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.604468][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.619450][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.646709][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.666960][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.677602][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.688945][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.698268][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.707610][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.717274][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.730316][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.751603][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.789183][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.820041][ T4286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.829644][ T4286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.854190][ T4286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.881228][ T4286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.934168][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.941761][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.963177][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.970801][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.999197][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.042197][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.130739][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.154087][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.230596][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.264777][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.272321][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.302877][ T4290] device veth0_vlan entered promiscuous mode [ 84.310746][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.334909][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.368921][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.378063][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.397398][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.409788][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.455193][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.472186][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.483168][ T4293] Bluetooth: hci1: command 0x040f tx timeout [ 84.514544][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.527377][ T4276] device veth0_vlan entered promiscuous mode [ 84.536170][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.545654][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.554028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.563455][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 84.563474][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 84.569507][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 84.578055][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 84.590489][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.608633][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.625011][ T4290] device veth1_vlan entered promiscuous mode [ 84.669546][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.684780][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.693223][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.701279][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.720613][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.745797][ T4276] device veth1_vlan entered promiscuous mode [ 84.775368][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.799960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.808466][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.827773][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.836826][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.845807][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.854590][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.864225][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.895972][ T4282] device veth0_vlan entered promiscuous mode [ 84.915425][ T4290] device veth0_macvtap entered promiscuous mode [ 84.932525][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.942734][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.953600][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.962167][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.972089][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.982018][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.991270][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.007058][ T4276] device veth0_macvtap entered promiscuous mode [ 85.027040][ T4290] device veth1_macvtap entered promiscuous mode [ 85.037889][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.051240][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.071529][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.101085][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.114417][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.124521][ T4276] device veth1_macvtap entered promiscuous mode [ 85.140247][ T4282] device veth1_vlan entered promiscuous mode [ 85.152265][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.164320][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.176353][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.190306][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.297141][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.320857][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.337252][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.347660][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.365142][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.390720][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.422064][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.436913][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.450732][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.472500][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.484394][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.504910][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.515760][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.526231][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.540148][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.550703][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.565564][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.601110][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.611170][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.639802][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.648957][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.670545][ T4290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.680401][ T4290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.697983][ T4290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.708636][ T4290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.751621][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.761532][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.771187][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.780165][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.808806][ T4282] device veth0_macvtap entered promiscuous mode [ 85.866414][ T4274] device veth0_vlan entered promiscuous mode [ 85.919381][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.950892][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.990039][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.999016][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.007739][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.021533][ T4274] device veth1_vlan entered promiscuous mode [ 86.042559][ T4282] device veth1_macvtap entered promiscuous mode [ 86.058495][ T4372] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 86.075816][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.083925][ T4372] udc dummy_udc.0: failed to start g1: -19 [ 86.093609][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.119381][ T4371] loop1: detected capacity change from 0 to 512 [ 86.146092][ T4372] UDC core: g1: couldn't find an available UDC or it's busy [ 86.150357][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.166162][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.177627][ T4371] ======================================================= [ 86.177627][ T4371] WARNING: The mand mount option has been deprecated and [ 86.177627][ T4371] and is ignored by this kernel. Remove the mand [ 86.177627][ T4371] option from the mount to silence this warning. [ 86.177627][ T4371] ======================================================= [ 86.180694][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.228499][ T4371] EXT4-fs: Ignoring removed nobh option [ 86.234281][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.241666][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.246691][ T4371] EXT4-fs: Ignoring removed nobh option [ 86.258472][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.269430][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.279950][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.292078][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.316043][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.327699][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.329729][ T4371] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 86.343262][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.355003][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.374815][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.392383][ T4274] device veth0_macvtap entered promiscuous mode [ 86.403767][ T4371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 86.411836][ T4371] System zones: 1-12 [ 86.418334][ T4371] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.425249][ T4371] EXT4-fs error (device loop1): __ext4_iget:5102: inode #11: block 1042: comm syz.1.6: invalid block [ 86.440423][ T4371] EXT4-fs (loop1): Remounting filesystem read-only [ 86.447361][ T4371] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.6: couldn't read orphan inode 11 (err -117) [ 86.454943][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.472101][ T4371] EXT4-fs (loop1): Remounting filesystem read-only [ 86.478997][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.501477][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.523112][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.534122][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.544901][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.555637][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.565602][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 86.584693][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.596722][ T4274] device veth1_macvtap entered promiscuous mode [ 86.639178][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.647805][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 86.647838][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 86.653869][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 86.654107][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 86.655827][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.702952][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.711223][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.713990][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.726354][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.740622][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.749870][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.759807][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.769267][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.825566][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 86.851715][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.864932][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.881962][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.899872][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.910913][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.921263][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.933288][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.947084][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.970169][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.983351][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.006274][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.020893][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.044741][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.054315][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.064882][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.081247][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.098167][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.108725][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.131122][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.153942][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.170032][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.180845][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.197238][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.211639][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.233023][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.242086][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.254027][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.261891][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.300456][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.316386][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.331913][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.341503][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.359517][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.449805][ T4279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.557418][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.615151][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.663047][ T4279] usb 2-1: Using ep0 maxpacket: 32 [ 87.675185][ T4279] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 88.522851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.542822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.552819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.562817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.572818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.582816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.592819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.602815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.612815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.623916][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.665679][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 88.766528][ T4279] usb 2-1: Product: syz [ 88.806539][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.825544][ T4279] usb 2-1: Manufacturer: syz [ 88.847314][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.953075][ T4279] usb 2-1: SerialNumber: syz [ 88.978098][ T4279] usb 2-1: config 0 descriptor?? [ 88.987762][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.057497][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.077663][ T4279] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 89.123736][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.131333][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.171930][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.183839][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.215371][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.276175][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.383622][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.861541][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 89.913016][ T26] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 89.924096][ T26] usb 4-1: config 2 has no interface number 0 [ 89.930533][ T26] usb 4-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 89.943430][ T26] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 90.028713][ T26] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 90.116866][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.164340][ T26] usb 4-1: Product: syz [ 90.189123][ T26] usb 4-1: Manufacturer: syz [ 90.221445][ T26] usb 4-1: SerialNumber: syz [ 90.229376][ T14] cfg80211: failed to load regulatory.db [ 90.375540][ T4391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.394820][ T4391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.073334][ T4279] gspca_ov534_9: reg_r err -71 [ 91.562917][ T4279] gspca_ov534_9: Unknown sensor 0000 [ 91.562999][ T4279] ov534_9: probe of 2-1:0.0 failed with error -22 [ 92.092557][ T4426] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.021425][ T4279] usb 2-1: USB disconnect, device number 2 [ 95.160623][ T4434] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 95.199914][ T4434] udc dummy_udc.0: failed to start g1: -19 [ 95.233399][ T4434] UDC core: g1: couldn't find an available UDC or it's busy [ 95.368761][ T26] usb 4-1: probing VID:PID(0424:012C) [ 95.387472][ T26] usb 4-1: vub300 testing BULK IN EndPoint(0) 82 [ 95.410892][ T26] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 95.567979][ T26] vub300: probe of 4-1:2.174 failed with error -22 [ 96.343055][ T26] usb 4-1: USB disconnect, device number 2 [ 96.812850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.946206][ T4459] loop2: detected capacity change from 0 to 128 [ 98.011071][ T4459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.069768][ T4459] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.178469][ T4459] EXT4-fs (loop2): unmounting filesystem. [ 98.352353][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 98.406386][ T4459] loop2: detected capacity change from 0 to 256 [ 98.440229][ T4459] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.726018][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.922453][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 98.936084][ T26] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 99.070328][ T4479] UDC core: g1: couldn't find an available UDC or it's busy [ 99.142876][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.153347][ T26] usb 1-1: config 0 descriptor?? [ 99.200513][ T26] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 100.217210][ T26] gspca_vc032x: reg_w err -71 [ 100.222516][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.228216][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.237876][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.245020][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.251622][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.257288][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.262622][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.268267][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.282909][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.898138][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.903987][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.909577][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.914930][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.920370][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.925722][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.931155][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.972900][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.988576][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 101.012929][ T26] gspca_vc032x: Unknown sensor... [ 101.063106][ T26] vc032x: probe of 1-1:0.0 failed with error -22 [ 101.101777][ T26] usb 1-1: USB disconnect, device number 2 [ 101.403383][ T2185] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.172967][ T2185] usb 5-1: Using ep0 maxpacket: 32 [ 103.281152][ T2185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.711342][ T2185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.721540][ T2185] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.731731][ T2185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.748662][ T2185] usb 5-1: config 0 descriptor?? [ 103.765536][ T2185] hub 5-1:0.0: USB hub found [ 103.964275][ T2185] hub 5-1:0.0: 1 port detected [ 104.338094][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 104.783010][ T4511] Zero length message leads to an empty skb [ 105.599700][ T2185] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 105.635545][ T2185] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 105.735082][ T2185] usbhid 5-1:0.0: can't add hid device: -71 [ 105.741220][ T2185] usbhid: probe of 5-1:0.0 failed with error -71 [ 105.834148][ T2185] usb 5-1: USB disconnect, device number 2 [ 108.154038][ T4529] tipc: Started in network mode [ 108.159210][ T4529] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 108.166809][ T4529] tipc: Enabled bearer , priority 4 [ 109.093531][ T4546] loop0: detected capacity change from 0 to 512 [ 109.194833][ T22] tipc: Node number set to 8432298 [ 112.046504][ T4566] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 113.286139][ T4585] loop0: detected capacity change from 0 to 16 [ 113.334010][ T4584] tipc: Started in network mode [ 113.339179][ T4584] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 113.346543][ T4584] tipc: Enabled bearer , priority 4 [ 113.369885][ T4585] erofs: (device loop0): mounted with root inode @ nid 36. [ 113.406216][ T4585] syz.0.60: attempt to access beyond end of device [ 113.406216][ T4585] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 113.432743][ T4585] syz.0.60: attempt to access beyond end of device [ 113.432743][ T4585] loop0: rw=0, sector=131156, nr_sectors = 1 limit=16 [ 113.485733][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 113.507850][ T4585] syz.0.60: attempt to access beyond end of device [ 113.507850][ T4585] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 113.578677][ T4585] syz.0.60: attempt to access beyond end of device [ 113.578677][ T4585] loop0: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 113.635877][ T4585] syz.0.60: attempt to access beyond end of device [ 113.635877][ T4585] loop0: rw=0, sector=41, nr_sectors = 1 limit=16 [ 113.661936][ T4585] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 114.464045][ T4596] loop3: detected capacity change from 0 to 512 [ 114.472963][ T2185] tipc: Node number set to 8432298 [ 115.695239][ T4603] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 116.056926][ T4625] loop1: detected capacity change from 0 to 512 [ 116.163473][ T4625] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.305039][ T4625] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 116.461816][ T4625] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.70: Corrupt directory, running e2fsck is recommended [ 116.743283][ T4636] se_dev->se_dev_ptr already set for storage object [ 116.824431][ T4625] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 116.992971][ T4625] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.70: corrupted in-inode xattr [ 117.055080][ T4625] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.70: couldn't read orphan inode 15 (err -117) [ 117.077632][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.131138][ T4625] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.166490][ T4625] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 117.210383][ T4625] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.70: Corrupt directory, running e2fsck is recommended [ 117.294614][ T4640] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.359490][ T4640] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 117.376213][ T4640] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.70: Corrupt directory, running e2fsck is recommended [ 117.543354][ T4643] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.588563][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.614776][ T4643] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 117.632858][ T4643] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.70: Corrupt directory, running e2fsck is recommended [ 117.647074][ T4625] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.659792][ T4647] device syzkaller0 entered promiscuous mode [ 117.820900][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.884470][ T26] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 118.078178][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.263187][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.320716][ T26] usb 5-1: Product: syz [ 118.340511][ T26] usb 5-1: Manufacturer: syz [ 118.362826][ T26] usb 5-1: SerialNumber: syz [ 118.448118][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 118.676508][ T4642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.869609][ T4642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.967947][ T26] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 119.093446][ T26] usb 5-1: USB disconnect, device number 3 [ 119.693859][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.914803][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 119.935912][ T26] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 119.987875][ T26] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 120.067017][ T26] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.135912][ T26] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.206544][ T26] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 120.282627][ T26] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.430808][ T26] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.487914][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.636385][ T26] usb 5-1: can't set config #16, error -71 [ 120.755226][ T26] usb 5-1: USB disconnect, device number 4 [ 121.731080][ T4685] loop0: detected capacity change from 0 to 128 [ 121.747054][ T4685] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 122.711747][ T4693] loop4: detected capacity change from 0 to 512 [ 122.841858][ T4693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.871446][ T4693] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.324551][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 124.372988][ T26] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 125.355630][ T26] usb 2-1: config 100 has an invalid interface number: 124 but max is 0 [ 125.394017][ T26] usb 2-1: config 100 has no interface number 0 [ 125.455108][ T26] usb 2-1: config 100 interface 124 has no altsetting 0 [ 125.547855][ T26] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 125.614914][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.668215][ T26] usb 2-1: Product: syz [ 125.700035][ T26] usb 2-1: Manufacturer: syz [ 125.731149][ T26] usb 2-1: SerialNumber: syz [ 127.160857][ T26] idmouse 2-1:100.124: Unable to find bulk-in endpoint. [ 127.222378][ T26] usb 2-1: USB disconnect, device number 3 [ 127.309739][ T4720] loop1: detected capacity change from 0 to 512 [ 128.063345][ T4720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.133736][ T4720] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.95: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3 [ 128.454771][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 128.556911][ T4729] syz.4.96 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.570146][ T4729] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 129.552776][ C0] sched: RT throttling activated [ 130.669169][ T4279] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 132.440645][ T4279] usb 1-1: not running at top speed; connect to a high speed hub [ 132.469211][ T4279] usb 1-1: config 45 has an invalid interface number: 2 but max is 0 [ 132.495758][ T4279] usb 1-1: config 45 has no interface number 0 [ 132.502435][ T4279] usb 1-1: config 45 interface 2 has no altsetting 0 [ 132.579209][ T4279] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 132.599035][ T4279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.616464][ T4279] usb 1-1: Product: syz [ 132.620781][ T4279] usb 1-1: Manufacturer: syz [ 132.625821][ T4279] usb 1-1: SerialNumber: syz [ 132.631973][ T4762] loop3: detected capacity change from 0 to 512 [ 132.665355][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.672244][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.830837][ T4762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.846497][ T4762] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.015571][ T4279] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 134.023888][ T4279] dvb-usb: bulk message failed: -22 (3/0) [ 134.036209][ T4279] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 134.048026][ T4279] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 134.056427][ T4279] usb 1-1: media controller created [ 134.062956][ T4279] dvb-usb: bulk message failed: -22 (5/0) [ 134.068788][ T4279] dvb-usb: MAC address reading failed. [ 134.084565][ T4279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.118443][ T4279] dvb-usb: bulk message failed: -22 (6/0) [ 134.143414][ T4279] dvb-usb: bulk message failed: -22 (6/0) [ 134.149451][ T4279] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 134.162908][ T4777] device syzkaller0 entered promiscuous mode [ 134.195982][ T4783] loop4: detected capacity change from 0 to 512 [ 134.196094][ T4279] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 134.259669][ T4279] dvb-usb: schedule remote query interval to 100 msecs. [ 134.287565][ T4279] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 134.311646][ T4279] usb 1-1: USB disconnect, device number 3 [ 134.323606][ T4280] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.365835][ T4279] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 135.379194][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 140.363118][ T4799] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 140.589660][ T4799] usb 4-1: config 100 has an invalid interface number: 124 but max is 0 [ 140.632099][ T4799] usb 4-1: config 100 has no interface number 0 [ 140.691358][ T4799] usb 4-1: config 100 interface 124 has no altsetting 0 [ 140.835800][ T4799] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 140.948313][ T4799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.033547][ T4799] usb 4-1: Product: syz [ 141.077498][ T4799] usb 4-1: Manufacturer: syz [ 141.133561][ T4799] usb 4-1: SerialNumber: syz [ 143.169735][ T4799] idmouse 4-1:100.124: Unable to find bulk-in endpoint. [ 143.213181][ T4799] usb 4-1: USB disconnect, device number 3 [ 143.389091][ T4839] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 143.412999][ T4839] udc dummy_udc.0: failed to start g1: -19 [ 143.422184][ T4839] UDC core: g1: couldn't find an available UDC or it's busy [ 145.931072][ T4860] loop3: detected capacity change from 0 to 512 [ 147.761685][ T4876] autofs4:pid:4876:autofs_fill_super: called with bogus options [ 149.718836][ T4884] loop2: detected capacity change from 0 to 4096 [ 150.446555][ T4884] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 150.456692][ T14] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 151.626078][ T4880] ntfs3: loop2: failed to convert "c46c" to cp936 [ 154.153840][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.162725][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.170868][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.213792][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.225276][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.232734][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.561986][ T4287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.576746][ T4287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.584745][ T4287] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.604516][ T4287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.612225][ T4287] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.621292][ T4287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.706547][ T4898] mmap: syz.3.142 (4898) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.013486][ T4902] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 155.020431][ T4902] udc dummy_udc.0: failed to start g1: -19 [ 155.051701][ T4902] UDC core: g1: couldn't find an available UDC or it's busy [ 155.289484][ T4344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.918990][ T4344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.323925][ T4292] Bluetooth: hci5: command 0x0409 tx timeout [ 156.638866][ T4344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.651183][ T4292] Bluetooth: hci6: command 0x0409 tx timeout [ 156.934431][ T4344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.954112][ T4915] loop2: detected capacity change from 0 to 512 [ 158.403076][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 158.433507][ T4894] chnl_net:caif_netlink_parms(): no params data found [ 158.605038][ T4932] loop2: detected capacity change from 0 to 2048 [ 158.676233][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.683689][ T4894] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.691812][ T4937] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.723084][ T4292] Bluetooth: hci6: command 0x041b tx timeout [ 158.734568][ T4894] device bridge_slave_0 entered promiscuous mode [ 158.810582][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.822992][ T4894] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.831308][ T4894] device bridge_slave_1 entered promiscuous mode [ 158.883171][ T4896] chnl_net:caif_netlink_parms(): no params data found [ 159.169304][ T4942] loop3: detected capacity change from 0 to 512 [ 159.191291][ T4894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.253424][ T4943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.301112][ T4894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.316627][ T4942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.374043][ T4942] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.390499][ T4943] device syzkaller1 entered promiscuous mode [ 159.481867][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 159.642469][ T4894] team0: Port device team_slave_0 added [ 159.659382][ T4896] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.668064][ T4896] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.688013][ T4896] device bridge_slave_0 entered promiscuous mode [ 159.713176][ T4894] team0: Port device team_slave_1 added [ 159.720565][ T4954] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 159.749489][ T4954] udc dummy_udc.0: failed to start g1: -19 [ 159.758272][ T4896] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.769255][ T4896] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.784155][ T4954] UDC core: g1: couldn't find an available UDC or it's busy [ 159.793756][ T4896] device bridge_slave_1 entered promiscuous mode [ 159.811948][ T4344] tipc: Disabling bearer [ 159.824614][ T4344] tipc: Left network mode [ 159.904339][ T4894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.915635][ T4894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.993675][ T4894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.198932][ T4896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.223449][ T4894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.230444][ T4894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.333023][ T4894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.376148][ T4896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.483295][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 160.552861][ T4799] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.610948][ T4896] team0: Port device team_slave_0 added [ 160.636232][ T4894] device hsr_slave_0 entered promiscuous mode [ 160.657456][ T4894] device hsr_slave_1 entered promiscuous mode [ 160.672890][ T4894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.698438][ T4894] Cannot create hsr debugfs directory [ 160.716151][ T4937] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 160.716921][ T4896] team0: Port device team_slave_1 added [ 160.727471][ T4799] usb 5-1: device descriptor read/64, error -71 [ 160.749727][ T4937] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 160.786570][ T4937] Remounting filesystem read-only [ 160.804115][ T4292] Bluetooth: hci6: command 0x040f tx timeout [ 160.812171][ T4282] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 161.012882][ T4799] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.306782][ T4977] loop2: detected capacity change from 0 to 512 [ 162.327404][ T4896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.352171][ T4896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.514723][ T4896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.526729][ T4799] usb 5-1: device descriptor read/64, error -71 [ 162.562899][ T4292] Bluetooth: hci5: command 0x0419 tx timeout [ 162.653552][ T4799] usb usb5-port1: attempt power cycle [ 162.883003][ T4292] Bluetooth: hci6: command 0x0419 tx timeout [ 163.063112][ T4799] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.444147][ T4896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.451180][ T4896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.486111][ T4799] usb 5-1: device descriptor read/8, error -71 [ 163.563006][ T4330] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 163.576282][ T4896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.553730][ T4330] usb 4-1: config 0 has no interfaces? [ 164.562230][ T4330] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.590884][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.612622][ T4330] usb 4-1: config 0 descriptor?? [ 164.635648][ T4896] device hsr_slave_0 entered promiscuous mode [ 164.651422][ T4999] loop2: detected capacity change from 0 to 512 [ 164.687524][ T4896] device hsr_slave_1 entered promiscuous mode [ 164.717172][ T4896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.742861][ T4896] Cannot create hsr debugfs directory [ 164.757545][ T4999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.782937][ T4999] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.899914][ T128] usb 4-1: USB disconnect, device number 5 [ 165.069949][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 165.644985][ T4344] device hsr_slave_0 left promiscuous mode [ 165.964176][ T4344] device hsr_slave_1 left promiscuous mode [ 166.170138][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.191618][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.226440][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.247262][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.263612][ T4344] device bridge_slave_1 left promiscuous mode [ 166.270936][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.309859][ T5022] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 166.342655][ T5022] udc dummy_udc.0: failed to start g1: -19 [ 166.344891][ T4344] device bridge_slave_0 left promiscuous mode [ 166.365256][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.374888][ T5022] UDC core: g1: couldn't find an available UDC or it's busy [ 166.546322][ T4344] device veth1_macvtap left promiscuous mode [ 166.575994][ T4344] device veth0_macvtap left promiscuous mode [ 166.636836][ T4344] device veth1_vlan left promiscuous mode [ 166.659126][ T4344] device veth0_vlan left promiscuous mode [ 168.039556][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 168.075980][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 168.109917][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.147250][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.398180][ T4344] bond0 (unregistering): Released all slaves [ 168.506741][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 168.774138][ T4894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.784779][ T5038] loop2: detected capacity change from 0 to 512 [ 168.903779][ T4894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.632030][ T4894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 170.332596][ T4894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.362823][ T2185] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.506453][ T4896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.567789][ T2185] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.733526][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 170.831589][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 170.925769][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 171.018863][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 171.112985][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 171.196992][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 171.382879][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 171.413491][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 171.448408][ T2185] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 171.465183][ T2185] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 171.489171][ T2185] usb 5-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 171.510693][ T5061] loop2: detected capacity change from 0 to 512 [ 171.540093][ T4896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.553182][ T2185] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 171.573820][ T2185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.597810][ T2185] usb 5-1: Product: syz [ 171.612438][ T2185] usb 5-1: Manufacturer: syz [ 171.616278][ T4896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.648018][ T2185] usb 5-1: SerialNumber: syz [ 171.656041][ T4896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.666679][ T5061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.685560][ T5049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.694038][ T5049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.701365][ T5049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.708798][ T5061] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.739916][ T5049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.789014][ T5049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.810428][ T5049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.879895][ T5049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.901356][ T5049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.966233][ T2185] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 172.005915][ T4894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.022475][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.059988][ T2185] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 172.069058][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.081511][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 172.118319][ T4894] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.140727][ T2185] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 172.197795][ T2185] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 172.212865][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.221575][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.553007][ T2185] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 173.099849][ T2185] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 173.109671][ T2185] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 173.193120][ T2185] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 173.210060][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.217278][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.244422][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.387195][ T4344] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.439995][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.478463][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.503442][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.510595][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.584939][ T4344] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.610539][ T4330] usb 5-1: USB disconnect, device number 9 [ 173.638912][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.660793][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.681349][ T4330] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 173.707161][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.733038][ T4330] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 173.750707][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.774998][ T4330] keyspan 5-1:1.0: device disconnected [ 173.783535][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.816342][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.837300][ T4896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.852683][ T4894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.877572][ T4894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.898982][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.911442][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.927800][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.937528][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.947033][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.956090][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.026910][ T4344] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.062359][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.080754][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.119554][ T4896] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.190341][ T4344] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.307138][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.340300][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.361033][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.368458][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.390389][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.436993][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.468768][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.511614][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.518864][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.551684][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.620012][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.655056][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.690777][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.720852][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.744536][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.785625][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.870971][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.893812][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.942445][ T4896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.978811][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.017458][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.035608][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.518442][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.689241][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.233180][ T955] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 176.338462][ T4894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.463158][ T955] usb 3-1: Using ep0 maxpacket: 32 [ 176.471854][ T955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.504508][ T955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.533383][ T955] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.570993][ T955] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 176.630204][ T955] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 176.647164][ T5118] loop4: detected capacity change from 0 to 512 [ 176.691644][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.736196][ T955] usb 3-1: Product: syz [ 176.761667][ T955] usb 3-1: Manufacturer: syz [ 176.772337][ T955] usb 3-1: SerialNumber: syz [ 176.814910][ T5118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.847517][ T5118] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.037127][ T955] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 177.063289][ T955] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 177.070768][ T955] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 177.221752][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.235737][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.280930][ T955] usb 3-1: USB disconnect, device number 2 [ 177.338737][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 177.470352][ T4896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.960476][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 179.280763][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.393947][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.906022][ T4344] device hsr_slave_0 left promiscuous mode [ 179.915458][ T4344] device hsr_slave_1 left promiscuous mode [ 180.638302][ T5172] loop2: detected capacity change from 0 to 512 [ 180.753140][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.760743][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.808022][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.864199][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.872117][ T4344] device bridge_slave_1 left promiscuous mode [ 180.873608][ T5172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.889866][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.900887][ T4344] device bridge_slave_0 left promiscuous mode [ 180.907504][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.942953][ T5172] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.031788][ T4344] device veth1_macvtap left promiscuous mode [ 181.048381][ T4344] device veth0_macvtap left promiscuous mode [ 181.059689][ T4344] device veth1_vlan left promiscuous mode [ 181.089049][ T4344] device veth0_vlan left promiscuous mode [ 181.109296][ T27] audit: type=1800 audit(1785330301.091:2): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 181.368620][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 182.016012][ T5182] loop3: detected capacity change from 0 to 512 [ 182.067373][ T5182] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 1: comm syz.3.193: invalid block [ 182.137481][ T5182] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.193: couldn't read orphan inode 11 (err -117) [ 182.157749][ T5182] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 182.346462][ T5182] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.193: Directory hole found for htree leaf block 0 [ 182.459601][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 182.710198][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 182.749170][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 182.788782][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.828327][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.109419][ T4344] bond0 (unregistering): Released all slaves [ 183.238556][ T5162] bridge0: port 3(syz_tun) entered blocking state [ 183.251745][ T5162] bridge0: port 3(syz_tun) entered disabled state [ 183.260621][ T5162] device syz_tun entered promiscuous mode [ 183.268103][ T5162] bridge0: port 3(syz_tun) entered blocking state [ 183.274899][ T5162] bridge0: port 3(syz_tun) entered forwarding state [ 183.293537][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.340213][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.834337][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.037965][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.155317][ T4894] device veth0_vlan entered promiscuous mode [ 184.182393][ T4894] device veth1_vlan entered promiscuous mode [ 184.817713][ T4894] device veth0_macvtap entered promiscuous mode [ 184.865388][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.887769][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.931217][ T4894] device veth1_macvtap entered promiscuous mode [ 184.951880][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.979113][ T27] audit: type=1800 audit(1785330304.961:3): pid=5207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.197" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 184.979876][ T5207] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 185.008975][ T5207] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 185.019330][ T5207] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 185.032546][ T5207] syz.3.197 (5207) used greatest stack depth: 17168 bytes left [ 185.080331][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.120556][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.142851][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.168080][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.179399][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.246680][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.270330][ T4894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.281166][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.341341][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.511642][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.539245][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.559729][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.589826][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.778419][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.032287][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.187302][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.228356][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.268312][ T4894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.376657][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.423813][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.478432][ T4894] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.501243][ T4894] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.538204][ T4894] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.552218][ T4894] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.578534][ T4896] device veth0_vlan entered promiscuous mode [ 186.633733][ T5227] device syzkaller0 entered promiscuous mode [ 186.642418][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.652174][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.679457][ T4896] device veth1_vlan entered promiscuous mode [ 186.693507][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.707896][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.719023][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.971101][ T5246] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 186.992310][ T5246] udc dummy_udc.0: failed to start g1: -19 [ 187.008282][ T5246] UDC core: g1: couldn't find an available UDC or it's busy [ 190.058250][ T5260] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 190.068461][ T27] audit: type=1800 audit(1785330310.041:4): pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.210" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 190.097244][ T5260] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 190.113853][ T5260] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 190.175023][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.191761][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.221690][ T4896] device veth0_macvtap entered promiscuous mode [ 190.263595][ T4896] device veth1_macvtap entered promiscuous mode [ 190.323264][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.331152][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.394780][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.423399][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.444105][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.464923][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.495574][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.516830][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.527023][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.590880][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.615077][ T4896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.776507][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.843809][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.911810][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.995499][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.088435][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.418798][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 191.520442][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.602913][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.631800][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.662899][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.673288][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.692115][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.704042][ T4896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.715657][ T4896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.727082][ T4896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.777413][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.792630][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.872638][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.887618][ T5296] gfs2: gfs2 mount does not exist [ 191.906420][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.918504][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.634807][ T4896] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.680268][ T4896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.397048][ T4896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.717419][ T4896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.986858][ T5312] device syzkaller0 entered promiscuous mode [ 194.087472][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.093906][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.650484][ T4678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.671682][ T4678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.697216][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.740606][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.758763][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.783544][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.910549][ T5360] loop2: detected capacity change from 0 to 512 [ 201.382656][ T5393] device syzkaller0 entered promiscuous mode [ 201.845303][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 201.854701][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 201.861795][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 202.386548][ T5426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.153110][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 204.515546][ T14] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.534605][ T14] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.559546][ T14] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.581034][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.617915][ T5430] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 208.340944][ T22] usb 6-1: USB disconnect, device number 2 [ 211.070103][ T5473] sctp: failed to load transform for md5: -2 [ 214.834311][ T5508] tipc: Enabling of bearer rejected, already enabled [ 215.543804][ T5530] Bluetooth: MGMT ver 1.22 [ 216.066506][ T5536] loop4: detected capacity change from 0 to 2048 [ 216.198704][ T5536] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 216.291786][ T5536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.403234][ T5536] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 216.560702][ T5548] syz.3.274 uses obsolete (PF_INET,SOCK_PACKET) [ 216.691221][ T5552] program syz.6.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.793866][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.844294][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.851957][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.938110][ T5552] device bridge_slave_0 left promiscuous mode [ 216.998772][ T5552] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.469403][ T5552] device bridge_slave_1 left promiscuous mode [ 217.587645][ T5552] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.839932][ T5552] bond0: (slave bond_slave_0): Releasing backup interface [ 217.957031][ T5552] bond0: (slave bond_slave_1): Releasing backup interface [ 218.388830][ T5552] team0: Port device team_slave_0 removed [ 218.437429][ T5552] team0: Port device team_slave_1 removed [ 218.465675][ T5552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.482854][ T5552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.505227][ T5552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.526318][ T5552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.552444][ T5585] tipc: Started in network mode [ 219.557525][ T5585] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 219.565165][ T5585] tipc: Enabled bearer , priority 4 [ 219.852827][ T2185] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 220.045037][ T2185] usb 7-1: config 0 has no interfaces? [ 220.067349][ T2185] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.092953][ T2185] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.145136][ T2185] usb 7-1: config 0 descriptor?? [ 220.377105][ T128] usb 7-1: USB disconnect, device number 2 [ 220.666282][ T5607] loop3: detected capacity change from 0 to 512 [ 220.680687][ T5607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 220.694384][ T2185] tipc: Node number set to 8432298 [ 220.699942][ T5607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.745940][ T5607] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 220.805319][ T5607] EXT4-fs (loop3): 1 truncate cleaned up [ 220.818749][ T5607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 221.637817][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 224.329036][ T128] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 224.558172][ T128] usb 7-1: Using ep0 maxpacket: 32 [ 224.580941][ T128] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 224.648379][ T128] usb 7-1: config 0 has no interface number 0 [ 224.676194][ T128] usb 7-1: config 0 interface 184 has no altsetting 0 [ 224.698825][ T5650] tipc: Enabling of bearer rejected, already enabled [ 224.710042][ T128] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 224.739875][ T128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.763051][ T128] usb 7-1: Product: syz [ 224.785671][ T128] usb 7-1: Manufacturer: syz [ 224.805228][ T128] usb 7-1: SerialNumber: syz [ 224.841532][ T128] usb 7-1: config 0 descriptor?? [ 224.866272][ T128] smsc75xx v1.0.0 [ 225.062964][ T4799] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 225.274135][ T4799] usb 6-1: config 0 has no interfaces? [ 225.280779][ T4799] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.312789][ T4799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.365722][ T4799] usb 6-1: config 0 descriptor?? [ 225.572986][ T128] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 225.600052][ T2185] usb 6-1: USB disconnect, device number 3 [ 225.612961][ T128] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.239359][ T128] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 226.423724][ T128] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 226.555861][ T128] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 226.593310][ T128] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 226.639343][ T128] usb 7-1: USB disconnect, device number 3 [ 228.896430][ T5703] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 228.975784][ T5703] udc dummy_udc.0: failed to start g1: -19 [ 229.076730][ T5707] loop5: detected capacity change from 0 to 512 [ 229.112067][ T5703] UDC core: g1: couldn't find an available UDC or it's busy [ 229.221424][ T5707] EXT4-fs: Ignoring removed nobh option [ 229.291019][ T5707] EXT4-fs: Ignoring removed nobh option [ 229.368129][ T5707] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 229.470340][ T5707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 230.513181][ T5707] System zones: 1-12 [ 230.518264][ T5707] EXT4-fs (loop5): orphan cleanup on readonly fs [ 230.753296][ T5707] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 1042: comm syz.5.306: invalid block [ 230.863953][ T4292] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 231.156733][ T5707] EXT4-fs (loop5): Remounting filesystem read-only [ 231.600164][ T5707] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.306: couldn't read orphan inode 11 (err -117) [ 231.788534][ T5707] EXT4-fs (loop5): Remounting filesystem read-only [ 231.977081][ T5707] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 232.203988][ T4896] EXT4-fs (loop5): unmounting filesystem. [ 232.254200][ T5745] loop2: detected capacity change from 0 to 8 [ 232.355607][ T5745] SQUASHFS error: lzo decompression failed, data probably corrupt [ 232.384293][ T5745] SQUASHFS error: Failed to read block 0x91: -5 [ 232.447785][ T5745] SQUASHFS error: Unable to read metadata cache entry [8f] [ 232.532865][ T5745] SQUASHFS error: Unable to read inode 0x11f [ 232.679566][ T4292] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 234.848665][ T5770] tipc: Started in network mode [ 234.854172][ T5770] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 234.861498][ T5770] tipc: Enabled bearer , priority 4 [ 236.002900][ T2185] tipc: Node number set to 8432298 [ 236.773359][ T5792] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 236.892407][ T5792] udc dummy_udc.0: failed to start g1: -19 [ 236.931729][ T5794] loop5: detected capacity change from 0 to 512 [ 236.961699][ T5792] UDC core: g1: couldn't find an available UDC or it's busy [ 237.101459][ T5794] EXT4-fs: Ignoring removed nobh option [ 237.245726][ T5794] EXT4-fs: Ignoring removed nobh option [ 237.332532][ T5794] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 237.393746][ T5794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 237.401838][ T5794] System zones: 1-12 [ 237.423914][ T5794] EXT4-fs (loop5): orphan cleanup on readonly fs [ 237.449161][ T5794] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 1042: comm syz.5.327: invalid block [ 237.672549][ T5794] EXT4-fs (loop5): Remounting filesystem read-only [ 237.714655][ T5794] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.327: couldn't read orphan inode 11 (err -117) [ 237.737695][ T5794] EXT4-fs (loop5): Remounting filesystem read-only [ 237.744497][ T5794] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 238.616441][ T4896] EXT4-fs (loop5): unmounting filesystem. [ 239.968749][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.338'. [ 241.465908][ T5850] tipc: Enabling of bearer rejected, already enabled [ 242.947780][ T5876] loop5: detected capacity change from 0 to 512 [ 248.138037][ T5935] loop2: detected capacity change from 0 to 512 [ 249.378502][ T5955] loop2: detected capacity change from 0 to 16 [ 249.662324][ T5955] erofs: (device loop2): mounted with root inode @ nid 36. [ 253.848778][ T5998] loop3: detected capacity change from 0 to 512 [ 255.528463][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.539983][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.173004][ T6024] loop6: detected capacity change from 0 to 128 [ 256.180515][ T6024] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.311039][ T6024] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.565956][ T47] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.765246][ T6056] loop4: detected capacity change from 0 to 512 [ 265.356866][ T4799] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 266.127685][ T4799] usb 7-1: config 100 has an invalid interface number: 124 but max is 0 [ 266.216796][ T4799] usb 7-1: config 100 has no interface number 0 [ 266.246724][ T4799] usb 7-1: config 100 interface 124 has no altsetting 0 [ 266.275932][ T6119] loop4: detected capacity change from 0 to 512 [ 266.290940][ T4799] usb 7-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 266.546856][ T4799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.774957][ T4799] usb 7-1: Product: syz [ 266.799571][ T4799] usb 7-1: Manufacturer: syz [ 266.812230][ T4799] usb 7-1: SerialNumber: syz [ 266.840711][ T4799] usb 7-1: can't set config #100, error -71 [ 266.858980][ T4799] usb 7-1: USB disconnect, device number 4 [ 270.469014][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 275.954622][ T6183] loop6: detected capacity change from 0 to 512 [ 278.112893][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 278.121372][ T4287] Bluetooth: hci6: command 0x0406 tx timeout [ 282.045054][ T6234] loop4: detected capacity change from 0 to 512 [ 284.305367][ T6246] loop6: detected capacity change from 0 to 512 [ 284.428520][ T6246] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 284.440849][ T6248] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 284.457938][ T6246] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.489091][ T6248] udc dummy_udc.0: failed to start g1: -19 [ 284.525741][ T6248] UDC core: g1: couldn't find an available UDC or it's busy [ 284.587325][ T6253] loop5: detected capacity change from 0 to 512 [ 284.650575][ T6253] EXT4-fs: Ignoring removed nobh option [ 284.679161][ T6253] EXT4-fs: Ignoring removed nobh option [ 284.720655][ T6253] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 284.751758][ T6253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 284.782983][ T6253] System zones: 1-12 [ 284.788181][ T6253] EXT4-fs (loop5): orphan cleanup on readonly fs [ 284.804721][ T6253] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 1042: comm syz.5.439: invalid block [ 284.819437][ T4894] EXT4-fs (loop6): unmounting filesystem. [ 284.874979][ T6253] EXT4-fs (loop5): Remounting filesystem read-only [ 284.982839][ T6253] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.439: couldn't read orphan inode 11 (err -117) [ 285.019086][ T6253] EXT4-fs (loop5): Remounting filesystem read-only [ 285.036460][ T6253] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 285.282298][ T4896] EXT4-fs (loop5): unmounting filesystem. [ 285.355724][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.365760][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.373657][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.589195][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.601059][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.609634][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.147693][ T4419] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.498954][ T4419] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.804505][ T4322] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 286.916462][ T4419] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.066613][ T4322] usb 4-1: config 0 has no interfaces? [ 287.108213][ T4322] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.274546][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.464596][ T4322] usb 4-1: config 0 descriptor?? [ 287.578503][ T6283] loop6: detected capacity change from 0 to 512 [ 287.607133][ T4419] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.693075][ T4279] usb 4-1: USB disconnect, device number 6 [ 287.733002][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 288.454107][ T4419] tipc: Disabling bearer [ 288.471223][ T4419] tipc: Left network mode [ 288.532358][ T6264] chnl_net:caif_netlink_parms(): no params data found [ 288.671077][ T6302] loop5: detected capacity change from 0 to 512 [ 288.883926][ T6302] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 288.967645][ T6302] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.162489][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.182042][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.190626][ T6264] device bridge_slave_0 entered promiscuous mode [ 289.319612][ T4896] EXT4-fs (loop5): unmounting filesystem. [ 289.493669][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.515831][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.762922][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 290.939451][ T6264] device bridge_slave_1 entered promiscuous mode [ 291.852917][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 292.203945][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.245046][ T6321] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 292.274834][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.284603][ T6321] udc dummy_udc.0: failed to start g1: -19 [ 292.335740][ T6321] UDC core: g1: couldn't find an available UDC or it's busy [ 292.511134][ T6324] loop5: detected capacity change from 0 to 512 [ 292.533862][ T6324] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿa' [ 293.510180][ T6264] team0: Port device team_slave_0 added [ 293.614203][ T6264] team0: Port device team_slave_1 added [ 293.756914][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.933163][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 293.952134][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.739432][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.822097][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.829660][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.856476][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.966681][ T6353] loop5: detected capacity change from 0 to 512 [ 295.099472][ T6355] loop6: detected capacity change from 0 to 512 [ 295.283260][ T6355] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 295.484716][ T6355] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.971820][ T27] audit: type=1800 audit(1785330415.951:5): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.460" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 296.119281][ T27] audit: type=1800 audit(1785330416.071:6): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.460" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 296.176878][ T6264] device hsr_slave_0 entered promiscuous mode [ 296.308085][ T6264] device hsr_slave_1 entered promiscuous mode [ 296.365075][ T4894] EXT4-fs (loop6): unmounting filesystem. [ 297.462035][ T6382] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 297.664818][ T6382] udc dummy_udc.0: failed to start g1: -19 [ 297.671105][ T6382] UDC core: g1: couldn't find an available UDC or it's busy [ 297.871386][ T4419] device hsr_slave_0 left promiscuous mode [ 297.920450][ T4419] device hsr_slave_1 left promiscuous mode [ 297.950888][ T6386] loop4: detected capacity change from 0 to 512 [ 298.006670][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.118833][ T6386] EXT4-fs: Ignoring removed nobh option [ 298.329752][ T4327] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 299.178754][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.466752][ T6386] EXT4-fs: Ignoring removed nobh option [ 299.657037][ T6386] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 299.678601][ T4327] usb 7-1: config 100 has an invalid interface number: 124 but max is 0 [ 299.827302][ T4327] usb 7-1: config 100 has no interface number 0 [ 299.952176][ T4327] usb 7-1: config 100 interface 124 has no altsetting 0 [ 300.026812][ T6386] EXT4-fs: failed to create workqueue [ 300.099158][ T6386] EXT4-fs (loop4): mount failed [ 300.371692][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.379279][ T4327] usb 7-1: string descriptor 0 read error: -71 [ 300.388094][ T4327] usb 7-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 300.399729][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.131265][ T6399] [ 301.133660][ T6399] ====================================================== [ 301.140699][ T6399] WARNING: possible circular locking dependency detected [ 301.147753][ T6399] syzkaller #0 Not tainted [ 301.152192][ T6399] ------------------------------------------------------ [ 301.159239][ T6399] syz.3.466/6399 is trying to acquire lock: [ 301.165164][ T6399] ffff888024d62e58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 301.174898][ T6399] [ 301.174898][ T6399] but task is already holding lock: [ 301.182283][ T6399] ffff888074483510 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 301.193204][ T6399] [ 301.193204][ T6399] which lock already depends on the new lock. [ 301.193204][ T6399] [ 301.203652][ T6399] [ 301.203652][ T6399] the existing dependency chain (in reverse order) is: [ 301.212678][ T6399] [ 301.212678][ T6399] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 301.221398][ T6399] down_write+0x36/0x60 [ 301.226104][ T6399] process_measurement+0x3af/0x1c40 [ 301.231846][ T6399] ima_file_mmap+0xe9/0x140 [ 301.236900][ T6399] __se_sys_remap_file_pages+0x55a/0x7b0 [ 301.243091][ T6399] do_syscall_64+0x4c/0xa0 [ 301.248057][ T6399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.254496][ T6399] [ 301.254496][ T6399] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 301.262124][ T6399] __lock_acquire+0x2d18/0x7c40 [ 301.267523][ T6399] lock_acquire+0x1bb/0x4a0 [ 301.272574][ T6399] down_read_killable+0x4c/0x340 [ 301.278051][ T6399] mmap_read_lock_killable+0x1d/0x60 [ 301.283873][ T6399] lock_mm_and_find_vma+0x2b1/0x2f0 [ 301.289617][ T6399] do_user_addr_fault+0x2e8/0xb20 [ 301.295191][ T6399] exc_page_fault+0x60/0x100 [ 301.300328][ T6399] asm_exc_page_fault+0x22/0x30 [ 301.305720][ T6399] fault_in_readable+0xf3/0x1f0 [ 301.311109][ T6399] fault_in_iov_iter_readable+0xbf/0x2f0 [ 301.317289][ T6399] generic_perform_write+0x3f8/0x5c0 [ 301.323126][ T6399] __generic_file_write_iter+0x148/0x2a0 [ 301.329308][ T6399] generic_file_write_iter+0xab/0x2e0 [ 301.335272][ T6399] vfs_write+0x482/0x9a0 [ 301.340068][ T6399] ksys_write+0x14d/0x260 [ 301.344948][ T6399] do_syscall_64+0x4c/0xa0 [ 301.349915][ T6399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.356364][ T6399] [ 301.356364][ T6399] other info that might help us debug this: [ 301.356364][ T6399] [ 301.366612][ T6399] Possible unsafe locking scenario: [ 301.366612][ T6399] [ 301.374075][ T6399] CPU0 CPU1 [ 301.379457][ T6399] ---- ---- [ 301.384838][ T6399] lock(&sb->s_type->i_mutex_key#13); [ 301.390325][ T6399] lock(&mm->mmap_lock); [ 301.397202][ T6399] lock(&sb->s_type->i_mutex_key#13); [ 301.405210][ T6399] lock(&mm->mmap_lock); [ 301.409559][ T6399] [ 301.409559][ T6399] *** DEADLOCK *** [ 301.409559][ T6399] [ 301.417716][ T6399] 3 locks held by syz.3.466/6399: [ 301.422758][ T6399] #0: ffff88802d7f6ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 301.432018][ T6399] #1: ffff8880797b8460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 301.440957][ T6399] #2: ffff888074483510 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 301.452302][ T6399] [ 301.452302][ T6399] stack backtrace: [ 301.458222][ T6399] CPU: 1 PID: 6399 Comm: syz.3.466 Not tainted syzkaller #0 [ 301.465526][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 301.475611][ T6399] Call Trace: [ 301.478915][ T6399] [ 301.481867][ T6399] dump_stack_lvl+0x188/0x24e [ 301.486597][ T6399] ? load_image+0x410/0x410 [ 301.491143][ T6399] ? show_regs_print_info+0x12/0x12 [ 301.496379][ T6399] ? print_circular_bug+0x12b/0x1a0 [ 301.501621][ T6399] check_noncircular+0x296/0x330 [ 301.506597][ T6399] ? add_chain_block+0x9b0/0x9b0 [ 301.511592][ T6399] ? lockdep_lock+0xf1/0x1f0 [ 301.516213][ T6399] ? _find_first_zero_bit+0xd2/0x100 [ 301.521534][ T6399] __lock_acquire+0x2d18/0x7c40 [ 301.526433][ T6399] ? finish_task_switch+0x262/0x8e0 [ 301.531664][ T6399] ? verify_lock_unused+0x140/0x140 [ 301.536889][ T6399] ? cmp_ex_search+0x1a/0x70 [ 301.541510][ T6399] ? bsearch+0x86/0xb0 [ 301.545607][ T6399] ? search_extable+0xd0/0xd0 [ 301.550311][ T6399] ? copy_user_enhanced_fast_string+0x27/0x40 [ 301.556412][ T6399] ? search_extable+0x8c/0xd0 [ 301.561114][ T6399] ? trim_init_extable+0x3b0/0x3b0 [ 301.566257][ T6399] ? __schedule+0x1087/0x4030 [ 301.570969][ T6399] ? copy_user_enhanced_fast_string+0x27/0x40 [ 301.577068][ T6399] lock_acquire+0x1bb/0x4a0 [ 301.581603][ T6399] ? mmap_read_lock_killable+0x1d/0x60 [ 301.587090][ T6399] ? read_lock_is_recursive+0x10/0x10 [ 301.592490][ T6399] ? cmp_ex_search+0x1a/0x70 [ 301.597108][ T6399] ? bsearch+0x86/0xb0 [ 301.601202][ T6399] ? fault_in_readable+0xf3/0x1f0 [ 301.606254][ T6399] ? search_extable+0x8c/0xd0 [ 301.610955][ T6399] ? trim_init_extable+0x3b0/0x3b0 [ 301.616097][ T6399] ? mmap_read_lock_killable+0x1d/0x60 [ 301.621576][ T6399] down_read_killable+0x4c/0x340 [ 301.626536][ T6399] ? mmap_read_lock_killable+0x1d/0x60 [ 301.632021][ T6399] mmap_read_lock_killable+0x1d/0x60 [ 301.637333][ T6399] lock_mm_and_find_vma+0x2b1/0x2f0 [ 301.642569][ T6399] do_user_addr_fault+0x2e8/0xb20 [ 301.647711][ T6399] exc_page_fault+0x60/0x100 [ 301.652349][ T6399] asm_exc_page_fault+0x22/0x30 [ 301.657268][ T6399] RIP: 0010:fault_in_readable+0xf3/0x1f0 [ 301.662935][ T6399] Code: 39 f7 0f 82 9d 00 00 00 0f 01 cb 0f ae e8 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 b8 57 c4 ff 4c 89 f0 48 25 ff 0f 00 00 74 20 <41> 8a 2e e8 c5 53 c4 ff 40 88 6c 24 07 4d 8d a6 ff 0f 00 00 4d 89 [ 301.682595][ T6399] RSP: 0018:ffffc90003587ab0 EFLAGS: 00050206 [ 301.688694][ T6399] RAX: 0000000000000100 RBX: 0000000000001000 RCX: ffff88802a989e00 [ 301.696689][ T6399] RDX: 0000000000000002 RSI: 0000000000000100 RDI: 0000000000000000 [ 301.704681][ T6399] RBP: 0000000000000000 R08: ffff88802a989e00 R09: 0000000000000002 [ 301.712679][ T6399] R10: 0000000000000006 R11: 0000000000000002 R12: 00007ffffffff001 [ 301.720673][ T6399] R13: dffffc0000000000 R14: 0000200000097100 R15: 00007fffffffe000 [ 301.728673][ T6399] fault_in_iov_iter_readable+0xbf/0x2f0 [ 301.734344][ T6399] generic_perform_write+0x3f8/0x5c0 [ 301.739667][ T6399] ? generic_file_direct_write+0x330/0x330 [ 301.745496][ T6399] ? __file_remove_privs+0x5f0/0x5f0 [ 301.750802][ T6399] ? rwsem_write_trylock+0x135/0x1c0 [ 301.756165][ T6399] ? clear_nonspinnable+0x60/0x60 [ 301.761214][ T6399] ? generic_write_checks_count+0x363/0x440 [ 301.767128][ T6399] __generic_file_write_iter+0x148/0x2a0 [ 301.772794][ T6399] generic_file_write_iter+0xab/0x2e0 [ 301.778245][ T6399] vfs_write+0x482/0x9a0 [ 301.782549][ T6399] ? file_end_write+0x250/0x250 [ 301.787432][ T6399] ? __fget_files+0x3fc/0x460 [ 301.792155][ T6399] ? __fdget_pos+0x2ae/0x360 [ 301.796774][ T6399] ? ksys_write+0x70/0x260 [ 301.801219][ T6399] ksys_write+0x14d/0x260 [ 301.805578][ T6399] ? __ia32_sys_read+0x80/0x80 [ 301.810372][ T6399] ? lockdep_hardirqs_on+0x94/0x140 [ 301.815595][ T6399] do_syscall_64+0x4c/0xa0 [ 301.820048][ T6399] ? clear_bhb_loop+0x60/0xb0 [ 301.824749][ T6399] ? clear_bhb_loop+0x60/0xb0 [ 301.829449][ T6399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.835372][ T6399] RIP: 0033:0x7f86b619de99 [ 301.839822][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.859440][ T6399] RSP: 002b:00007f86b43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.867877][ T6399] RAX: ffffffffffffffda RBX: 00007f86b6426090 RCX: 00007f86b619de99 [ 301.875866][ T6399] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000007 [ 301.883851][ T6399] RBP: 00007f86b6233eaf R08: 0000000000000000 R09: 0000000000000000 [ 301.891837][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.899821][ T6399] R13: 00007f86b6426128 R14: 00007f86b6426090 R15: 00007fffb52d59c8 [ 301.907829][ T6399] [ 301.919793][ T4327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.945073][ T4327] usb 7-1: can't set config #100, error -71 [ 302.001370][ T6407] loop5: detected capacity change from 0 to 512 [ 302.007926][ T4327] usb 7-1: USB disconnect, device number 5 [ 302.032528][ T4419] device bridge_slave_1 left promiscuous mode [ 302.043678][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.114426][ T4419] device bridge_slave_0 left promiscuous mode [ 302.148416][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.964323][ T4419] device veth1_macvtap left promiscuous mode [ 302.990102][ T4419] device veth0_macvtap left promiscuous mode [ 303.090979][ T4419] device veth1_vlan left promiscuous mode [ 303.167446][ T4419] device veth0_vlan left promiscuous mode [ 303.416172][ T4419] team0 (unregistering): Port device team_slave_1 removed [ 303.440715][ T4419] team0 (unregistering): Port device team_slave_0 removed [ 303.451894][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.477885][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.568826][ T4419] bond0 (unregistering): Released all slaves [ 303.725184][ T6264] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.740247][ T6264] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.750861][ T6264] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.762253][ T6264] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.868227][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.880213][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.888094][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.903316][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.916743][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.940100][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.951381][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.958575][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.968318][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.003070][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.011721][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.021017][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.028547][ T4678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.038921][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.047942][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.058331][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.067738][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.086031][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.099993][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.110287][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.119098][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.128811][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.147594][ T6264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.159920][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.170744][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.180497][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.389612][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.400365][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.413362][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.720033][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.729591][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.749641][ T6264] device veth0_vlan entered promiscuous mode [ 304.757963][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.767205][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.782269][ T6264] device veth1_vlan entered promiscuous mode [ 304.790908][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.800688][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.809521][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.834803][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.843715][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.852193][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.864209][ T6264] device veth0_macvtap entered promiscuous mode [ 304.876530][ T6264] device veth1_macvtap entered promiscuous mode [ 304.892413][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.904762][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.915418][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.927494][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.938997][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.949683][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.960856][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.969473][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.978915][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.987097][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.995910][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.006402][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.020013][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.030180][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.041741][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.054074][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.064611][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.075588][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.085383][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.096347][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.107166][ T6264] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.116721][ T6264] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.128795][ T6264] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.137820][ T6264] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.171769][ T6264] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 305.200096][ T4730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.210377][ T6264] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 305.218893][ T4730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.230832][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.249838][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.260319][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.270708][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready