last executing test programs: 9.339965848s ago: executing program 4 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_FW_MASK={0x8, 0x5, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000084) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000080), 0x0}, 0x20) 8.193509351s ago: executing program 4 (id=311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440100001a00ffff2abd7040030000000a010101000000000000000000000000ac14142f000000000000000000000000000000004e240000000020a011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000084d46c000000fc020000000000000000000000000000000000000100000000000000000000000c3d000000000000fdffffffffffffffff07000000000000fcfffffffffffffffdffffffffffffff000000000000000000000000000000000000000000000000fcffffffffffffffa3000000000000006d930000493d00000040000003000000033500000a0001046000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 8.014319602s ago: executing program 4 (id=314): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af010203010902240001000010"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usbip_server_init(0x3) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) 4.795546028s ago: executing program 1 (id=327): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8f, 0x3b16) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x8003000, 0x0, 0xf000, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0x0, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x10, 0x0, 0x0, 0x80, 0x0, 0xe, 0x0, 0xfd, 0x1a, 0xa8}, {0x10000, 0xfec00000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe}, {0xeeee8000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xd000, 0x41000, 0x0, 0xff, 0x0, 0x10, 0x4, 0xe, 0x0, 0x0, 0x0, 0xfe}, {0x80a0000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa1a6}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 4.60114309s ago: executing program 1 (id=328): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) 4.431784642s ago: executing program 1 (id=331): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xdd}]}, 0x24}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dstopts_2292={{0xb0, 0x29, 0x4, {0x4, 0x12, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93}]}}}, @hopopts={{0x70, 0x29, 0x36, {0x5e, 0xa, '\x00', [@pad1, @padn, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x966, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0xda, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}], 0x120}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000002c0)={0x2, r0}) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.416285123s ago: executing program 4 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) gettid() write$binfmt_format(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x2) 3.415646143s ago: executing program 3 (id=334): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}}], 0x1, 0x888) 3.310997824s ago: executing program 3 (id=335): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x800, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 3.303800464s ago: executing program 1 (id=336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.904934198s ago: executing program 1 (id=338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0xf, 0x7, 0x2, 0x0, 0x6, 0x5, 0x0, 0xa1, 0xe, 0x81, 0x40, 0x0, 0x0, 0x0, 0x3, 0x10, 0x0, 0x6, 0x4, '\x00', 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.854861979s ago: executing program 3 (id=339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000740)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x12}, @mpls={[], @generic="9586b606c56185d68c9f87ca46ef41004911"}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x3000000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r9) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xe7, "8feb7996766eef43b9d2605245d09065c4f58363d7e0e5046e8793cc15c1cbe9f3b27fa58e8393eec81fc5f110ea25ead3463b44d76daab24d7ff9300abb818a3c3acbf5581dd08fbcb2be3552917349ccdf7c6a672df66da4307691e6540f9074ef7e4af8b55fd4a2b66fcc4c833f518e0730c660fc27a46c6b72c564939f58157a0316f79454733b8b65ae07ddc75330ac36b440539b6c0386a4dd8c64a2a5a33735a94de399cf64ead453b4a53b1ffbac1cee80de7e7b88e63463d2ceec23068cad0aaddf48d452a6f60fa8ae07039405ea48944d97e67fd4ac1dd00a557497f4bde170c06b"}, &(0x7f0000000180)=0xef) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000001c0)={r10, @in6={{0xa, 0x4e24, 0xffffffac, @local, 0x3}}}, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000, r6}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0) 2.72962748s ago: executing program 2 (id=340): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x30c, 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, 0x0}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/22, 0x16}, {0x0, 0x41}], 0x2, &(0x7f0000000100)=""/36, 0x24}}], 0x1, 0x2002, 0x0) 2.651676421s ago: executing program 3 (id=342): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) socket$inet(0x2, 0x3, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x48000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000105000400010000000500010007000000140407800800060000000007080013400000000505000500020000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) 2.598204642s ago: executing program 1 (id=343): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af010203010902240001000010"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usbip_server_init(0x3) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) 2.373402614s ago: executing program 2 (id=344): ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f00000004c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f00008ba000/0x3000)=nil, 0x4000, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8004084) r8 = syz_open_dev$hiddev(&(0x7f0000000040), 0x3, 0x1) ioctl$HIDIOCSUSAGES(r8, 0x501c4814, &(0x7f0000001040)={{0x3, 0x3, 0x6, 0x907c, 0x3, 0x7ff}, 0x2c4, [0x1, 0x8, 0xf9, 0x6, 0x3, 0xfffffffe, 0x100, 0x400, 0xfffffffb, 0x2, 0x1, 0x401, 0xb, 0xfff, 0x3, 0x7, 0x2, 0x1, 0x3, 0x8, 0x9, 0x3, 0xf112, 0x5, 0x7, 0xd, 0x4, 0x8, 0x0, 0x1, 0x2, 0x1, 0x5, 0x0, 0x6, 0x9758, 0xff, 0x4, 0x4, 0x1ff, 0x3, 0x88ab, 0x7, 0x101, 0x3, 0xe4b, 0x8, 0x7, 0x7, 0x10000, 0x3, 0x40, 0xe21, 0x81, 0x0, 0x9, 0x0, 0x6, 0x800, 0x5, 0x3, 0x3, 0x1, 0x6b2, 0x4, 0x0, 0xbf2, 0x3, 0x7, 0x3, 0x6, 0xd4d1, 0x0, 0xe, 0x9, 0xff, 0xfffffffb, 0x7, 0xffffffff, 0xd52, 0x6, 0x1, 0x1ff, 0x80000001, 0x80000000, 0xa, 0x9, 0x2, 0x31fe, 0xef9, 0x8, 0xa, 0x7, 0x8, 0x3, 0x0, 0x5, 0x8082, 0x7, 0x5, 0xf0, 0x100, 0x8, 0x6, 0x6, 0x885a, 0xfffffbff, 0x400, 0x394, 0x4bf8f3d3, 0x7, 0x96c3, 0x5, 0x0, 0xc0000, 0x1aba3a17, 0x5, 0x5, 0x9, 0xd2d4, 0x9, 0x6, 0x1, 0x5, 0x7, 0x7fffffff, 0x17, 0x1, 0x6, 0xffff7fff, 0x1, 0xb1c, 0xc0000000, 0x3, 0x1, 0x1, 0x3, 0x1239, 0x5, 0x9, 0x40, 0x4, 0x7ff, 0x5, 0x2, 0x400, 0x4b09, 0xfff, 0x4, 0x3, 0x2, 0x3e000000, 0x6, 0xec2c, 0x4, 0x8e2f, 0xd, 0xfffff9a1, 0x9, 0xc23, 0x8, 0x10000, 0x800, 0x3, 0xd, 0x0, 0xa, 0x3, 0x10000, 0x3, 0x0, 0x5, 0x4, 0x8, 0x8, 0x9, 0x9a, 0x7fffffff, 0x400, 0x8000, 0x7f, 0x3de4, 0x9, 0x8001, 0x7, 0xb, 0xfffffffa, 0x0, 0x3, 0x5, 0x6, 0x4, 0x10000, 0x8, 0x6, 0x8, 0x2, 0x4, 0x1, 0x6, 0x8, 0x8001, 0x8, 0x7, 0x7, 0xffff, 0x7, 0x81, 0x0, 0xa2, 0x3, 0x7, 0x4, 0x8, 0x4d, 0x4, 0x1, 0x5, 0xfff, 0x200, 0x3, 0x1, 0x9, 0x7, 0x6, 0x5, 0x7, 0x2, 0x200, 0x6, 0x6d5a, 0xe3, 0x5, 0x3, 0x3, 0x4, 0x8, 0x7, 0x59, 0xffff, 0x3, 0x8c8, 0xa000000, 0x4, 0x200, 0x3ff, 0x385, 0x1452, 0x401, 0x3, 0x3, 0x8, 0x3, 0x7, 0x3, 0x8, 0x95f, 0xd, 0xffffd03f, 0x6, 0x3, 0x4, 0x4, 0x5, 0xfffffff0, 0x5, 0xfffffffa, 0x7fffffff, 0x8, 0x3, 0x1, 0x5, 0x3, 0x5, 0x6, 0x7, 0xffffffff, 0x0, 0x40, 0xffffff00, 0x3, 0x5, 0x4, 0x1, 0x9, 0x8001, 0x3, 0x40, 0x2, 0x1, 0x2, 0x0, 0x1, 0xb5, 0x3, 0x4000400, 0x8, 0x4, 0xc, 0xf44, 0x5, 0x1, 0x5, 0x10001, 0x3, 0x3, 0x3658e6b2, 0xe, 0x7, 0x3680e5a1, 0x1, 0x0, 0x2bc5, 0x7e, 0x6, 0x81, 0x8000, 0x5, 0x7, 0x8a0a, 0xfffffff7, 0x7fffffff, 0x3, 0x5, 0xf, 0x5, 0x1, 0x1, 0xffffff67, 0x9c, 0xda2f, 0x6, 0x7fff, 0x3, 0x2, 0xffff7fff, 0x6, 0x6, 0x0, 0x5, 0xff, 0x7, 0xffff, 0x5, 0x9, 0xfff, 0xa, 0x1, 0x1, 0x4, 0x0, 0x3583, 0x40000, 0xffff, 0xffff4ad1, 0x9, 0xfffffffb, 0x1, 0xfffffffc, 0x7, 0x4, 0x2, 0x0, 0xfffffffa, 0x9, 0x2, 0x80, 0x5, 0x2, 0xfffffffd, 0x2, 0x8, 0x40, 0x7, 0x8, 0x0, 0x1, 0x9, 0x7, 0x4, 0x8, 0x0, 0xa55, 0x8, 0x0, 0x8, 0x3, 0xe, 0x5, 0x5, 0x1, 0x0, 0x7, 0xff, 0x9, 0x9, 0x3, 0x8, 0x4, 0x7a2, 0x3, 0x5, 0x2, 0x4, 0xfffffff7, 0x5c403ea7, 0x8, 0x6, 0x0, 0x7, 0x1949, 0x0, 0xfff, 0xfffffff7, 0x2, 0x3, 0x3, 0x0, 0x1, 0x0, 0x8, 0xc3, 0x72c, 0x6, 0x4, 0xfff, 0x5, 0x4, 0x7, 0xe, 0x9, 0xe2, 0x8001, 0x3, 0x45fa, 0xffff, 0x2c1a, 0x5, 0x8, 0xaed, 0x0, 0x3, 0x911, 0x3ce9, 0x441, 0x1, 0x6, 0x101, 0x97ee, 0x9, 0xf3, 0x6, 0x1, 0x5000000, 0xc, 0x0, 0x7f, 0x8001, 0xda, 0x9, 0x5, 0x0, 0x80000001, 0xb, 0x0, 0x6, 0x3ff, 0x79aeea36, 0xeaa6, 0xfffffffc, 0x7, 0xa9f5, 0x0, 0x25, 0x5, 0x2, 0x3, 0xaea, 0x8, 0xc9, 0xe98, 0x759f9780, 0x6, 0x7, 0x3, 0x1ff, 0x7, 0xffffffff, 0x9, 0x8, 0x3, 0x80000000, 0x4, 0x1ff, 0xe0d, 0x10001, 0xc, 0x5777e35f, 0xd, 0x3, 0x8, 0x200, 0x2, 0x3, 0x4, 0x3, 0x7b, 0x7ff, 0x1, 0x8, 0x8, 0x834, 0x2, 0x0, 0x3, 0x3, 0x2, 0x8001, 0x8, 0x3, 0x2, 0x2, 0x3, 0xd, 0x3, 0x2080, 0x4, 0x7dc88169, 0x8, 0x2, 0x9, 0x9, 0x9775, 0x8001, 0x5, 0x6, 0x5, 0x0, 0x3, 0x3381, 0x9, 0xa, 0x5, 0xb3b, 0x8, 0x6, 0x7fff, 0x8, 0x5, 0x7, 0x10, 0x101, 0x1f0, 0x6, 0x496, 0x1, 0x6, 0x401, 0x5, 0xd0, 0x8, 0x3, 0x5, 0x0, 0xff, 0x9, 0x8, 0xa, 0x10, 0x1, 0x9, 0x7fffffff, 0x6, 0x0, 0x7, 0x4, 0x6, 0xe, 0x9, 0x5, 0x4, 0x5, 0x6, 0x9, 0x3, 0x3, 0x9, 0x3, 0x8, 0x4, 0x6, 0x9b39, 0x5, 0x6, 0x2, 0x3, 0x4, 0x800, 0x10000, 0x64, 0xbdeb, 0x3, 0x3, 0x8, 0x200, 0x1, 0x8, 0x80000000, 0x6, 0x2, 0x2, 0x400, 0x7, 0x100, 0x5, 0x1, 0x10, 0x4875e3ed, 0x8, 0x101, 0xd4, 0x5, 0x7, 0x9a, 0x7, 0x5, 0x9, 0x0, 0x1000, 0x5, 0x3, 0x40, 0x9, 0x80000000, 0x9, 0x9, 0x999, 0x81, 0xf9cc890, 0x2, 0xbc7c, 0x6, 0x6, 0x0, 0x401d, 0x5, 0x7, 0x1, 0x9, 0x5, 0x3, 0x7fffffff, 0x0, 0x5, 0x6, 0x7, 0x9, 0x10, 0x5, 0x3, 0xff, 0x4, 0x4, 0x7, 0x28000000, 0xb, 0x10001, 0x1d16, 0x2, 0xffff0219, 0x5, 0x8, 0x5, 0x0, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x3, 0x7, 0x8, 0x2, 0x6, 0x80000000, 0x7575, 0x9, 0x7, 0xf8, 0x2, 0x4, 0xff, 0xfffffff6, 0x7, 0x1, 0x8, 0x800, 0x2, 0xfffffffb, 0x7fff, 0x1, 0x3, 0x7f, 0x306, 0x5, 0x8, 0x7, 0x8, 0x4, 0xa4, 0x9, 0x4, 0x8, 0x10000, 0x401, 0x5, 0x80000001, 0x26d, 0x6, 0x48, 0x6, 0x0, 0x5c, 0x5, 0x1, 0xffff07b2, 0x800, 0x4, 0x5, 0x0, 0xc, 0x3, 0x100, 0x224dd958, 0x6, 0x9, 0x6, 0x9, 0xffff, 0x922, 0xfffffff9, 0x0, 0x5, 0x0, 0x4, 0x401, 0x401, 0xffffffff, 0x6, 0x5, 0xfff, 0x6, 0x8, 0x7, 0x8, 0x10, 0x6, 0x6, 0xadc, 0x7, 0x7fffffff, 0xbd, 0x4, 0x1, 0x7, 0xf, 0x4db9, 0x8e, 0x7, 0x40, 0x101, 0x4000, 0x7, 0x8, 0xfffffff7, 0x8, 0xfffffff8, 0x8, 0xabd, 0x0, 0x80000001, 0x9, 0x2, 0xc8ea, 0xe57, 0x4, 0x0, 0x5fb, 0x4, 0x1000, 0xfffffffc, 0xffff0001, 0x0, 0xbd, 0x8, 0x400, 0xf307, 0x9, 0x7, 0x64c2, 0x52, 0x1000, 0x7, 0x0, 0x0, 0x9, 0x8000, 0x3, 0xb, 0xffff, 0x4, 0x6, 0x4, 0x1600, 0x6, 0xfff, 0xe, 0x4, 0x1000, 0x3, 0x8, 0x9, 0x1d96c2ee, 0x9, 0x800, 0x7, 0x5, 0x2, 0x4, 0x3, 0x1, 0x149, 0xc, 0xfffffc00, 0x2, 0x1, 0x2, 0x1f, 0x8, 0x8, 0x9, 0x2, 0xcbb, 0xa0cb, 0x8001, 0x5c5, 0x0, 0x1ff, 0x9, 0x4, 0x1, 0x0, 0x3, 0xd, 0x9, 0x1, 0x9, 0xbbd, 0x10000, 0x9, 0x4, 0x80, 0x4, 0x8, 0x7, 0x5, 0x79, 0x9, 0x8, 0x4, 0xde5, 0x0, 0x1000, 0x1, 0x5, 0x8001, 0x9, 0xfffffffc, 0x7, 0x2, 0x1ff, 0x8, 0x3, 0x4, 0x9, 0x7fffffff, 0x8000, 0x9, 0x1000, 0x613c, 0x4, 0x6, 0x4, 0x6b4c, 0x7fffffff, 0xffff, 0x3, 0x1, 0x1, 0x8000, 0x9, 0x2, 0x6, 0x9, 0x83d, 0x9c13, 0x8, 0x5481, 0x9, 0x9, 0xfffffffa, 0xeb3, 0x14, 0x9, 0x5, 0x80, 0xda41, 0x9, 0x9, 0x6, 0x400, 0x4, 0x2, 0x4, 0x1, 0x0, 0x5, 0x5, 0x0, 0x9, 0x0, 0x1ff, 0x8, 0x3, 0x100, 0x2, 0x10000, 0x3, 0x4, 0x5, 0xa, 0x2, 0x80, 0x0, 0x8, 0xff, 0x400, 0x9, 0x4b, 0x4, 0xffffffff, 0x8000, 0x0, 0x7d, 0x8, 0x5a46, 0x4, 0xb12, 0x0, 0xf, 0x7, 0x3, 0x1, 0xc9c1, 0xfffffffd, 0x4, 0x5, 0x5, 0x6, 0x6, 0x6, 0x2, 0x400, 0xa, 0x3ff, 0x8, 0x40, 0x10001, 0x0, 0x6, 0x5, 0x9, 0x9, 0x0, 0x9, 0x7, 0x6, 0xff, 0x3, 0x5, 0x3, 0xc4, 0xc74, 0x800, 0x2, 0xd, 0x8, 0x3, 0x3, 0x7, 0x2, 0x7a1a, 0x282, 0x8, 0x7, 0x4, 0x1, 0x5, 0x0, 0x6, 0xfffffff8, 0x33d, 0xd0000, 0x101, 0x7, 0x8, 0x2, 0x6, 0x7, 0x4, 0xfffffff8, 0x9855, 0x5, 0xe1b]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x4000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) syz_emit_ethernet(0x60, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x2a, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x33}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [{0x1}]}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 2.231153385s ago: executing program 4 (id=345): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}}], 0x1, 0x888) 1.388645495s ago: executing program 4 (id=347): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES32=r0], 0x0) 1.363837945s ago: executing program 3 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.333851285s ago: executing program 2 (id=349): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x800, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 1.173737847s ago: executing program 0 (id=350): r0 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5ac, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) sendfile(r0, r1, 0x0, 0xfea) 1.125829518s ago: executing program 3 (id=351): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x4, 0x4}, 0x6) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0x9, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x1, 0x4, 0xf8, 0x3, 0x68, 0x2, 0x7, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x10, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0x5, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x2, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0xa101, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100000000004030144c4700000000000109022400010000e1020904000305030002000921000033012205000905810300000c090736"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x8, {0x8, 0x31, '\x00\x00\x00\x00 \x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x5) 1.102164688s ago: executing program 2 (id=352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000740)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x12}, @mpls={[], @generic="9586b606c56185d68c9f87ca46ef41004911"}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x3000000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r9) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xe7, "8feb7996766eef43b9d2605245d09065c4f58363d7e0e5046e8793cc15c1cbe9f3b27fa58e8393eec81fc5f110ea25ead3463b44d76daab24d7ff9300abb818a3c3acbf5581dd08fbcb2be3552917349ccdf7c6a672df66da4307691e6540f9074ef7e4af8b55fd4a2b66fcc4c833f518e0730c660fc27a46c6b72c564939f58157a0316f79454733b8b65ae07ddc75330ac36b440539b6c0386a4dd8c64a2a5a33735a94de399cf64ead453b4a53b1ffbac1cee80de7e7b88e63463d2ceec23068cad0aaddf48d452a6f60fa8ae07039405ea48944d97e67fd4ac1dd00a557497f4bde170c06b"}, &(0x7f0000000180)=0xef) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000001c0)={r10, @in6={{0xa, 0x4e24, 0xffffffac, @local, 0x3}}}, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000, r6}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0) 982.043539ms ago: executing program 2 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d6"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2) 902.68782ms ago: executing program 0 (id=354): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x30c, 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e381", 0xd}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/22, 0x16}, {0x0, 0x41}], 0x2, &(0x7f0000000100)=""/36, 0x24}}], 0x1, 0x2002, 0x0) 788.982421ms ago: executing program 2 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) 677.744133ms ago: executing program 0 (id=356): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 475.836295ms ago: executing program 0 (id=357): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}}], 0x2, 0x888) 355.853286ms ago: executing program 0 (id=358): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) socket$inet(0x2, 0x3, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x48000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000105000400010000000500010007000000140407800800060000000007080013400000000505000500020000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) 0s ago: executing program 0 (id=359): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@prjquota}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7d}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 54.579287][ T4171] cgroup: Unknown subsys name 'net' [ 54.714801][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.204175][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.697211][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 57.718396][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 57.753739][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 57.814325][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 57.851695][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 57.919563][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.926666][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.935398][ T4186] device bridge_slave_0 entered promiscuous mode [ 57.951703][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.959042][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.966825][ T4201] device bridge_slave_0 entered promiscuous mode [ 57.989477][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.996563][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.005139][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.013380][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.020914][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.029221][ T4194] device bridge_slave_0 entered promiscuous mode [ 58.036698][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.044143][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.052811][ T4201] device bridge_slave_1 entered promiscuous mode [ 58.079627][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.087109][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.095106][ T4194] device bridge_slave_1 entered promiscuous mode [ 58.153698][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.163278][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.171625][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.179573][ T4187] device bridge_slave_0 entered promiscuous mode [ 58.188527][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.206958][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.218312][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.229870][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.246000][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.253730][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.261679][ T4187] device bridge_slave_1 entered promiscuous mode [ 58.280794][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.287896][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.296555][ T4190] device bridge_slave_0 entered promiscuous mode [ 58.313512][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.342536][ T4194] team0: Port device team_slave_0 added [ 58.357576][ T4194] team0: Port device team_slave_1 added [ 58.363902][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.371344][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.379308][ T4190] device bridge_slave_1 entered promiscuous mode [ 58.388392][ T4201] team0: Port device team_slave_0 added [ 58.396602][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.408125][ T4186] team0: Port device team_slave_0 added [ 58.428615][ T4201] team0: Port device team_slave_1 added [ 58.435909][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.446424][ T4186] team0: Port device team_slave_1 added [ 58.465951][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.473095][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.499744][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.530707][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.537714][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.564336][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.577852][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.608499][ T4187] team0: Port device team_slave_0 added [ 58.620918][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.628023][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.654343][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.668063][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.679449][ T4187] team0: Port device team_slave_1 added [ 58.695252][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.702292][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.728846][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.741232][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.748202][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.775484][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.802012][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.809640][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.835925][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.874429][ T4190] team0: Port device team_slave_0 added [ 58.898184][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.906119][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.933026][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.946133][ T4190] team0: Port device team_slave_1 added [ 58.965536][ T4194] device hsr_slave_0 entered promiscuous mode [ 58.972887][ T4194] device hsr_slave_1 entered promiscuous mode [ 58.987345][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.994532][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.021279][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.073254][ T4201] device hsr_slave_0 entered promiscuous mode [ 59.080433][ T4201] device hsr_slave_1 entered promiscuous mode [ 59.087156][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.095415][ T4201] Cannot create hsr debugfs directory [ 59.114021][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.121106][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.147770][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.163116][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.169928][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.176662][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.184695][ T4186] Cannot create hsr debugfs directory [ 59.207331][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.214435][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.240987][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.322748][ T4187] device hsr_slave_0 entered promiscuous mode [ 59.330133][ T4187] device hsr_slave_1 entered promiscuous mode [ 59.336717][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.344633][ T4187] Cannot create hsr debugfs directory [ 59.399680][ T4191] Bluetooth: hci3: command 0x0409 tx timeout [ 59.399680][ T4193] Bluetooth: hci4: command 0x0409 tx timeout [ 59.400141][ T4191] Bluetooth: hci0: command 0x0409 tx timeout [ 59.406039][ T4193] Bluetooth: hci2: command 0x0409 tx timeout [ 59.419908][ T4191] Bluetooth: hci1: command 0x0409 tx timeout [ 59.434503][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.441651][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.448335][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.456099][ T4190] Cannot create hsr debugfs directory [ 59.683683][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.695311][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.708313][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.724490][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.770698][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.786773][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.797145][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.831000][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.896827][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.911437][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.943248][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.955977][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.964500][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.987326][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.999831][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.014564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.024329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.034322][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.041656][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.052509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.062075][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.074084][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.088628][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.099084][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.107583][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.114700][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.137579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.148724][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.163366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.172323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.191183][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.205201][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.220015][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.229801][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.245061][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.254589][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.263601][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.272230][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.282039][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.291541][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.298589][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.306436][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.315215][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.324714][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.331826][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.339751][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.347666][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.370775][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.380789][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.413875][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.438662][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.450123][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.462222][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.475964][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.488200][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.502074][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.512344][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.521851][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.537307][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.554511][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.567365][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.600637][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.612766][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.625147][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.635324][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.644701][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.653693][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.663275][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.693199][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.712842][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.724588][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.733824][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.769208][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.782497][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.813263][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.830462][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.841859][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.849865][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.857454][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.894964][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.905828][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.942489][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.951571][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.958994][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.968187][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.977938][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.986701][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.024877][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.039617][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.048286][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.064116][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.071306][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.107731][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.129633][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.137271][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.145885][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.156087][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.165742][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.173001][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.182363][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.191981][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.201343][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.208418][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.216292][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.225084][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.233788][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.247589][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.289304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.300905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.310340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.323589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.333135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.341861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.350682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.360024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.368688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.377976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.387894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.397188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.406560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.419852][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.433178][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.445188][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.457492][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.473794][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.479231][ T1110] Bluetooth: hci0: command 0x041b tx timeout [ 61.485060][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 61.488088][ T1110] Bluetooth: hci4: command 0x041b tx timeout [ 61.497557][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.509547][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.526854][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.534611][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 61.534733][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 61.564181][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.572857][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.581858][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.590168][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.598009][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.610755][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.619214][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.627493][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.636350][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.644796][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.671218][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.701298][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.712580][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.725401][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.732721][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.741247][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.750229][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.758672][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.765957][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.775160][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.784742][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.809454][ T4186] device veth0_vlan entered promiscuous mode [ 61.830745][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.845892][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.855400][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.917331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.933424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.945305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.954126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.970056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.978601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.987661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.995505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.006359][ T4186] device veth1_vlan entered promiscuous mode [ 62.021693][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.040501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.048735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.057975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.068003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.080571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.090636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.098219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.106308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.114533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.124196][ T4194] device veth0_vlan entered promiscuous mode [ 62.142164][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.150911][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.187121][ T4194] device veth1_vlan entered promiscuous mode [ 62.222884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.241328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.257265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.266661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.275987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.306788][ T4186] device veth0_macvtap entered promiscuous mode [ 62.325434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.338554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.355170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.364622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.380061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.388625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.398006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.407166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.415951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.425122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.436099][ T4194] device veth0_macvtap entered promiscuous mode [ 62.445957][ T4190] device veth0_vlan entered promiscuous mode [ 62.455887][ T4186] device veth1_macvtap entered promiscuous mode [ 62.466434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.474983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.483371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.493376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.510237][ T4194] device veth1_macvtap entered promiscuous mode [ 62.526954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.536642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.545781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.554485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.562281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.576393][ T4190] device veth1_vlan entered promiscuous mode [ 62.585953][ T4187] device veth0_vlan entered promiscuous mode [ 62.599891][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.614846][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.629478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.637702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.647603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.657024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.674115][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.685801][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.712323][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.721293][ T4187] device veth1_vlan entered promiscuous mode [ 62.734802][ T4190] device veth0_macvtap entered promiscuous mode [ 62.744152][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.755033][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.771065][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.778545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.788297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.797819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.806470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.815450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.825028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.838631][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.847984][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.857938][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.866896][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.892287][ T4190] device veth1_macvtap entered promiscuous mode [ 62.903523][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.917163][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.932354][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.940543][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.949755][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.958322][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.967573][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.006199][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.017773][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.028603][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.039339][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.051762][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.065712][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.077324][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.088360][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.099255][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.111566][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.122278][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.131144][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.140793][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.149607][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.166775][ T4187] device veth0_macvtap entered promiscuous mode [ 63.177623][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.186799][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.195995][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.207099][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.216423][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.225522][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.238107][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.248865][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.257790][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.266967][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.293690][ T4187] device veth1_macvtap entered promiscuous mode [ 63.305030][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.316549][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.328709][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.337571][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.346400][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.354879][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.377782][ T4201] device veth0_vlan entered promiscuous mode [ 63.415393][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.418357][ T4201] device veth1_vlan entered promiscuous mode [ 63.443584][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.482449][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.494752][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.506117][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.516635][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.526697][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.537622][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.549389][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.557948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.567130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.569758][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 63.576064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.583203][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 63.590201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.596717][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 63.608744][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 63.615669][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 63.629073][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.646637][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.656655][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.669464][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.680531][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.691078][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.702657][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.734786][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.746039][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.756254][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.767353][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.777985][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.787088][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.797090][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.833146][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.847120][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.864548][ T4201] device veth0_macvtap entered promiscuous mode [ 63.875986][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.885987][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.899741][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.907551][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.932842][ T4201] device veth1_macvtap entered promiscuous mode [ 63.940085][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.943318][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.948139][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.964323][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.022489][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.033964][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.052386][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.063787][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.074155][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.085146][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.095651][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.106695][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.121824][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.130536][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.138648][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.150012][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.157784][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.166565][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.191192][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.211444][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.222330][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.255062][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.266026][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.277230][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.306341][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.317378][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.329279][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.357339][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.372359][ T4267] loop4: detected capacity change from 0 to 4096 [ 64.377850][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.404340][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.409324][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.420161][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.437039][ T4267] EXT4-fs (loop4): inline encryption not supported [ 64.452322][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.455977][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.474707][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.527253][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.579898][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.589279][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.599442][ T4210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.615559][ T4210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.619083][ T4267] EXT4-fs (loop4): Test dummy encryption mode enabled [ 64.630084][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.693852][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.694682][ T4267] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 64.712523][ T4267] System zones: 0-5 [ 64.768643][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.777568][ T4267] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 64.819420][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.851777][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.866696][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.895016][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.904669][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.942011][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.951550][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.962816][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.653562][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 65.662181][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 65.669266][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 65.676810][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 65.683912][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 65.728845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 65.748844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.758843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.768825][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.778821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.788821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.798818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.808822][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.818831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.828824][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.804210][ T4309] loop2: detected capacity change from 0 to 256 [ 68.103399][ T4311] loop1: detected capacity change from 0 to 4096 [ 68.176858][ T4313] loop0: detected capacity change from 0 to 256 [ 68.217715][ T4311] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 68.245621][ T26] audit: type=1800 audit(1777950998.366:2): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 68.278840][ T4313] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.421838][ T4313] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 68.444305][ T4313] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 68.866761][ T4331] loop4: detected capacity change from 0 to 16 [ 68.884220][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 68.906642][ T4331] erofs: (device loop4): mounted with root inode @ nid 36. [ 69.007521][ T4337] loop0: detected capacity change from 0 to 8 [ 69.018470][ T26] audit: type=1326 audit(1777950999.136:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.1.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd261495dd9 code=0x0 [ 69.204363][ T4340] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.277526][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.121982][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.165397][ T4380] loop4: detected capacity change from 0 to 128 [ 73.226065][ T4380] ======================================================= [ 73.226065][ T4380] WARNING: The mand mount option has been deprecated and [ 73.226065][ T4380] and is ignored by this kernel. Remove the mand [ 73.226065][ T4380] option from the mount to silence this warning. [ 73.226065][ T4380] ======================================================= [ 73.397328][ T4380] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x00000000000000da,,errors=continue. Quota mode: none. [ 73.414863][ T4380] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.492085][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 73.548143][ T26] audit: type=1326 audit(1777951003.666:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.0.34" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae2069fdd9 code=0x0 [ 74.544064][ T4406] loop2: detected capacity change from 0 to 2048 [ 74.611304][ T4414] loop0: detected capacity change from 0 to 256 [ 74.621988][ T4406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 74.666184][ T4413] loop1: detected capacity change from 0 to 764 [ 74.692897][ T4406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.879953][ T4413] Symlink component flag not implemented [ 74.946528][ T4413] Symlink component flag not implemented (105) [ 75.093968][ T4433] Bluetooth: hci0: service_discovery: too big uuid_count value 25455 [ 76.138582][ T4440] loop0: detected capacity change from 0 to 2048 [ 76.283022][ T4440] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 76.301201][ T4440] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.327466][ T4440] EXT4-fs (loop0): shut down requested (0) [ 76.348314][ T4445] loop2: detected capacity change from 0 to 164 [ 76.388991][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.477305][ T4445] Unable to read rock-ridge attributes [ 76.701163][ T4461] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.741519][ T4461] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.833663][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 76.842938][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 77.221955][ T4234] usb 4-1: config 0 has no interfaces? [ 77.236419][ T4234] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.588847][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.672943][ T4234] usb 4-1: config 0 descriptor?? [ 77.760294][ T26] audit: type=1326 audit(1777951007.886:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4467 comm="syz.4.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0c8a3dd9 code=0x0 [ 77.946570][ T4443] udc-core: couldn't find an available UDC or it's busy [ 77.968620][ T4443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.982422][ T4483] loop2: detected capacity change from 0 to 512 [ 78.049036][ T4193] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.196319][ T4408] usb 4-1: USB disconnect, device number 2 [ 78.422578][ T4437] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.439405][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.451871][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.462323][ T4193] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 78.474373][ T4193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.488669][ T4193] usb 1-1: config 0 descriptor?? [ 78.679217][ T4235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.789159][ T4437] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.802037][ T4437] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.813517][ T4494] Zero length message leads to an empty skb [ 78.821003][ T4437] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.846589][ T4437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.870571][ T4437] usb 5-1: config 0 descriptor?? [ 78.948844][ T4235] usb 3-1: Using ep0 maxpacket: 8 [ 79.081154][ T4235] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 79.095256][ T4235] usb 3-1: config 0 has no interface number 0 [ 79.269713][ T4235] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 79.368656][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.450975][ T4193] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 79.574630][ T4235] usb 3-1: Product: syz [ 79.695714][ T4235] usb 3-1: Manufacturer: syz [ 79.819165][ T4235] usb 3-1: SerialNumber: syz [ 79.955829][ T4193] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 79.974835][ T4235] usb 3-1: config 0 descriptor?? [ 79.987787][ T4193] usb 1-1: USB disconnect, device number 2 [ 80.279682][ T4235] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 80.290682][ T4235] usb 3-1: No valid video chain found. [ 80.316819][ T4503] fido_id[4503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 80.319978][ T4235] usb 3-1: USB disconnect, device number 2 [ 80.857494][ T7] usb 5-1: USB disconnect, device number 2 [ 81.029029][ T4235] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 81.449400][ T4235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.548466][ T4235] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.803737][ T1107] cfg80211: failed to load regulatory.db [ 82.009163][ T4235] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 82.033057][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.053206][ T4235] usb 4-1: Product: syz [ 82.057432][ T4235] usb 4-1: Manufacturer: syz [ 82.065606][ T4235] usb 4-1: SerialNumber: syz [ 82.086558][ T4235] usb 4-1: config 0 descriptor?? [ 82.259488][ T4535] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.389039][ T4515] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 82.396514][ T4515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 82.454471][ T4515] vhci_hcd vhci_hcd.0: Device attached [ 82.529923][ T4541] vhci_hcd: connection closed [ 82.540655][ T442] vhci_hcd: stop threads [ 82.563251][ T7] usb 4-1: USB disconnect, device number 3 [ 82.564505][ T442] vhci_hcd: release socket [ 82.580193][ T442] vhci_hcd: disconnect device [ 82.678907][ T1107] vhci_hcd: vhci_device speed not set [ 82.768652][ T4555] input: syz1 as /devices/virtual/input/input5 [ 83.136120][ T4563] netlink: 56 bytes leftover after parsing attributes in process `syz.2.80'. [ 83.272633][ T4568] netlink: 224 bytes leftover after parsing attributes in process `syz.3.82'. [ 85.958501][ T4600] loop3: detected capacity change from 0 to 512 [ 86.468785][ C0] sched: RT throttling activated [ 86.859034][ T4600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 86.907819][ T4600] System zones: 1-12 [ 86.989893][ T4600] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.91: corrupted in-inode xattr [ 87.034385][ T4614] netlink: 56 bytes leftover after parsing attributes in process `syz.4.94'. [ 87.103831][ T4600] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.91: couldn't read orphan inode 15 (err -117) [ 87.250626][ T4600] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 87.736929][ T4620] netlink: 'syz.2.97': attribute type 39 has an invalid length. [ 88.232388][ T4622] dns_resolver: Unsupported server list version (6) [ 88.884025][ T21] Bluetooth: hci4: command 0x0405 tx timeout [ 89.199325][ T4632] loop4: detected capacity change from 0 to 1024 [ 89.211061][ T4635] loop0: detected capacity change from 0 to 512 [ 89.256937][ T4635] EXT4-fs (loop0): Ignoring removed bh option [ 89.334727][ T4635] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 89.424733][ T4635] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.103: corrupted in-inode xattr [ 89.448999][ T26] audit: type=1800 audit(1777951019.566:6): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.102" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 89.489859][ T4635] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.103: couldn't read orphan inode 15 (err -117) [ 89.504520][ T4635] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 89.863012][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 89.952938][ T26] audit: type=1326 audit(1777951020.076:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.2.107" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d0a44bdd9 code=0x0 [ 90.225228][ T4665] netlink: 56 bytes leftover after parsing attributes in process `syz.3.110'. [ 91.076154][ T4679] loop4: detected capacity change from 0 to 512 [ 91.158844][ T4681] loop1: detected capacity change from 0 to 128 [ 91.194917][ T4679] EXT4-fs (loop4): Ignoring removed nobh option [ 91.259328][ T4681] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 91.300612][ T4679] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.116: iget: bad i_size value: 38620345925642 [ 91.405097][ T4679] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.116: couldn't read orphan inode 15 (err -117) [ 91.458835][ T4681] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 91.521590][ T4686] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 91.541555][ T4679] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 92.116348][ T26] audit: type=1326 audit(1777951022.236:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd261495dd9 code=0x0 [ 92.181416][ T4703] netlink: 56 bytes leftover after parsing attributes in process `syz.0.122'. [ 93.327539][ T4716] device syzkaller0 entered promiscuous mode [ 95.127316][ T4738] loop0: detected capacity change from 0 to 256 [ 95.216298][ T4738] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.263904][ T4738] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 95.295653][ T4745] loop4: detected capacity change from 0 to 1024 [ 95.315278][ T4738] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 95.349135][ T26] audit: type=1326 audit(1777951025.476:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d0a44bdd9 code=0x0 [ 95.594946][ T4745] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 95.641939][ T4745] hfsplus: xattr searching failed [ 96.585552][ T4597] hfsplus: b-tree write err: -5, ino 25 [ 96.762937][ T4597] hfsplus: b-tree write err: -5, ino 4 [ 96.769996][ T4597] hfsplus: b-tree write err: -5, ino 2 [ 96.775777][ T4597] hfsplus: b-tree write err: -5, ino 20 [ 96.795038][ T4774] device syzkaller0 entered promiscuous mode [ 97.968838][ T4437] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.060100][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 98.143776][ T4796] loop1: detected capacity change from 0 to 256 [ 98.209139][ T4437] usb 4-1: Using ep0 maxpacket: 16 [ 98.223395][ T4796] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 98.332834][ T4437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.370078][ T4437] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.396419][ T4802] device syzkaller0 entered promiscuous mode [ 98.418868][ T4437] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.440839][ T4437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.467688][ T4437] usb 4-1: config 0 descriptor?? [ 98.627824][ T4805] loop4: detected capacity change from 0 to 2048 [ 98.883183][ T4805] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 98.941015][ T4805] UDF-fs: Scanning with blocksize 512 failed [ 98.964003][ T4437] HID 045e:07da: Invalid code 65791 type 1 [ 98.978015][ T4805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.875849][ T4825] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.121776][ T4828] loop3: detected capacity change from 0 to 256 [ 100.188193][ T4828] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.269110][ T4828] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 100.345352][ T4828] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 100.698327][ T4437] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input6 [ 100.859139][ T4437] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 100.895820][ T4437] usb 4-1: USB disconnect, device number 4 [ 100.940286][ T4842] loop0: detected capacity change from 0 to 256 [ 101.019760][ T4844] device syzkaller0 entered promiscuous mode [ 101.084692][ T4845] fido_id[4845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 101.102408][ T4842] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.228925][ T4842] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.382075][ T4842] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.608637][ T4861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.173'. [ 102.249933][ T4865] loop0: detected capacity change from 0 to 512 [ 102.447187][ T4865] EXT4-fs (loop0): 1 truncate cleaned up [ 102.466830][ T4865] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.541275][ T4878] loop3: detected capacity change from 0 to 256 [ 102.565483][ T4865] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Out of memory [ 102.583219][ T4865] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #13: comm syz.0.175: mark_inode_dirty error [ 102.595767][ T4865] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Out of memory [ 102.611741][ T4865] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #13: comm syz.0.175: mark_inode_dirty error [ 102.628671][ T4880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.179'. [ 102.641028][ T4865] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.175: Invalid block bitmap block 1926430720 in block_group 0 [ 102.662225][ T4878] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.705655][ T4878] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 102.735319][ T4865] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.175: Invalid inode table block 1022815425 in block_group 0 [ 102.767286][ T4878] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 102.787638][ T4865] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 102.807907][ T4865] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #13: comm syz.0.175: mark_inode_dirty error [ 102.875904][ T4865] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.175: invalid indirect mapped block 234881024 (level 0) [ 102.942928][ T4865] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.175: Invalid inode table block 1022815425 in block_group 0 [ 102.978026][ T4889] loop2: detected capacity change from 0 to 164 [ 103.104962][ T4889] Unable to read rock-ridge attributes [ 103.636916][ T4897] device syzkaller0 entered promiscuous mode [ 105.058570][ T4910] hub 8-0:1.0: USB hub found [ 105.066925][ T4910] hub 8-0:1.0: 1 port detected [ 107.131164][ T4937] loop4: detected capacity change from 0 to 256 [ 107.186109][ T4937] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.258897][ T4937] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 107.304244][ T4937] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 107.397735][ T4949] device syzkaller0 entered promiscuous mode [ 107.822305][ T4958] device syzkaller0 entered promiscuous mode [ 108.676205][ T4998] loop2: detected capacity change from 0 to 256 [ 108.764296][ T4998] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.828318][ T4998] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 108.852696][ T4998] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 108.862976][ T5000] device syzkaller0 entered promiscuous mode [ 109.086326][ T5008] device syzkaller0 entered promiscuous mode [ 110.492992][ T5042] loop1: detected capacity change from 0 to 2048 [ 110.573181][ T5042] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 110.609122][ T5042] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 110.620280][ T5052] device syzkaller0 entered promiscuous mode [ 110.715681][ T5042] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,quota,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: writeback. [ 110.912736][ T5042] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.229: No space for directory leaf checksum. Please run e2fsck -D. [ 110.952989][ T4176] udevd[4176]: incorrect jbd checksum on /dev/loop1 [ 110.984260][ T5042] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.229: checksumming directory block 0 [ 111.029627][ T5042] EXT4-fs (loop1): Remounting filesystem read-only [ 111.035563][ T5064] device syzkaller0 entered promiscuous mode [ 111.424108][ T5071] netlink: 56 bytes leftover after parsing attributes in process `syz.1.236'. [ 111.489943][ T5073] loop3: detected capacity change from 0 to 164 [ 111.568223][ T5073] Unable to read rock-ridge attributes [ 111.602331][ T5073] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 111.620746][ T5073] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.972926][ T5089] device syzkaller0 entered promiscuous mode [ 112.189866][ T5099] device syzkaller0 entered promiscuous mode [ 112.934679][ T5108] loop4: detected capacity change from 0 to 4096 [ 113.046630][ T5108] EXT4-fs (loop4): Ignoring removed bh option [ 113.226283][ T5108] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 114.158853][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.536542][ T5117] loop2: detected capacity change from 0 to 2048 [ 114.764085][ T5117] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 114.861979][ T5117] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.024463][ T5117] EXT4-fs (loop2): shut down requested (0) [ 115.233905][ T5138] loop4: detected capacity change from 0 to 256 [ 115.328985][ T5138] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.384506][ T7] usb 4-1: device not accepting address 5, error -71 [ 115.428823][ T5138] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 115.506998][ T5147] device syzkaller0 entered promiscuous mode [ 115.555231][ T5138] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 115.654063][ T5149] device syzkaller0 entered promiscuous mode Stopping sshd: stopped /usr/sbin/sshd (pid 3948) [ 115.890333][ T5160] loop0: detected capacity change from 0 to 16 OK [ 115.958504][ T5160] erofs: (device loop0): mounted with root inode @ nid 36. [ 116.064188][ T5160] attempt to access beyond end of device [ 116.064188][ T5160] loop0: rw=524288, want=34359738368, limit=16 Stopping crond: [ 116.218825][ T4199] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -4082 in[4096, 0] out[9000] [ 116.653960][ T5160] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 116.885660][ T5179] loop1: detected capacity change from 0 to 2048 stopped /usr/sbin/crond (pid 3926) OK [ 116.933462][ T5160] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 117.085159][ T5160] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 117.199786][ T5179] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 117.359994][ T5179] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.389155][ T5160] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 117.505448][ T5160] attempt to access beyond end of device [ 117.505448][ T5160] loop0: rw=524288, want=56, limit=16 [ 117.530891][ T5160] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -4082 in[4096, 0] out[8192] [ 117.588279][ T5196] EXT4-fs (loop1): shut down requested (0) [ 117.935824][ T26] audit: type=1800 audit(1777951048.056:10): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="file2" dev="loop0" ino=89 res=0 errno=0 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3851) [ 118.422527][ T5214] loop1: detected capacity change from 0 to 512 [ 118.543680][ T5214] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.609375][ T5214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode Stopping network: [ 118.723173][ T5214] EXT4-fs (loop1): 1 truncate cleaned up [ 118.729404][ T5214] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,noquota,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 118.834937][ T5229] device syzkaller0 entered promiscuous mode [ 118.836472][ T5160] syz.0.262 (5160) used greatest stack depth: 20408 bytes left [ 119.099850][ T5237] device syzkaller0 entered promiscuous mode [ 119.189075][ T5237] tipc: Enabling of bearer rejected, failed to enable media [ 119.446359][ T5259] loop3: detected capacity change from 0 to 512 [ 119.680134][ T5259] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 119.773893][ T5259] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 OK [ 119.833147][ T5259] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.281: attempt to clear invalid blocks 2 len 1 [ 120.171270][ T5259] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 120.347407][ T5259] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.281: invalid indirect mapped block 1819239214 (level 0) Stopping iptables: [ 120.499502][ T5259] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.281: invalid indirect mapped block 1819239214 (level 1) [ 120.681368][ T5259] EXT4-fs (loop3): 1 truncate cleaned up OK [ 120.742662][ T5259] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 120.774267][ T5285] loop1: detected capacity change from 0 to 512 [ 120.949075][ T4408] usb 5-1: new full-speed USB device number 3 using dummy_hcd Stopping system message bus: [ 121.024024][ T5285] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.287: inode #1: comm syz.1.287: iget: illegal inode # [ 121.161893][ T5285] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.287: error while reading EA inode 1 err=-117 [ 121.242014][ T5285] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.302458][ T5285] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.287: inode #1: comm syz.1.287: iget: illegal inode # [ 121.384880][ T5285] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.287: error while reading EA inode 1 err=-117 [ 121.399914][ T4408] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.428979][ T4408] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.475662][ T5285] EXT4-fs (loop1): 1 orphan inode deleted [ 121.520262][ T5285] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 121.649834][ T4408] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 121.701283][ T4408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.759708][ T4408] usb 5-1: Product: syz [ 121.768015][ T5285] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.287: Invalid inode table block 5 in block_group 0 [ 121.774269][ T4408] usb 5-1: Manufacturer: syz [ 121.822726][ T4408] usb 5-1: SerialNumber: syz [ 121.846719][ T4408] usb 5-1: config 0 descriptor?? [ 121.876170][ T5308] device syzkaller0 entered promiscuous mode [ 121.963287][ T5308] tipc: Enabling of bearer rejected, failed to enable media [ 122.209453][ T5283] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 122.216043][ T5283] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.264950][ T5283] vhci_hcd vhci_hcd.0: Device attached done [ 122.442866][ T5315] vhci_hcd: connection closed [ 122.447187][ T442] vhci_hcd: stop threads [ 122.459710][ T442] vhci_hcd: release socket [ 122.477090][ T442] vhci_hcd: disconnect device [ 122.479556][ T13] usb 5-1: USB disconnect, device number 3 [ 122.822790][ T5342] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.955101][ T5363] device syzkaller0 entered promiscuous mode [ 126.313702][ T5377] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.469753][ T5393] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. killall: can't kill pid 4179: No such process killall: can't kill pid 4454: No such process [ 127.794932][ T5409] device syzkaller0 entered promiscuous mode [ 127.839299][ T1107] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 128.290178][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.386740][ T1107] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.755700][ T1107] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 128.778115][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.826655][ T1107] usb 5-1: Product: syz [ 128.837625][ T1107] usb 5-1: Manufacturer: syz Stopping klogd: [ 128.858808][ T1107] usb 5-1: SerialNumber: syz [ 128.878490][ T1107] usb 5-1: config 0 descriptor?? [ 130.418865][ T5395] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 130.425445][ T5395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.481550][ T5395] vhci_hcd vhci_hcd.0: Device attached [ 130.583519][ T5428] vhci_hcd: connection closed [ 130.584578][ T4210] vhci_hcd: stop threads [ 130.594352][ T4437] usb 5-1: USB disconnect, device number 4 [ 130.619311][ T4210] vhci_hcd: release socket [ 130.632837][ T4210] vhci_hcd: disconnect device OK Stopping acpid: [ 130.842765][ T5437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.326'. OK [ 132.133425][ T5470] loop0: detected capacity change from 0 to 512 Stopping syslogd: [ 132.243745][ T5470] EXT4-fs (loop0): inline encryption not supported [ 132.258082][ T5475] device syzkaller0 entered promiscuous mode [ 132.270447][ T5473] device syzkaller0 entered promiscuous mode [ 132.321684][ T5470] EXT4-fs (loop0): 1 orphan inode deleted [ 132.342401][ T5470] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x000000000000844d,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. stopped /sbin/syslogd (pid 3541) OK [ 132.449948][ T5480] loop2: detected capacity change from 0 to 2048 [ 132.531583][ T5480] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 132.569192][ T5480] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.596738][ T5480] EXT4-fs (loop2): shut down requested (0) umount: can't remount debugfs read-only [ 132.953647][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.970805][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.075078][ T5511] netlink: 180 bytes leftover after parsing attributes in process `syz.0.341'. [ 133.269057][ T1107] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 133.935100][ T5495] ODEBUG: Out of memory. ODEBUG disabled [ 134.123414][ T5530] device syzkaller0 entered promiscuous mode [ 134.177916][ T5531] device syzkaller0 entered promiscuous mode [ 134.239116][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.260924][ T1107] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.274344][ T5534] loop0: detected capacity change from 0 to 1024 [ 134.369635][ T5534] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.382274][ T5534] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.440750][ T4235] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.455218][ T26] audit: type=1800 audit(1777951064.576:11): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.350" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 134.480073][ T1107] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 134.500281][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.525842][ T1107] usb 2-1: Product: syz [ 134.539158][ T1107] usb 2-1: Manufacturer: syz [ 134.544027][ T1107] usb 2-1: SerialNumber: syz [ 134.557532][ T1107] usb 2-1: config 0 descriptor?? [ 134.604078][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.856450][ T5507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 134.863050][ T5507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.878939][ T4235] usb 5-1: Using ep0 maxpacket: 8 [ 134.891722][ T5507] vhci_hcd vhci_hcd.0: Device attached [ 134.944464][ T5551] vhci_hcd: connection closed [ 134.944905][ T4276] vhci_hcd: stop threads [ 134.944975][ T4229] usb 2-1: USB disconnect, device number 2 [ 134.949856][ T4276] vhci_hcd: release socket [ 134.999805][ T4276] vhci_hcd: disconnect device [ 135.019150][ T4235] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 135.037642][ T4235] usb 5-1: config 0 has no interface number 0 [ 135.173401][ T21] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.186474][ T21] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 135.209856][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.216533][ T21] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 135.229045][ T4235] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 135.238456][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.267115][ T4235] usb 5-1: Product: syz [ 135.277248][ T4235] usb 5-1: Manufacturer: syz [ 135.287396][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.298902][ T4235] usb 5-1: SerialNumber: syz [ 135.312717][ T4235] usb 5-1: config 0 descriptor?? [ 135.324743][ T21] usb 4-1: config 0 descriptor?? umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only [ 135.476610][ T5570] loop0: detected capacity change from 0 to 1024 The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.68 closed by remote host. [ 135.659021][ T4235] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 135.666011][ T4235] usb 5-1: No valid video chain found. [ 135.701433][ T4235] usb 5-1: USB disconnect, device number 5 [ 135.842746][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 135.855233][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 135.886462][ T21] usb 4-1: USB disconnect, device number 7 Sent SIGKILL to all processes Requesting system poweroff [ 137.195761][ T4210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.266399][ T4210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.344019][ T4210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.414125][ T4210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.514576][ T4210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.573661][ T4210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.613023][ T4210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.655844][ T4210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.673407][ T5571] kvm: exiting hardware virtualization [ 137.687999][ T5571] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 137.699564][ T5571] ACPI: PM: Preparing to enter system sleep state S5 [ 137.708022][ T5571] reboot: Power down serialport: VM disconnected.