last executing test programs: 3m4.673921217s ago: executing program 1 (id=93): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@user_xattr}]}, 0x2, 0x797, &(0x7f0000000fc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(0xffffffffffffffff, 0xfe53, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r2) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001b80)={0x0, "25667b74053ac119275f125d792a8c03"}) openat(0xffffffffffffffff, 0x0, 0x105e42, 0x0) removexattr(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000240)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noblock_validity}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv0}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") semget$private(0x0, 0x1, 0x420) 3m3.887510308s ago: executing program 1 (id=95): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80000) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000140)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000002000)=ANY=[@ANYRES32=r1], 0x35c}, 0x1, 0x0, 0x0, 0x844}, 0x984b96203a541124) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0) munmap$binder(0x0, 0xffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, 0x0, &(0x7f00000003c0)) 3m0.150940278s ago: executing program 1 (id=102): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x3008452, &(0x7f0000000b00)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x80800) fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x9) inotify_add_watch(r0, &(0x7f0000000a80)='./file0\x00', 0x4000008) unshare(0x8040480) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4000) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x800007e1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1005, 0x8000000, 0x1}, 0x48) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2m56.771903363s ago: executing program 1 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, r3, 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000400)="$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") r5 = creat(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000001140)={0xa0, 0x19, 0x1, {0x45b, {0x0, 0x2, 0x6}, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x39, 0xd, 0x7b, 0x5, 0x2, 0x1, 0x81, 0xdeaf, 0x9, 0x3, 0x2, 0x40000000000000ab}}, 0xa0) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close_range(r5, r5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xb, 0x4082172, 0xffffffffffffffff, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 2m55.276593905s ago: executing program 1 (id=110): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0xf, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000340)='./file1\x00', 0x200802, &(0x7f0000000380)=ANY=[], 0x9, 0x20e, &(0x7f00000003c0)="$eJzsVU9rE0EU/81mkm00SMGbV4PtRW22IJ692Lt+AEO61mLin05EEwpGL70oiF+i4JfQg6B3DyKCFz0o6KHiKSIjb+bNZDdZ7KbSnuYH4f3e/zc7mZkb6q6KAfzZ2+5gEQYCDXwUAhLAkrC2cc3Knyw146u0eovtL1h+YakGw3dPLB3ebHe76ZYa/JvEEMA+MXkya7r08unJ8vlT5O3jvEWgTJaQB+n1f6RfsV921vUsZ4mLYjgX05VbV+aeR7s5jnDtROozwzvyqwFkLd9yMWOt9YGbnqjSSqsojBFirv96AaEChgDe9bsxu03T5MNz27kwpsLpdeQ/y76ETvHR7mkxobvIkGiudAXeD3X5UYQfAqji/d52h6zX+BYj97r9uSNhskh5nYk5JYERICrQpijVkRy7BIx1v3fnvBoMz2722hvpRnorSVYvrLw5zkdDPwQ2u+mKMGPY9IiIhAed03rGT/+0TxP/CBmIzGigdU3MvqS7nJdPZ0LqQGQChb/I83Vf+f4x2+6pHq7iDBYA3B+RO+EP1ARVk7hOS1uDQIWVlswOhDEiLBjHuc7t7vqOac9pu5C+Ruszql5JWKFG6epFv/wdlk2Wayx3J/0M3Nvl3iRpKnxnbXkE1PCg3e9vmcfLMrLVfAVjSxZ954i7utfQNWvGKIljZQMDAgICAgICAg4JfwMAAP//2Sk6fA==") tgkill(r1, r1, 0xc) syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x2800010, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRES8, @ANYRES32=r3, @ANYBLOB="ecc3d143f38e5089bb46440d7cecc06241098d0d33c579dbed485b93da00a1cc46d1572edb73005e819ebb4b611c6ab1005284c145c7e7e9e506f1a0865033cc45f0a3e925bd472f8d4f75661042aea035f583b06376f2998165e1e519f20ce36faa936693869b39da5d72d222ac430319680cceb2383f2b42420ada5ced4c9fb11d056b0686c19c8d6877289f92067ccef6cb15885eb5a1a0c4c84728f2929a031fcb0fe5e00b23a42e132cb52b4eabf65079c8743f0325fdce0fe8bbef415b98701043f91758a6189b337790e34e1fec86e2a3d107d7d09ebd74ef693e57fcf9a82586def90302eb15d8c3498f7ef734486b42422f759421"], 0x6, 0x22c, &(0x7f00000007c0)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x7, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900c00e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f0000001100)='GPL\x00', 0x2, 0xffa0, &(0x7f0000001140)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000d80)='./file0\x00', r4}, 0x18) syz_usb_connect(0x0, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x61, 0x1d, 0x1d, 0x20, 0x1199, 0x224, 0xbce6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0xb7, 0x4, 0xa0, 0x0, "", [{{0x9, 0x4, 0x7c, 0x5, 0x6, 0xaf, 0x68, 0x14, 0x2, [], [{{0x9, 0x5, 0x2, 0xc, 0x200, 0x0, 0x5, 0x1}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x5c, 0x0, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xab, 0x29, 0x8}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xa, 0x5, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x1, 0x7, 0x7f}}]}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2m52.640138204s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='trace/events/sched/sched_switch/filter\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000340)=0x4) mount(0x0, &(0x7f0000000280)='./trace\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) 2m51.844531045s ago: executing program 32 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='trace/events/sched/sched_switch/filter\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000340)=0x4) mount(0x0, &(0x7f0000000280)='./trace\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) 18.041347053s ago: executing program 3 (id=416): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000040)=@hci={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000140)="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", 0x112) write(0xca, 0x0, 0x0) write(0xca, &(0x7f00000002c0)="040e0e010410000102ffffffffffff", 0xf) write(0xca, 0x0, 0x0) write(0xca, &(0x7f00000003c0), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) 17.08883753s ago: executing program 2 (id=418): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16.213773829s ago: executing program 3 (id=420): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'wg0\x00'}}, 0x1e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001380)={0x1, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x1011f, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001440)={0x1, &(0x7f0000001500)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001540), 0x40081, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) clock_settime(0xfffffffb, 0x0) 12.434982524s ago: executing program 2 (id=430): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000200)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f00000002c0)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000380)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000400)={[0xec8, 0xfffffffffffffffe, 0xe9b, 0x40022, 0x20000003, 0x7f, 0x44234, 0x8000000000000407, 0x7, 0x9c3, 0xffff, 0x1005, 0xc, 0x6, 0x0, 0xfffffdfffffffffd], 0x1ffe, 0x43712}) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000500)={0xc0000, 0x0, {[0x0, 0x9, 0x80000001, 0x10000, 0x7, 0x3, 0x2, 0xb4b]}}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$KVM_RUN(r1, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x1008840, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x5a8, &(0x7f0000000940)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) quotactl$Q_QUOTAOFF(0xffffffff80000700, &(0x7f0000000f80)=@loop={'/dev/loop', 0x0}, 0x0, 0x8cffffff00000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f00000005c0)='.\x00', 0x0, 0x400, &(0x7f0000000800)=ANY=[@ANYBLOB=',debug=0x0000007,version=9p20\\++},%{!(6,afid=0x000000003f5689cf,nodevmap,fscache,afid=0x0000000000000f9c,msize=0']) syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x801, &(0x7f00000005c0)=ANY=[], 0x2, 0x185, &(0x7f0000000600)="$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") mount(0x0, &(0x7f0000000040)='./sys/module/sunrpc/parameters/min_resvport\x00', &(0x7f0000000140)='gadgetfs\x00', 0x1880000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/sunrpc/parameters/min_resvport\x00', 0x1, 0x0) 11.617061087s ago: executing program 4 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r6, &(0x7f0000000840)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r7, 0xfffffffffffffc01, 0x0) tee(r5, r7, 0xfff, 0xd) 10.522471919s ago: executing program 4 (id=435): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 10.468759014s ago: executing program 2 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000003c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) getrusage(0x1, &(0x7f0000001540)) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000014c0)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001500)=0x40) 8.868271417s ago: executing program 5 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r5, &(0x7f0000000840)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0xfff, 0xd) 8.865710598s ago: executing program 2 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r5, &(0x7f0000000840)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0xfffffffffffffc01, 0x0) tee(r4, r6, 0xfff, 0xd) 7.572927849s ago: executing program 5 (id=440): syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x4}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 7.182786389s ago: executing program 4 (id=443): syz_mount_image$udf(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x4804497, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRES32], 0x68, 0xc54, &(0x7f0000000d40)="$eJzs3V9oXOl9N/DfMyOtRtq8G2028SZvs9uBlMQotfG/2AouQY4VtQHHGyIrdK+ikSU7w8ojI8mNN22D2pIWehO6N6U3RTRZWshFr7q9jNJsIaEUSshFclEQNFn2ohe6CJS2bFTOmWekkSzbs+uVJXs/HzP+njnzO6PnOc/ozBnQMycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjPfu7CiZPpoFsBADxMlye/dOK0938AeE+54vM/AAAAAAAAAAAAAAAcdimqcSRSDL22kabL+221S83WrdtT4xN7bzaYIkUlqmV9caudPHX6zKfOnhvt5L23f7d9JF6YvHKhfvFnx28uzi0tzc3Wp1rNqwuzcz0/Q3v7hRvvdPvdRsodUL/x0q3Za9eW6qeOn97x8O3hNwaePDJ8/tyxs6Od2qnxiYnJrpq+/nf80+9wtxkeT0Q1GpHireE3UyMiKvHg++I+r539Nlh2YqTsxNT4RNmR+WajtVw8mCq5qhJR79porLOPHsJYPJCxiJWi+UWDR4ruTd5sLDZm5ufqX2wsLjeXmwutVGm3tuhPPSoxmiJWI2J94M6n649qPB8pXjmxkWYiotrZD58sJwbfvz2VfehjD4p21vsjViuPwJgdYgNRjcuR4pevH42rxT7Lt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQX1fjXSLGQNtJseTzoHFcufbn++da1ha7a8rjS9xi8PzxMh/zYVItqzJRH/I30zk92AAAAAAAAAAAAAAAAAHi3DUY1vh0p/uS53yvnFUc5L/3950ff9+Jvd88Zf/Y+z1PUHo+IlUpvc3L789ThVCn+7UPH6EktqvGNPP/vjw66MQAAAAAAAAAAAAAAAAAAAO9p1XgxUnzl2NG0Gt3XFG+2rtevNGbm21eF7VxTvHPN9M3Nzc16audYzumcKzlXc67lXM8Zlbx9zrGc0zlXcq7mXMu5njOqefucYzmnc67kXM25lnM9Z/Tl7XOO5ZzOuZJzNedazvWccUiu3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DipRDV+FSm+9bWNFCkixiKmo51rAwfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgUEvVOB4p1l6slfdXKxFXIuJXm5ub5e2/Nzc3IzaK5Qd10H0FAAAAAAAAAAAAAAAAAACAQytV42OR4pn/2Uj1iLg9/MbAk0eGz587dna0GtVIRUl3/QuTVy7ULy7cuLk4t7Q0N1ufuvidt/PjapearVu3p8Yn3vWO9GTwzva3mlcXZud6fYL7tH+wdnHh5suLzetfXd7z8aHahZml5cXG1b0fjsGoREx3rxkpGzw1PlE2er7ZaJWbpspdGliJGOu1MwAAAAAAAAAAAAAAAAAAABwaQ6kan4sUP//3M6kzb7yvPef//7XvVbdqX/2D7e8CmN+VHd3fH9DLcuq1oSPlxPv61PjExGTX6r7+O0uLNqVUjWcjxSde+XA5Hz7F0J5z44u6p4q6G2dy3fCvFXUrO6pqI1PjE/XLC61jF+bnF642lhsz83eZgP9Urx0CAAAAAAAAAAAAAAAAAACAbUOpGj+JFP/5d/+WOtedz/P/+9r3uub//1Y5hb5USztzSzm3/6lybn97+f3nR4eef+5u6/dj/n/RppSq8c3tryvYmv8/vau2qPuzSPHmcx8tH0tReaKoa3S6037Ga835uRNF7V9Hil9/q1MbZe31XPvMdu3JonYwUvzlxs7ar+baD27Xnipqj0aKH/zH3rUf2q49XdT+PFL849/WO7VDRe3v59oj27XHry7Mz95vtxbj/91I8Z3Lv5M6fb7r+Hd9/8PKrtxyx5jfe7n38e+0Y+/xH+5at5LH9U8jxemffLgcy3uN/9lI8d3aR3Nde9/P5MefLv/fHv9PRIqf/cvO2mu59gPbtSd77dZBK8b/25Hi+3/1060+5/HPe3Z7hLrH///37cytV8m+jf+9f/+f7lo3nNt19W3ui/eipZe//lJjfn5u8YEXas9HvBvP0+tC8TLd95+VvwMnHmK/LFg4DAv3O3J8b3D/j07st+L9/88jxf8eqabOeUx+/39f+972+d9/fWP7/f/8rtxyQO//H+hadz6ftfT3RdSWb9zsfzaitvTy1481bzSuz12fa506eeLTnz578sTJs/1PdE7utpd63nePg2L8fxQpfvz3P976HLPz/G/v8/+hXbnlgMb/me4+7Tiv6XlXvCcV4/83keLpz/506/Pmvc7/O5//j35sZ279/h3Q+H+wa91wblfzbe4LAAAAAAAAAACAR8lQqsZfRIrf/ePfTJ05RL38/d/srtxyQH//daRr3Wxv8xoiPeCfSfe8kwEADpHi/O9DkeJ7mz/cmsu98/wvfqNT233+dzeH4fr/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwqEtRjT+MFEOvbaS1geJ+W+1Ss3Xr9tT4xN6bDaZIUYlqWV/caidPnT7zqbPnRjt5aeBhduMj8cLklQv1iws3bi7OLS3NzdanWs2rC7NzPT/Dg26/20i5A+s3Xro1e+3aUv3U8dM7Hr49/MbAk0eGz587dna0Uzs1PjEx2VXT1/+Of/od0l3WPxHV+GGkeGv4zfT9gYhKPPi+uM9rZ78Nlp0YKTsxNT5RdmS+2WgtFw+mSq6qRNS7Nhrr7KOHMBYPZCxipWh+0eCRonuTNxuLjZn5ufoXG4vLzeXmQitV2q0t+lOPSoymiNWIWN/jV7I/qvHNSPHKiY30TwMR1c5++OTlyS+dOH3/9lT2oY89KNpZ749YrTwCY3aIDUQ1/iFS/PL1o/GDgYi+aN/i4xFfKPK1iFeL/ExEKl4YZyJ+8VAP7eynvqjGmUixkDbS6wPF8aBzXLn05frnW9cWumo7x5VH/v3hYTrkx6ZaVONH5RF/I/3z7t/roQNqFAAAAAAAAAAAAAAAAADlTNrVSPGVY0dTOT94a05xs3W9fqUxM9+e1teZ+9eZM725ublZT+0cyzmdcyXnas61nOs5o5K3zzmWczrnSs7VnGs513NGNW+fcyzndM6VnKtlDmy1eD2vj768fc6xnNM5V3Ku5lzLuZ4zDsncPQAAAAAAAAAAAAAAAAAA4PFSiWp5FfdvfW0jlVOlxyKmo51rrvP72Pu/AAAA//8L9F/b") prlimit64(0x0, 0xe, &(0x7f00000019c0)={0x7, 0x100}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1800040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@block_validity}, {@errors_remount}, {@nodelalloc}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x59c, &(0x7f0000000780)="$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") rmdir(&(0x7f0000001b40)='./file0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000001a00)=0x7) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000280)={r2, r3/1000+10000}, 0x10) sched_setscheduler(r0, 0x1, &(0x7f0000001a40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001ac0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001b40), 0x651, 0x0) fchdir(r4) recvmmsg(r4, &(0x7f0000001b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001bc0)=0x6) gettimeofday(0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8001) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000040)) add_key(&(0x7f0000005d40)='asymmetric\x00', 0x0, &(0x7f0000001c00)="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", 0x5aa, 0xffffffffffffffff) 6.242125975s ago: executing program 0 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="64796e2c00c4bc028f592e8a95ba6d714e5521b2ebaa7d62e247bf1747f678a5e047976018da7aef12"]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) writev(r3, 0x0, 0x0) 6.154800874s ago: executing program 5 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r6, &(0x7f0000000840)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r7, 0xfffffffffffffc01, 0x0) tee(r5, r7, 0xfff, 0xd) 4.758389416s ago: executing program 5 (id=446): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4.725122669s ago: executing program 3 (id=447): r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x440000, 0x4) utimensat(r0, &(0x7f0000000440)='./cgroup\x00', 0x0, 0x100) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYRESHEX=0x0, @ANYBLOB='Amap=acorn,iocharset=macgaelic,session=0x0000000000000058,mode=0xffffffffffffffff,map=off,check=strict,uid>', @ANYRESDEC=0x0, @ANYBLOB=',cont%|t=user_u,\b'], 0xfa, 0x6bb, &(0x7f00000015c0)="$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") mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040)='nfs4\x00', 0x0, &(0x7f0000000240)='acl') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x0, &(0x7f00000001c0)='discard') 4.635374458s ago: executing program 0 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x60, 0x2c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffff}, {0xffff, 0x3}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "22d2b6b4d255581f0300000600"}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0xc0}}, @TCA_RATE={0x6, 0x5, {0x8d, 0x4}}]}, 0x60}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014"], 0x74}}, 0x24005000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448cb, &(0x7f0000000cc0)) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) 3.504338594s ago: executing program 3 (id=449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000003c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) getrusage(0x1, &(0x7f0000001540)) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000014c0)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001500)=0x40) 3.501821154s ago: executing program 2 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x800) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff5, 0x6, 0xa33, 0x4, 0x3}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) 3.207468744s ago: executing program 4 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r5, &(0x7f0000000840)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0xfffffffffffffc01, 0x0) tee(r4, r6, 0xfff, 0xd) 2.629995612s ago: executing program 2 (id=451): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x141400, 0xd2) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000001c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1d, 0xe}}) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9", @ANYRES32=0x0, @ANYRES32=0x0], 0x239) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x2000000000000) 2.624229443s ago: executing program 0 (id=452): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.599851116s ago: executing program 5 (id=453): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 2.379850338s ago: executing program 0 (id=454): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000500)={[{0x9, 0x1, 0x7, 0x1, 0x5, 0x1f, 0xfc, 0x6, 0x0, 0x2, 0x40, 0x80, 0x5}, {0x400, 0xea2, 0x5, 0x7f, 0x86, 0x0, 0x7, 0x0, 0x4, 0x0, 0x8, 0x1, 0x2}, {0x4, 0x225, 0x8f, 0x5, 0x3, 0x0, 0xb, 0x0, 0x7, 0x7, 0x7f, 0x7f, 0xfffffffffffffff9}], 0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f00000004c0)=[0x0], 0x1, 0x0}) read(r3, &(0x7f0000001140)=""/4096, 0x1000) close(0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.309955407s ago: executing program 3 (id=455): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x78, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xa}, {0x1}, {0x300, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x44, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ct={0x2c, 0x18, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x10}}]}}]}, 0x78}}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)={0x108, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0xf7, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8", @typed={0x8, 0x96, 0x0, 0x0, @fd=r1}, @nested={0x65, 0xf1, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @ipv6=@empty}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}]}]}, 0x108}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000005c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r5, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000680)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000c00)=[{&(0x7f0000000c40)="480000001500190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000780)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001780)=ANY=[@ANYBLOB="ff0004ffffff0180c200000086dd6012000800083a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa8000907800000000"], 0x0) 1.1840147s ago: executing program 4 (id=456): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/152, 0x98}, 0x80}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2002, 0x0) bind$netlink(r1, &(0x7f0000000900)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000940)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) syz_open_dev$sg(0x0, 0x0, 0x8002) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) 1.155551703s ago: executing program 0 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000240), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r6, &(0x7f0000000840)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r7, 0xfffffffffffffc01, 0x0) tee(r5, r7, 0xfff, 0xd) 112.665579ms ago: executing program 0 (id=458): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'wg0\x00'}}, 0x1e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001380)={0x1, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x1011f, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001440)={0x1, &(0x7f0000001500)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001540), 0x40081, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) clock_settime(0xfffffffb, 0x0) 112.319529ms ago: executing program 5 (id=460): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) timer_gettime(r1, 0x0) dup(0xffffffffffffffff) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, {@loopback, 0x4e20, 0x1, 0x1}}, 0x44) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) 112.120719ms ago: executing program 3 (id=461): socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000002, 0x401d132, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x2e, 0x0, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x80800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000680)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f00000006c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000700), 0x4) io_uring_enter(r3, 0x48f6, 0x53de, 0xe1, &(0x7f0000000100)={[0x4]}, 0x8) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000780)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r4, &(0x7f00000007c0)=[{&(0x7f0000000800)='Z', 0x1}], 0x100000000000010e) 0s ago: executing program 4 (id=462): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 74.592057][ T4264] cgroup: Unknown subsys name 'net' [ 74.693221][ T4264] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.987926][ T4264] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.380696][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.388336][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.388837][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.396676][ T4294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.404346][ T4293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.412607][ T4294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.417802][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.424691][ T4294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.438034][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.439018][ T4294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.445141][ T4295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.453668][ T4294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.460241][ T4295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.467155][ T4294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.480361][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.481399][ T4294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.495489][ T4293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.496876][ T4294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.502907][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.510446][ T4294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.523753][ T4296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.532279][ T4296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.540102][ T4296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.547649][ T4296] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.552646][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.555452][ T4296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.562194][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.576326][ T4293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.586753][ T4297] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.594432][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.679960][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.687564][ T4276] rdma_rxe: rxe_register_device failed with error -23 [ 77.694660][ T4276] rdma_rxe: failed to add rxe_eth0 [ 77.702744][ T4278] rdma_rxe: rxe_register_device failed with error -23 [ 77.703201][ T4277] rdma_rxe: rxe_register_device failed with error -23 [ 77.710937][ T4284] rdma_rxe: rxe_register_device failed with error -23 [ 77.716450][ T4277] rdma_rxe: failed to add rxe_eth0 [ 77.728653][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.736211][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.746815][ T4278] rdma_rxe: failed to add rxe_eth0 [ 77.767429][ T4284] rdma_rxe: failed to add rxe_eth0 [ 77.947469][ T4279] infiniband rxe0: set active [ 77.952354][ T4279] infiniband rxe0: added rxe_eth0 [ 77.968990][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.019181][ T4279] RDS/IB: rxe0: added [ 78.023786][ T4279] smc: adding ib device rxe0 with port count 1 [ 78.033078][ T4279] smc: ib device rxe0 port 1 has pnetid [ 78.051603][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.091492][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.279087][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 78.316372][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.384129][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 78.410557][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 78.424981][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 78.456854][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.615564][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.666293][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.674284][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.687097][ T4277] device bridge_slave_0 entered promiscuous mode [ 78.703720][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.710917][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.723319][ T4278] device bridge_slave_0 entered promiscuous mode [ 78.744427][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.752661][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.765147][ T4277] device bridge_slave_1 entered promiscuous mode [ 78.787823][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.794946][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.804143][ T4276] device bridge_slave_0 entered promiscuous mode [ 78.822069][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.830233][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.866480][ T4278] device bridge_slave_1 entered promiscuous mode [ 78.882812][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.890065][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.898584][ T4284] device bridge_slave_0 entered promiscuous mode [ 78.906068][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.913422][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.923500][ T4276] device bridge_slave_1 entered promiscuous mode [ 78.957358][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.964472][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.972522][ T4284] device bridge_slave_1 entered promiscuous mode [ 78.991360][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.004030][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.015994][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.034712][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.043997][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.053249][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.082517][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.108277][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.154097][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.178278][ T4277] team0: Port device team_slave_0 added [ 79.185903][ T4278] team0: Port device team_slave_0 added [ 79.212147][ T4277] team0: Port device team_slave_1 added [ 79.227938][ T4278] team0: Port device team_slave_1 added [ 79.236319][ T4284] team0: Port device team_slave_0 added [ 79.244422][ T4276] team0: Port device team_slave_0 added [ 79.252300][ T4276] team0: Port device team_slave_1 added [ 79.288092][ T4284] team0: Port device team_slave_1 added [ 79.302858][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.309917][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.336136][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.356140][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.363277][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.389498][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.401485][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.410668][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.436833][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.461291][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.468552][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.494711][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.508880][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.515849][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.541770][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.553173][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.562768][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.588933][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.609515][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.616484][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.643041][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.654281][ T4296] Bluetooth: hci1: command 0x0409 tx timeout [ 79.655903][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.661623][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 79.667654][ T4295] Bluetooth: hci2: command 0x0409 tx timeout [ 79.673685][ T4298] Bluetooth: hci4: command 0x0409 tx timeout [ 79.684279][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.685900][ T4294] Bluetooth: hci3: command 0x0409 tx timeout [ 79.720118][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.765420][ T4276] device hsr_slave_0 entered promiscuous mode [ 79.772319][ T4276] device hsr_slave_1 entered promiscuous mode [ 79.803532][ T4278] device hsr_slave_0 entered promiscuous mode [ 79.810511][ T4278] device hsr_slave_1 entered promiscuous mode [ 79.817404][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.825175][ T4278] Cannot create hsr debugfs directory [ 79.942030][ T4277] device hsr_slave_0 entered promiscuous mode [ 79.952223][ T4277] device hsr_slave_1 entered promiscuous mode [ 79.961706][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.971608][ T4277] Cannot create hsr debugfs directory [ 80.000059][ T4284] device hsr_slave_0 entered promiscuous mode [ 80.010337][ T4284] device hsr_slave_1 entered promiscuous mode [ 80.019636][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.029344][ T4284] Cannot create hsr debugfs directory [ 80.303980][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 80.551772][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.571675][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.579308][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.587671][ T4279] device bridge_slave_0 entered promiscuous mode [ 80.600564][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.608192][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.616082][ T4279] device bridge_slave_1 entered promiscuous mode [ 80.630181][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.639057][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.659730][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.694694][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.705690][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.721135][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.731216][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.744489][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.753634][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.790649][ T3936] infiniband rxe0: set active [ 80.818938][ T4353] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.841215][ T4279] team0: Port device team_slave_0 added [ 80.879535][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.918572][ T4279] team0: Port device team_slave_1 added [ 80.932825][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.942904][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.988818][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.012740][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.035901][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.062171][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.107243][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.114231][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.142143][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.173593][ T4284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.195331][ T4284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.207601][ T4284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.220537][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.234106][ T4279] device hsr_slave_0 entered promiscuous mode [ 81.241265][ T4279] device hsr_slave_1 entered promiscuous mode [ 81.252018][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.259701][ T4279] Cannot create hsr debugfs directory [ 81.269711][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.283462][ T4284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.321892][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.332535][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.341065][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.350310][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.364699][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.380665][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.445103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.455224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.465502][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.472832][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.482841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.511331][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.521644][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.530503][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.537677][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.545485][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.554297][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.562820][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.569940][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.607457][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.616063][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.625667][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.636001][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.643309][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.656179][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.667538][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.676102][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.684826][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.694196][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.702935][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.712824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.727185][ T4294] Bluetooth: hci3: command 0x041b tx timeout [ 81.727737][ T4296] Bluetooth: hci0: command 0x041b tx timeout [ 81.733217][ T4294] Bluetooth: hci4: command 0x041b tx timeout [ 81.739460][ T4298] Bluetooth: hci2: command 0x041b tx timeout [ 81.745537][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 81.765010][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.774149][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.789340][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.799849][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.849022][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.858025][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.868290][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.877231][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.885598][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.895223][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.903691][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.933476][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.943710][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.953888][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.969521][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.978531][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.995681][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.027654][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.052750][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.064932][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.076605][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.089021][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.106679][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.119547][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.143618][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.171267][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.193069][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.210785][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.220271][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.227744][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.239582][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.248058][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.256067][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.271247][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.300109][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.318158][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.334674][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.341858][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.352008][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.385916][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.395774][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.408380][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.421688][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.431066][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.440360][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.447521][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.473959][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.482934][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.508909][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.528241][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.545027][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.554385][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.563930][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.584352][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.596148][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.603318][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.613157][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.622024][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.654536][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.686813][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.695820][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.748762][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.756361][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.764744][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.775703][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.793400][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.814990][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.823021][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.833011][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.842261][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.852814][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.860840][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.876105][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.905044][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.915971][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.925787][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.935483][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.944076][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.952100][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.962673][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.978825][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.985694][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.998319][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.046910][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.056387][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.072202][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.079410][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.094702][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.103902][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.113328][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.120515][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.130448][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.139221][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.163144][ T4276] device veth0_vlan entered promiscuous mode [ 83.192839][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.209332][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.223590][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.232230][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.248206][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.264679][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.275281][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.305194][ T4278] device veth0_vlan entered promiscuous mode [ 83.321762][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.335878][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.345740][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.358624][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.370121][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.379476][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.388676][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.398120][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.417860][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.426006][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.442425][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.458547][ T4276] device veth1_vlan entered promiscuous mode [ 83.470051][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.485509][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.502646][ T4278] device veth1_vlan entered promiscuous mode [ 83.516870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.525978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.562163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.576276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.612296][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.633770][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.644045][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 83.663621][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 83.687505][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.695076][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.740852][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.754856][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.771717][ T4278] device veth0_macvtap entered promiscuous mode [ 83.793594][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.802479][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.810752][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 83.810786][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 83.817727][ T4294] Bluetooth: hci1: command 0x040f tx timeout [ 83.829773][ T4297] Bluetooth: hci4: command 0x040f tx timeout [ 83.834929][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.835775][ T4297] Bluetooth: hci3: command 0x040f tx timeout [ 83.858169][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.871483][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.888258][ T4278] device veth1_macvtap entered promiscuous mode [ 83.924634][ T4276] device veth0_macvtap entered promiscuous mode [ 83.949633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.965034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.983315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.007411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.019979][ T4277] device veth0_vlan entered promiscuous mode [ 84.045569][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.068083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.076143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.087148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.095752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.106802][ T4276] device veth1_macvtap entered promiscuous mode [ 84.130018][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.141734][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.152020][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.168322][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.193411][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.210454][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.231047][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.244519][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.254501][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.263320][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.272277][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.281128][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.293742][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.303194][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.312465][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.321281][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.341423][ T4277] device veth1_vlan entered promiscuous mode [ 84.349432][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.359051][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.372232][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.383989][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.413934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.424003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.435411][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.445135][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.455371][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.464585][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.510208][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.525674][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.556333][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.566072][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.575369][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.585011][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.615855][ T4284] device veth0_vlan entered promiscuous mode [ 84.625185][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.635535][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.645220][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.653546][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.681996][ T4277] device veth0_macvtap entered promiscuous mode [ 84.706947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.715151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.729520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.758775][ T4277] device veth1_macvtap entered promiscuous mode [ 84.769660][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.779025][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.787659][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.796368][ T4279] device veth0_vlan entered promiscuous mode [ 84.815105][ T4284] device veth1_vlan entered promiscuous mode [ 84.852084][ T4279] device veth1_vlan entered promiscuous mode [ 84.883552][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.893508][ T4284] device veth0_macvtap entered promiscuous mode [ 84.912306][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.921786][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.934281][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.944261][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.955582][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.967629][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.975255][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 84.983761][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 84.992513][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.000901][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.009755][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 85.017944][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.025969][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.034355][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.042909][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.053781][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.062558][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.071703][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.080804][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.094980][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.095431][ T4284] device veth1_macvtap entered promiscuous mode [ 85.103549][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.145107][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.156048][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.166455][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.177426][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.190731][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.198377][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 85.206500][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.215584][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.224226][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.233099][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.266378][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.276019][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.285338][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.294698][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.317068][ T4279] device veth0_macvtap entered promiscuous mode [ 85.324592][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.335724][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.346905][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.357643][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.368192][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.378866][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.388968][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.399940][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.416034][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.424486][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.435118][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.451797][ T4279] device veth1_macvtap entered promiscuous mode [ 85.459888][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.469657][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.478513][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.486331][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.496503][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.518303][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.536855][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.547322][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.561100][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.572530][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.586058][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.604556][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.626885][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.634751][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.645336][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.657831][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.666746][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.681095][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.691972][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.701950][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.713177][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.756774][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.776934][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.790527][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.801739][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.813356][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.825397][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.841842][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.852579][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.874900][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.897124][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 85.903180][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 85.905524][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 85.909229][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 85.909258][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 85.937142][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.961366][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.049553][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.070513][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.086149][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.103724][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.115463][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.151212][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.161572][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.172341][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.186833][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.222974][ T4401] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 86.244409][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.259337][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.815154][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.826272][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.835860][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.859206][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.924767][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.935900][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.943814][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.953759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.968496][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.020258][ T4412] loop0: detected capacity change from 0 to 1024 [ 87.031136][ T4412] ======================================================= [ 87.031136][ T4412] WARNING: The mand mount option has been deprecated and [ 87.031136][ T4412] and is ignored by this kernel. Remove the mand [ 87.031136][ T4412] option from the mount to silence this warning. [ 87.031136][ T4412] ======================================================= [ 87.085044][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.114499][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.130962][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.180268][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.292070][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.320971][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.359176][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.440702][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.476767][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.963474][ T4424] hfsplus: unknown catalog record type 0 [ 87.969743][ T4424] hfsplus: unknown catalog record type 0 [ 88.270390][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.288945][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.334597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.353227][ T31] hfsplus: unknown catalog record type 0 [ 88.411688][ T31] hfsplus: unknown catalog record type 0 [ 88.502111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.808173][ T4433] loop1: detected capacity change from 0 to 2048 [ 89.791349][ T4433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.998643][ T4434] loop0: detected capacity change from 0 to 4096 [ 90.584474][ T4449] process 'syz.4.11' launched './file0' with NULL argv: empty string added [ 90.751736][ T4434] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 90.800433][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 91.560949][ T4458] loop2: detected capacity change from 0 to 1024 [ 92.216581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.236559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.246566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.256563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 92.266556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.276560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.286562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.296562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.306563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.316564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 93.431468][ T129] cfg80211: failed to load regulatory.db [ 93.704718][ T4359] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.909135][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 94.189201][ T4474] atomic_op ffff888057b8c998 conn xmit_atomic 0000000000000000 [ 95.352839][ T4477] loop0: detected capacity change from 0 to 1024 [ 95.410237][ T4485] loop1: detected capacity change from 0 to 2048 [ 95.711262][ T4477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 95.805979][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.218107][ T4487] loop3: detected capacity change from 0 to 512 [ 96.285689][ T4487] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 96.327775][ T4487] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.19: invalid indirect mapped block 256 (level 1) [ 96.487396][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 96.493441][ T4487] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.19: invalid indirect mapped block 2683928664 (level 1) [ 96.698078][ T4502] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 96.891179][ T4504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 97.634480][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 97.648657][ T4487] EXT4-fs (loop3): 1 truncate cleaned up [ 97.717526][ T4487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.966531][ C1] sched: RT throttling activated [ 98.974622][ T4520] loop1: detected capacity change from 0 to 128 [ 99.045469][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 99.370379][ T4527] loop3: detected capacity change from 0 to 128 [ 100.223304][ T4535] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4535] [ 101.316819][ T4288] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.605763][ T4288] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 101.733612][ T4288] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 101.933283][ T4288] usb 3-1: string descriptor 0 read error: -22 [ 102.018612][ T4288] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.030234][ T4288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.797499][ T4557] loop4: detected capacity change from 0 to 1024 [ 104.957729][ T4288] cdc_ncm 3-1:1.0: bind() failure [ 104.970802][ T4288] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 105.058553][ T4288] cdc_ncm 3-1:1.1: bind() failure [ 105.127032][ T4288] usb 3-1: USB disconnect, device number 2 [ 105.217412][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 108.242744][ T4585] loop4: detected capacity change from 0 to 4096 [ 108.311372][ T4586] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.608307][ T4589] loop3: detected capacity change from 0 to 256 [ 109.183128][ T4588] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes»G [ 109.191081][ T4588] Error parsing options; rc = [-22] [ 109.530961][ T4569] Process accounting resumed [ 110.039977][ T4608] loop2: detected capacity change from 0 to 256 [ 110.631040][ T4284] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 110.776846][ T4284] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 110.833369][ T4284] Remounting filesystem read-only [ 111.599367][ T4597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.162941][ T4284] NILFS (loop4): error -5 truncating bmap (ino=12) [ 112.251221][ T4284] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 112.356489][ T4614] loop2: detected capacity change from 0 to 512 [ 112.409035][ T4614] EXT4-fs: Ignoring removed nobh option [ 112.532172][ T4614] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.43: invalid indirect mapped block 256 (level 2) [ 112.567829][ T4620] loop4: detected capacity change from 0 to 256 [ 112.587082][ T4614] EXT4-fs (loop2): 2 truncates cleaned up [ 112.593736][ T4614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.663639][ T4613] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.43: bg 0: block 5: invalid block bitmap [ 113.824186][ T4613] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 113.837157][ T4613] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.837157][ T4613] [ 113.846900][ T4613] EXT4-fs (loop2): Total free blocks count 0 [ 113.852922][ T4613] EXT4-fs (loop2): Free/Dirty block details [ 113.858953][ T4613] EXT4-fs (loop2): free_blocks=0 [ 113.863939][ T4613] EXT4-fs (loop2): dirty_blocks=33 [ 113.869808][ T4613] EXT4-fs (loop2): Block reservation details [ 113.875826][ T4613] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 113.983379][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 115.757729][ T4634] netlink: 'syz.4.45': attribute type 21 has an invalid length. [ 115.766779][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 115.799170][ T4634] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 115.849347][ T4652] loop1: detected capacity change from 0 to 512 [ 115.904464][ T4652] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 115.989055][ T4652] EXT4-fs (loop1): 1 truncate cleaned up [ 116.064152][ T4660] block device autoloading is deprecated and will be removed. [ 116.081920][ T4660] md: md0 stopped. [ 116.235052][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.227726][ T4659] loop4: detected capacity change from 0 to 1024 [ 117.246735][ T26] audit: type=1800 audit(1794338435.430:2): pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="file3" dev="loop1" ino=16 res=0 errno=0 [ 118.008067][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 118.035998][ T4659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.410363][ T26] audit: type=1804 audit(1794338436.940:3): pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.51" name="/newroot/7/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 120.693917][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 120.982719][ T4692] loop0: detected capacity change from 0 to 512 [ 120.999124][ T4692] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 121.146679][ T4692] EXT4-fs (loop0): 1 truncate cleaned up [ 121.153186][ T4692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.278639][ T4703] loop4: detected capacity change from 0 to 2048 [ 121.831467][ T4704] loop2: detected capacity change from 0 to 8 [ 122.299087][ T4703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.169918][ T129] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.081299][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 125.120404][ T4717] loop3: detected capacity change from 0 to 128 [ 125.147323][ T4717] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 125.995420][ T4718] Bluetooth: MGMT ver 1.22 [ 126.019074][ T4728] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 126.173431][ T4718] Bluetooth: hci0: unsupported parameter 5134 [ 126.179663][ T4718] Bluetooth: hci0: unsupported parameter 8192 [ 126.185893][ T4718] Bluetooth: hci0: unsupported parameter 5134 [ 126.192089][ T4718] Bluetooth: hci0: unsupported parameter 8192 [ 126.221601][ T4726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'. [ 126.888650][ T4733] ip_tables: iptables: counters copy to user failed while replacing table [ 128.368857][ T4746] loop4: detected capacity change from 0 to 8192 [ 128.404318][ T4746] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.404388][ T4746] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 128.404615][ T4746] REISERFS (device loop4): using ordered data mode [ 128.404625][ T4746] reiserfs: using flush barriers [ 128.406419][ T4746] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.407267][ T4746] REISERFS (device loop4): checking transaction log (loop4) [ 128.412712][ T4746] REISERFS (device loop4): Using r5 hash to sort names [ 128.414777][ T4746] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 128.438309][ T4750] loop1: detected capacity change from 0 to 128 [ 128.789770][ T4753] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4753] [ 129.929138][ T4756] x_tables: eb_tables: snat target: used from hooks OUTPUT, but only usable from POSTROUTING [ 131.097049][ T4726] device veth0_to_bond entered promiscuous mode [ 131.482578][ T4765] loop4: detected capacity change from 0 to 256 [ 134.302960][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.309760][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.371276][ T4786] loop0: detected capacity change from 0 to 512 [ 134.443518][ T4786] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 134.507732][ T4794] tipc: Started in network mode [ 134.512818][ T4794] tipc: Node identity ac1414aa, cluster identity 4711 [ 135.284156][ T4800] clocksource: Switched to clocksource acpi_pm [ 135.807481][ T4794] tipc: New replicast peer: 172.20.20.187 [ 135.813809][ T4786] EXT4-fs (loop0): 1 truncate cleaned up [ 135.815486][ T4794] tipc: Enabled bearer , priority 10 [ 135.844433][ T4786] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.103296][ T4805] loop1: detected capacity change from 0 to 2048 [ 136.596638][ T26] audit: type=1800 audit(1794338454.774:4): pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.68" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 136.666190][ T4805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.335716][ T7] tipc: Node number set to 2886997162 [ 137.344324][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 138.241956][ T4820] overlayfs: overlapping lowerdir path [ 138.296330][ C0] hrtimer: interrupt took 91911 ns [ 139.258368][ T4831] loop2: detected capacity change from 0 to 128 [ 139.917508][ T4836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 139.927905][ T4836] block nbd0: Unsupported socket: should be TCP or UNIX. [ 140.718823][ T4843] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4843] [ 140.947367][ T4296] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 140.957066][ T4297] Bluetooth: Wrong link type (-22) [ 140.957201][ T4296] CPU: 1 PID: 4296 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 140.969789][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 140.979879][ T4296] Workqueue: hci0 hci_rx_work [ 140.984616][ T4296] Call Trace: [ 140.987893][ T4296] [ 140.990828][ T4296] dump_stack_lvl+0x188/0x24e [ 140.995514][ T4296] ? show_regs_print_info+0x12/0x12 [ 141.000710][ T4296] ? load_image+0x410/0x410 [ 141.005221][ T4296] sysfs_create_dir_ns+0x26a/0x290 [ 141.010342][ T4296] ? __lock_acquire+0x7ea0/0x7ea0 [ 141.015370][ T4296] ? sysfs_warn_dup+0xa0/0xa0 [ 141.020048][ T4296] ? do_raw_spin_unlock+0x11d/0x230 [ 141.025269][ T4296] kobject_add_internal+0x617/0xca0 [ 141.030473][ T4296] kobject_add+0x160/0x230 [ 141.034888][ T4296] ? kobject_init+0x1c0/0x1c0 [ 141.039562][ T4296] ? __raw_spin_lock_init+0x41/0x100 [ 141.044838][ T4296] ? klist_children_get+0x50/0x50 [ 141.049861][ T4296] ? get_device_parent+0x121/0x3e0 [ 141.054970][ T4296] device_add+0x470/0x1050 [ 141.059384][ T4296] hci_conn_add_sysfs+0xd1/0x1e0 [ 141.064324][ T4296] le_conn_complete_evt+0x10db/0x17c0 [ 141.069705][ T4296] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 141.075943][ T4296] ? __copy_skb_header+0x3ba/0x4f0 [ 141.081055][ T4296] ? memcpy+0x3c/0x60 [ 141.085055][ T4296] ? skb_pull_data+0xec/0x1f0 [ 141.089730][ T4296] hci_le_conn_complete_evt+0x183/0x440 [ 141.095281][ T4296] hci_event_packet+0x61f/0xe60 [ 141.100138][ T4296] ? hci_remote_host_features_evt+0x230/0x230 [ 141.106198][ T4296] ? bis_list+0x280/0x280 [ 141.110523][ T4296] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 141.116418][ T4296] ? kcov_remote_start+0x50f/0x810 [ 141.121529][ T4296] ? lockdep_hardirqs_on+0x94/0x140 [ 141.126724][ T4296] ? hci_send_to_monitor+0x9c/0x4a0 [ 141.131917][ T4296] hci_rx_work+0x3eb/0xd40 [ 141.136342][ T4296] ? process_one_work+0x7b4/0x1160 [ 141.141479][ T4296] process_one_work+0x8ab/0x1160 [ 141.146425][ T4296] ? worker_detach_from_pool+0x240/0x240 [ 141.152057][ T4296] ? _raw_spin_lock_irq+0xb7/0xf0 [ 141.157101][ T4296] ? _raw_spin_lock_irqsave+0x100/0x100 [ 141.162647][ T4296] ? wq_worker_running+0x97/0x190 [ 141.167666][ T4296] worker_thread+0xaf5/0x12a0 [ 141.172360][ T4296] kthread+0x29d/0x330 [ 141.176422][ T4296] ? worker_clr_flags+0x1a0/0x1a0 [ 141.181439][ T4296] ? kthread_blkcg+0xd0/0xd0 [ 141.186026][ T4296] ret_from_fork+0x1f/0x30 [ 141.190455][ T4296] [ 141.508690][ T4296] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.522910][ T4296] Bluetooth: hci0: failed to register connection device [ 141.636073][ T7] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 142.431110][ T4857] loop0: detected capacity change from 0 to 4096 [ 142.503255][ T4857] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 142.539461][ T4857] ntfs3: loop0: ino=0, mi_enum_attr [ 142.545183][ T4857] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 142.556007][ T7] usb 4-1: device descriptor read/all, error -71 [ 142.583536][ T4857] ntfs3: loop0: volume is dirty and "force" flag is not set! [ 142.681215][ T4854] exFAT-fs (loop0): invalid fs_name [ 142.686764][ T4854] exFAT-fs (loop0): failed to read boot sector [ 142.692977][ T4854] exFAT-fs (loop0): failed to recognize exfat type [ 142.838408][ T4864] loop1: detected capacity change from 0 to 2048 [ 142.866650][ T4865] loop3: detected capacity change from 0 to 2048 [ 142.951976][ T4865] UDF-fs: bad mount option "Ťoadinicb" or missing value [ 143.002225][ T4864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 143.026171][ T4864] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.286309][ T4865] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 143.303978][ T4876] loop2: detected capacity change from 0 to 512 [ 143.381995][ T4876] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 143.434924][ T4876] EXT4-fs (loop2): 1 truncate cleaned up [ 143.449043][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 143.510430][ T4876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.829778][ T4883] loop4: detected capacity change from 0 to 2048 [ 144.167979][ T4883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.821266][ T26] audit: type=1800 audit(1794338463.124:5): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.94" name="file3" dev="loop2" ino=16 res=0 errno=0 [ 144.996688][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 145.265953][ T4899] loop0: detected capacity change from 0 to 2048 [ 145.475562][ T4903] loop3: detected capacity change from 0 to 512 [ 145.482720][ T4903] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 146.348312][ T4899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.278563][ T4921] loop1: detected capacity change from 0 to 1024 [ 148.522859][ T4926] loop3: detected capacity change from 0 to 2048 [ 148.678452][ T4922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.794959][ T4926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.824736][ T4922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.083914][ T4935] hfsplus: unknown catalog record type 0 [ 149.089951][ T4935] hfsplus: unknown catalog record type 0 [ 149.526406][ T4922] bond0 (unregistering): Released all slaves [ 149.703596][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 149.712209][ T4423] hfsplus: unknown catalog record type 0 [ 149.727617][ T4423] hfsplus: unknown catalog record type 0 [ 151.279973][ T4950] loop1: detected capacity change from 0 to 2048 [ 151.305704][ T4951] loop3: detected capacity change from 0 to 4096 [ 151.387093][ T4951] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 151.402703][ T4951] ntfs3: loop3: ino=0, mi_enum_attr [ 151.408003][ T4951] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 151.748041][ T4950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.879251][ T4951] ntfs3: loop3: volume is dirty and "force" flag is not set! [ 151.971545][ T4951] syz.3.105: attempt to access beyond end of device [ 151.971545][ T4951] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 151.984783][ T4951] exFAT-fs (loop3): unable to read boot sector [ 151.991066][ T4951] exFAT-fs (loop3): failed to read boot sector [ 151.997369][ T4951] exFAT-fs (loop3): failed to recognize exfat type [ 152.264364][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 152.514871][ T4967] loop3: detected capacity change from 0 to 128 [ 153.527475][ T4976] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4976] [ 155.143067][ T4558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.282924][ T4558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.388681][ T4558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.531892][ T4558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.895112][ T4360] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.221061][ T4360] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 157.431217][ T4360] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 157.816105][ T4360] usb 5-1: string descriptor 0 read error: -22 [ 158.012502][ T4360] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.321935][ T4360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.393568][ T4360] cdc_ncm 5-1:1.0: bind() failure [ 159.421193][ T4360] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 159.457470][ T4360] cdc_ncm 5-1:1.1: bind() failure [ 159.504612][ T4360] usb 5-1: USB disconnect, device number 2 [ 160.203945][ T5016] loop3: detected capacity change from 0 to 2048 [ 160.476658][ T5016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.978364][ T5029] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 161.059647][ T5026] loop2: detected capacity change from 0 to 8192 [ 161.112170][ T5026] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 161.125598][ T5026] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 161.134929][ T5026] REISERFS (device loop2): using ordered data mode [ 161.141438][ T5026] reiserfs: using flush barriers [ 161.148918][ T5026] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.165455][ T5026] REISERFS (device loop2): checking transaction log (loop2) [ 161.181051][ T5026] REISERFS (device loop2): Using r5 hash to sort names [ 161.188605][ T5026] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 161.295903][ T4297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.306954][ T4297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.316343][ T4297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.329825][ T4297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.344403][ T4297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.356237][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 161.386976][ T4297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.442346][ T5035] loop4: detected capacity change from 0 to 2048 [ 161.536670][ T5035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.667739][ T5031] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.023831][ T5053] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5053] [ 163.404378][ T4297] Bluetooth: hci1: command 0x0409 tx timeout [ 163.698049][ T4297] Bluetooth: hci3: unexpected cc 0x1004 length: 9 < 11 [ 165.490747][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 165.620202][ T5091] loop4: detected capacity change from 0 to 2048 [ 165.890474][ T5093] loop0: detected capacity change from 0 to 8192 [ 166.052031][ T5093] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.065286][ T5093] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 166.076673][ T5093] REISERFS (device loop0): using ordered data mode [ 166.083238][ T5093] reiserfs: using flush barriers [ 166.107416][ T5093] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.126336][ T5093] REISERFS (device loop0): checking transaction log (loop0) [ 166.141731][ T5093] REISERFS (device loop0): Using r5 hash to sort names [ 166.152712][ T5093] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 166.502530][ T5091] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.505583][ T5031] chnl_net:caif_netlink_parms(): no params data found [ 166.570775][ T5031] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.578034][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.586351][ T5031] device bridge_slave_0 entered promiscuous mode [ 166.602795][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.610181][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.618628][ T5031] device bridge_slave_1 entered promiscuous mode [ 166.919049][ T5031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.011056][ T5110] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 167.325605][ T5031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.350829][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 167.357616][ T5114] loop0: detected capacity change from 0 to 512 [ 167.388945][ T5114] EXT4-fs: Ignoring removed oldalloc option [ 167.469373][ T5114] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 167.495551][ T5031] team0: Port device team_slave_0 added [ 167.512899][ T5031] team0: Port device team_slave_1 added [ 167.519575][ T5114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 167.550332][ T5114] EXT4-fs (loop0): orphan cleanup on readonly fs [ 167.564132][ T5114] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.141: bad orphan inode 267 [ 167.574346][ T4296] Bluetooth: hci1: command 0x040f tx timeout [ 167.669522][ T5114] EXT4-fs (loop0): Remounting filesystem read-only [ 167.705719][ T4558] device hsr_slave_0 left promiscuous mode [ 167.718925][ T5114] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 167.732477][ T5120] loop3: detected capacity change from 0 to 2048 [ 167.739363][ T4558] device hsr_slave_1 left promiscuous mode [ 167.778476][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.858871][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.914024][ T5120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.312520][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.063407][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.261979][ T4558] device bridge_slave_1 left promiscuous mode [ 169.335843][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.514406][ T4558] device bridge_slave_0 left promiscuous mode [ 169.524244][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.713394][ T4296] Bluetooth: hci1: command 0x0419 tx timeout [ 170.446448][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 170.508009][ T4558] device veth1_macvtap left promiscuous mode [ 170.573867][ T4558] device veth0_macvtap left promiscuous mode [ 170.580171][ T4558] device veth1_vlan left promiscuous mode [ 170.623572][ T5146] loop3: detected capacity change from 0 to 1024 [ 170.656091][ T4558] device veth0_vlan left promiscuous mode [ 171.711931][ T5153] hfsplus: unknown catalog record type 0 [ 171.717715][ T5153] hfsplus: unknown catalog record type 0 [ 172.069411][ T31] hfsplus: unknown catalog record type 0 [ 172.085332][ T31] hfsplus: unknown catalog record type 0 [ 175.648644][ T5193] Zero length message leads to an empty skb [ 177.222473][ T4558] team0 (unregistering): Port device team_slave_1 removed [ 177.298570][ T4558] team0 (unregistering): Port device team_slave_0 removed [ 177.404057][ T4558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.484660][ T4558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.155800][ T5207] loop2: detected capacity change from 0 to 4096 [ 178.180914][ T5207] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 178.194460][ T5207] ntfs3: loop2: ino=0, mi_enum_attr [ 178.199722][ T5207] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 178.217948][ T5207] ntfs3: loop2: volume is dirty and "force" flag is not set! [ 178.280632][ T5208] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.358887][ T5206] syz.2.163: attempt to access beyond end of device [ 178.358887][ T5206] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 178.372151][ T5206] exFAT-fs (loop2): unable to read boot sector [ 178.378426][ T5206] exFAT-fs (loop2): failed to read boot sector [ 178.384664][ T5206] exFAT-fs (loop2): failed to recognize exfat type [ 178.721146][ T4558] bond0 (unregistering): Released all slaves [ 178.774260][ T26] audit: type=1800 audit(1794338497.304:6): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.166" name="idVendor" dev="configfs" ino=37959 res=0 errno=0 [ 178.924012][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.951494][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.281861][ T5031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.324949][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.331936][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.383204][ T5220] loop2: detected capacity change from 0 to 512 [ 180.404855][ T5220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.450294][ T5220] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 180.466930][ T5031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.625404][ T5220] EXT4-fs (loop2): 1 truncate cleaned up [ 180.760992][ T5220] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.892306][ T5224] loop3: detected capacity change from 0 to 512 [ 181.303498][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 181.352802][ T5224] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.395874][ T5031] device hsr_slave_0 entered promiscuous mode [ 182.105022][ T5031] device hsr_slave_1 entered promiscuous mode [ 182.115330][ T5031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.440504][ T5031] Cannot create hsr debugfs directory [ 182.460077][ T5238] loop0: detected capacity change from 0 to 2048 [ 182.501375][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 182.599991][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 182.709027][ T5238] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.684551][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 185.875894][ T26] audit: type=1800 audit(1794338504.414:7): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.177" name="irqmode" dev="configfs" ino=38054 res=0 errno=0 [ 186.797118][ T5031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.863700][ T5031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.921235][ T5031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.944845][ T5031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.126329][ T5031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.166281][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.175098][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.195548][ T5031] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.222763][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.238185][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.269348][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.276568][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.301737][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.342256][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.355975][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.390776][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.398013][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.435947][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.493251][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.518291][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.544333][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.561053][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.588785][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.621707][ T5031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.946422][ T5031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.989683][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.002894][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.038658][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.207508][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.205062][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.218291][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.295007][ T5303] loop2: detected capacity change from 0 to 256 [ 190.502308][ T5303] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 193.560089][ T5330] loop4: detected capacity change from 0 to 1024 [ 193.965188][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.979567][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.006465][ T5031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.029137][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.045759][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.754078][ T5382] syz.0.198 (5382): drop_caches: 2 [ 200.794568][ T5387] loop4: detected capacity change from 0 to 512 [ 200.892426][ T5387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 200.920909][ T5387] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.352476][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 202.587131][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.842524][ T4296] Bluetooth: hci0: command 0x0406 tx timeout [ 202.842619][ T4297] Bluetooth: hci2: command 0x0406 tx timeout [ 202.842649][ T4295] Bluetooth: hci4: command 0x0406 tx timeout [ 202.863917][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 203.063116][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.958735][ T5399] bond0 (unregistering): Released all slaves [ 204.205088][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.276288][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.398697][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.862201][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.879045][ T5031] device veth0_vlan entered promiscuous mode [ 204.902715][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.918597][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.065095][ T5031] device veth1_vlan entered promiscuous mode [ 205.150994][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.439487][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.617434][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.629847][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.654443][ T5031] device veth0_macvtap entered promiscuous mode [ 205.675529][ T5031] device veth1_macvtap entered promiscuous mode [ 205.801946][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.840155][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.861369][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.315031][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.703330][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.713969][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.724070][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.734856][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.751415][ T5031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.752257][ T5448] loop0: detected capacity change from 0 to 128 [ 207.762300][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.777083][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.787259][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.798055][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.809980][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.865367][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.908957][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.950063][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.029434][ T5031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.046104][ T5031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.055225][ T5031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.065575][ T5031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.128372][ T5453] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4276] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5453] [ 208.650028][ T5031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.674137][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.687705][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.704912][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.716133][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.800224][ T5460] loop3: detected capacity change from 0 to 256 [ 209.262398][ T5460] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 210.053044][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.120471][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.211194][ T5445] tipc: Started in network mode [ 210.216101][ T5445] tipc: Node identity 4, cluster identity 4711 [ 210.223214][ T5445] tipc: Node number set to 4 [ 210.484388][ T5471] loop3: detected capacity change from 0 to 512 [ 210.545973][ T5471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.607703][ T5471] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 210.653730][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.116782][ T5479] overlayfs: failed to resolve './file1': -2 [ 211.170166][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.224754][ T5471] EXT4-fs (loop3): 1 truncate cleaned up [ 211.236452][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.262887][ T5471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.314791][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.525064][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.545848][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.194431][ T5501] syz.2.228 (5501): drop_caches: 2 [ 214.483511][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 215.792120][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.830957][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.911484][ T5498] bond0 (unregistering): Released all slaves [ 216.888868][ T5525] loop3: detected capacity change from 0 to 256 [ 216.924759][ T5526] loop2: detected capacity change from 0 to 16 [ 217.005689][ T5526] erofs: (device loop2): mounted with root inode @ nid 36. [ 217.020029][ T4294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.050621][ T4294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.060317][ T4294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.068228][ T4294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.078299][ T4294] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.087330][ T4294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.147587][ T5526] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 217.248204][ T5532] netlink: 60 bytes leftover after parsing attributes in process `syz.3.226'. [ 217.257687][ T5532] unsupported nlmsg_type 40 [ 217.781898][ T5526] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 217.834062][ T5527] rxe_eth0 speed is unknown, defaulting to 1000 [ 217.883929][ T5534] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 217.909701][ T5526] syz.2.225: attempt to access beyond end of device [ 217.909701][ T5526] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 218.702446][ T5548] tipc: Started in network mode [ 218.707430][ T5548] tipc: Node identity 4, cluster identity 4711 [ 218.713687][ T5548] tipc: Node number set to 4 [ 219.256784][ T4295] Bluetooth: hci5: command 0x0409 tx timeout [ 219.290191][ T5526] syz.2.225: attempt to access beyond end of device [ 219.290191][ T5526] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 219.423303][ T5534] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[3749] [ 219.447757][ T5534] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 219.467688][ T5552] loop0: detected capacity change from 0 to 8 [ 219.488073][ T5549] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 219.522472][ T5552] squashfs image failed sanity check [ 219.582960][ T5555] loop3: detected capacity change from 0 to 1024 [ 219.594401][ T5549] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 219.602736][ T5555] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.689422][ T5526] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 219.789747][ T5555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.800274][ T5526] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 221.047666][ T5534] 9pnet_fd: p9_fd_create_tcp (5534): problem connecting socket to 127.0.0.1 [ 221.075570][ T5571] syz.4.233 (5571): drop_caches: 2 [ 221.119298][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 221.319641][ T4295] Bluetooth: hci5: command 0x041b tx timeout [ 221.614537][ T4295] Bluetooth: hci4: unexpected cc 0x1004 length: 2 < 11 [ 221.634173][ T4423] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.884909][ T4423] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.930427][ T4294] Bluetooth: hci5: command 0x040f tx timeout [ 223.973798][ T5527] chnl_net:caif_netlink_parms(): no params data found [ 224.575243][ T4423] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.321611][ T5612] tipc: Started in network mode [ 225.326624][ T5612] tipc: Node identity 4, cluster identity 4711 [ 225.333034][ T5612] tipc: Node number set to 4 [ 225.968501][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 226.873752][ T4423] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.926546][ T4294] Bluetooth: hci0: unexpected cc 0x1004 length: 2 < 11 [ 227.212701][ T5527] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.246414][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.265865][ T5527] device bridge_slave_0 entered promiscuous mode [ 227.336651][ T5527] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.352797][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.365092][ T5527] device bridge_slave_1 entered promiscuous mode [ 227.454066][ T5527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.537926][ T5527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.583661][ T5527] team0: Port device team_slave_0 added [ 227.623979][ T5527] team0: Port device team_slave_1 added [ 227.665244][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.677943][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.712455][ T5527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.757650][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.766612][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.857728][ T5527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.079676][ T5647] syz.3.247 (5647): drop_caches: 2 [ 228.208565][ T4360] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 229.492509][ T5527] device hsr_slave_0 entered promiscuous mode [ 229.509112][ T5527] device hsr_slave_1 entered promiscuous mode [ 229.528242][ T5527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.544703][ T5527] Cannot create hsr debugfs directory [ 229.965358][ T5658] overlayfs: failed to clone upperpath [ 230.125517][ T4360] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 230.142954][ T4360] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 230.156023][ T4360] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.188341][ T4360] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.214430][ T4360] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.246350][ T4360] usb 1-1: Product: syz [ 230.264178][ T4360] usb 1-1: Manufacturer: syz [ 230.292742][ T4360] usb 1-1: SerialNumber: syz [ 230.961191][ T4360] usb 1-1: config 0 descriptor?? [ 231.112191][ T4360] usb 1-1: can't set config #0, error -71 [ 231.122814][ T4360] usb 1-1: USB disconnect, device number 2 [ 231.176469][ T5674] loop3: detected capacity change from 0 to 128 [ 231.419905][ T4294] Bluetooth: hci0: unexpected cc 0x1004 length: 2 < 11 [ 231.809646][ T5679] loop4: detected capacity change from 0 to 256 [ 231.820072][ T5674] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 231.850123][ T5674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.569556][ T5696] overlayfs: failed to clone upperpath [ 234.271198][ T4423] device hsr_slave_0 left promiscuous mode [ 234.278709][ T4423] device hsr_slave_1 left promiscuous mode [ 234.286256][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.294087][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.304999][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.312790][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.320879][ T4423] device bridge_slave_1 left promiscuous mode [ 234.329491][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.346951][ T4423] device bridge_slave_0 left promiscuous mode [ 234.355531][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.400171][ T4423] device veth1_macvtap left promiscuous mode [ 234.406433][ T4423] device veth0_macvtap left promiscuous mode [ 234.413231][ T4423] device veth1_vlan left promiscuous mode [ 234.419801][ T4423] device veth0_vlan left promiscuous mode [ 234.992413][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 235.042599][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 235.076684][ T4423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.122128][ T4423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.380305][ T4423] bond0 (unregistering): Released all slaves [ 235.596235][ T5527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.630581][ T5527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.640710][ T5527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.653093][ T5527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.762530][ T5527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.776771][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.792167][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.820532][ T5527] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.858180][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.872731][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.882503][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.889713][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.901155][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.911335][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.922466][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.929661][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.942973][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.960366][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.001312][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.022611][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.036472][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.059820][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.073302][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.083226][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.097290][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.112430][ T5527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.132204][ T5527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.148633][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.157177][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.166371][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.465067][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.474304][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.488715][ T5527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.904661][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.921518][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.956383][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.966344][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.979128][ T5527] device veth0_vlan entered promiscuous mode [ 236.989385][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.998552][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.013565][ T5527] device veth1_vlan entered promiscuous mode [ 237.055670][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 237.064950][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 237.074569][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.083838][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.098534][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.118068][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.129095][ T5527] device veth0_macvtap entered promiscuous mode [ 237.142010][ T5527] device veth1_macvtap entered promiscuous mode [ 237.161322][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.174250][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.184718][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.195716][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.205931][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.216705][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.226946][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.249564][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.269333][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.286832][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.296890][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.320995][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.330313][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.344366][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.355846][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.370284][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.380805][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.397429][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.417427][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.427268][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.438896][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.450233][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.460555][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.473356][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.484975][ T5527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.507613][ T5527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.516326][ T5527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.537501][ T5527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.664158][ T4558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.677717][ T4558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.704298][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.726486][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.735361][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.752284][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.832892][ T5767] loop5: detected capacity change from 0 to 256 [ 240.019508][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.217774][ T5795] syz.5.262 (5795): drop_caches: 2 [ 243.926420][ T4294] Bluetooth: hci4: unexpected cc 0x1004 length: 6 < 11 [ 244.028450][ T5826] loop4: detected capacity change from 0 to 512 [ 244.113896][ T5829] loop0: detected capacity change from 0 to 512 [ 244.131863][ T5829] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 244.145018][ T5829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 244.343187][ T5826] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 244.489981][ T5829] EXT4-fs (loop0): 1 truncate cleaned up [ 244.501346][ T5829] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.788301][ T5826] EXT4-fs (loop4): 1 truncate cleaned up [ 244.796333][ T5826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.854859][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 244.871745][ T5822] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 245.304356][ T26] audit: type=1800 audit(1794338562.723:8): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.275" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 245.550360][ T5839] bridge0: port 3(netdevsim0) entered blocking state [ 245.558201][ T5839] bridge0: port 3(netdevsim0) entered disabled state [ 245.567685][ T5839] device netdevsim0 entered promiscuous mode [ 245.574279][ T5839] bridge0: port 3(netdevsim0) entered blocking state [ 245.581304][ T5839] bridge0: port 3(netdevsim0) entered forwarding state [ 245.613905][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 245.782186][ T5850] loop0: detected capacity change from 0 to 128 [ 245.958831][ T5850] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 246.578665][ T5850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.105696][ T4294] Bluetooth: hci5: unexpected cc 0x1004 length: 6 < 11 [ 249.213412][ T5893] netlink: 60 bytes leftover after parsing attributes in process `syz.0.286'. [ 251.192937][ T5894] Process accounting resumed [ 252.402524][ T26] audit: type=1326 audit(1794338569.943:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.3.294" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffcb81b4a88 code=0x0 [ 253.989033][ T4294] Bluetooth: hci3: unexpected cc 0x1004 length: 6 < 11 [ 255.683689][ T5958] loop5: detected capacity change from 0 to 512 [ 255.817615][ T5958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.835060][ T5958] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.112084][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.118973][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.182203][ T5527] EXT4-fs (loop5): unmounting filesystem. [ 258.170876][ T5993] loop5: detected capacity change from 0 to 4096 [ 258.213609][ T5994] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.376837][ T6004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.708541][ T5527] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 259.765445][ T5527] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 259.856995][ T5527] Remounting filesystem read-only [ 259.862056][ T5527] NILFS (loop5): error -5 truncating bmap (ino=12) [ 259.911517][ T5527] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 261.207456][ T6014] ip_tables: iptables: counters copy to user failed while replacing table [ 261.251321][ T6014] ip_tables: iptables: counters copy to user failed while replacing table [ 261.542913][ T4294] Bluetooth: hci5: unexpected cc 0x1004 length: 8 < 11 [ 263.552875][ T6037] Process accounting resumed [ 263.937169][ T6062] netlink: 'syz.5.321': attribute type 11 has an invalid length. [ 265.764267][ T6077] overlayfs: failed to clone lowerpath [ 266.183362][ T6082] loop4: detected capacity change from 0 to 1024 [ 266.209692][ T6082] EXT4-fs: Ignoring removed bh option [ 267.071930][ T6082] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 267.300997][ T6099] overlayfs: failed to clone upperpath [ 268.971433][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 269.284963][ T4294] Bluetooth: hci3: unexpected cc 0x1004 length: 8 < 11 [ 269.532713][ T26] audit: type=1326 audit(1794338587.043:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffe43be2a88 code=0x0 [ 269.847189][ T6126] loop4: detected capacity change from 0 to 512 [ 270.037776][ T6126] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.498638][ T6121] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 270.563869][ T6126] EXT4-fs (loop4): 1 truncate cleaned up [ 270.570074][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 271.675666][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 272.507523][ T6144] loop5: detected capacity change from 0 to 256 [ 275.337585][ T6166] overlayfs: failed to clone upperpath [ 276.200631][ T6172] ip_tables: iptables: counters copy to user failed while replacing table [ 276.278010][ T6172] ip_tables: iptables: counters copy to user failed while replacing table [ 276.343472][ T6176] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.955258][ T4294] Bluetooth: hci4: unexpected cc 0x1004 length: 8 < 11 [ 277.280097][ T6185] xt_SECMARK: invalid mode: 2 [ 279.845613][ T6202] netlink: 'syz.4.351': attribute type 11 has an invalid length. [ 280.419083][ T6214] overlayfs: failed to clone upperpath [ 280.704333][ T6218] comedi comedi3: board detection failed [ 280.847674][ T6220] bridge0: port 3(netdevsim0) entered blocking state [ 280.854704][ T6220] bridge0: port 3(netdevsim0) entered disabled state [ 280.867893][ T6220] device netdevsim0 entered promiscuous mode [ 280.875846][ T6220] bridge0: port 3(netdevsim0) entered blocking state [ 280.882607][ T6220] bridge0: port 3(netdevsim0) entered forwarding state [ 281.736798][ T6222] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 281.747107][ T6222] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.255995][ T6250] loop5: detected capacity change from 0 to 16 [ 286.434850][ T6250] erofs: (device loop5): mounted with root inode @ nid 36. [ 291.288806][ T4294] Bluetooth: hci4: unexpected cc 0x1004 length: 9 < 11 [ 292.177844][ T6306] ip_tables: iptables: counters copy to user failed while replacing table [ 292.190801][ T6306] ip_tables: iptables: counters copy to user failed while replacing table [ 292.451231][ T6310] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 297.287159][ T4294] Bluetooth: hci0: unexpected cc 0x1004 length: 9 < 11 [ 297.431695][ T26] audit: type=1800 audit(1794338614.972:11): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.386" name="c_chmask" dev="configfs" ino=41160 res=0 errno=0 [ 297.523124][ T6350] UDC core: g1: couldn't find an available UDC or it's busy [ 297.537693][ T26] audit: type=1800 audit(1794338615.042:12): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.386" name="UDC" dev="configfs" ino=41162 res=0 errno=0 [ 298.800384][ T6358] overlayfs: failed to clone upperpath [ 298.930608][ T6361] futex_wake_op: syz.2.388 tries to shift op by 144; fix this program [ 299.341945][ T26] audit: type=1326 audit(1794338616.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.5.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffc9512aa88 code=0x0 [ 300.887691][ T6387] loop4: detected capacity change from 0 to 1024 [ 301.631385][ T6394] xt_policy: output policy not valid in PREROUTING and INPUT [ 303.862606][ T4294] Bluetooth: hci5: unexpected cc 0x1004 length: 9 < 11 [ 304.020592][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 304.075888][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.402'. [ 304.143441][ T6422] device geneve2 entered promiscuous mode [ 308.685970][ T6454] block device autoloading is deprecated and will be removed. [ 308.833530][ T6460] No source specified [ 309.355658][ T6471] 9pnet_fd: Insufficient options for proto=fd [ 309.368963][ T4294] Bluetooth: hci3: unexpected cc 0x1004 length: 9 < 11 [ 313.376933][ T6512] syz.4.423 uses obsolete (PF_INET,SOCK_PACKET) [ 314.698359][ T6522] ip_tables: iptables: counters copy to user failed while replacing table [ 314.749233][ T6525] loop5: detected capacity change from 0 to 2048 [ 314.780614][ T6525] UDF-fs: bad mount option "˙˙017777777777777777777770xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 314.824301][ T6522] ip_tables: iptables: counters copy to user failed while replacing table [ 315.708508][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 318.515633][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.522415][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.851254][ T6582] overlayfs: failed to resolve './file1': -2 [ 321.193857][ T6586] loop4: detected capacity change from 0 to 2048 [ 321.228202][ T6586] UDF-fs: bad mount option "˙˙017777777777777777777770xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 322.534335][ T6590] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.556008][ T6586] loop4: detected capacity change from 0 to 1024 [ 322.590145][ T6590] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.670110][ T6590] Buffer I/O error on dev loop4, logical block 0, async page read [ 323.149847][ T6586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 323.211111][ T6586] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.569827][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 323.578620][ T6614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 323.690080][ T6610] nfs4: Unexpected value for 'acl' [ 323.698598][ T6586] EXT4-fs warning (device loop4): ext4_empty_dir:3158: inode #12: comm syz.4.443: directory missing '..' [ 323.725754][ T6614] device geneve2 entered promiscuous mode [ 324.090709][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 327.434860][ C0] ------------[ cut here ]------------ [ 327.440942][ C0] WARNING: CPU: 0 PID: 4278 at net/mac80211/tx.c:4981 __ieee80211_beacon_get+0x1141/0x1520 [ 327.451047][ C0] Modules linked in: [ 327.454959][ C0] CPU: 0 PID: 4278 Comm: syz-executor Not tainted syzkaller #0 [ 327.462935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 327.473056][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 327.479480][ C0] Code: f7 4c 89 ef e8 60 37 01 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 8b 6a c8 f7 0f 0b e9 61 f8 ff ff e8 7f 6a c8 f7 <0f> 0b e9 85 fb ff ff e8 73 6a c8 f7 48 c7 c7 40 13 fd 8e 4c 89 e6 [ 327.499190][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010246 [ 327.505337][ C0] RAX: ffffffff89b9fe21 RBX: dffffc0000000000 RCX: ffff88807e08bc00 [ 327.513393][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.521431][ C0] RBP: 0000000000000000 R08: ffff88807e08bc00 R09: 0000000000000003 [ 327.529473][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888024cd2208 [ 327.537462][ C0] R13: ffff888055dcb024 R14: ffff888024cd2740 R15: ffff888055dcb000 [ 327.545525][ C0] FS: 000055559349b500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 327.554537][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.561229][ C0] CR2: 00007ffd29ebe000 CR3: 000000005aa15000 CR4: 00000000003506f0 [ 327.569238][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.577332][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.585404][ C0] Call Trace: [ 327.588717][ C0] [ 327.591637][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 327.597228][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 327.602805][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 327.608391][ C0] __iterate_interfaces+0x225/0x4c0 [ 327.613724][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 327.620040][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 327.627264][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 327.633577][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 327.640696][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 327.645927][ C0] __hrtimer_run_queues+0x522/0xc90 [ 327.651207][ C0] ? hw_scan_work+0xf00/0xf00 [ 327.655925][ C0] ? hrtimer_interrupt+0x980/0x980 [ 327.661109][ C0] ? acpi_pm_read+0x5/0x20 [ 327.665559][ C0] hrtimer_run_softirq+0x173/0x290 [ 327.670842][ C0] handle_softirqs+0x291/0x910 [ 327.675638][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 327.680563][ C0] ? do_softirq+0x210/0x210 [ 327.685105][ C0] ? hrtimer_interrupt+0x775/0x980 [ 327.690336][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 327.695571][ C0] __irq_exit_rcu+0x13b/0x230 [ 327.700332][ C0] ? irq_exit_rcu+0x20/0x20 [ 327.704867][ C0] irq_exit_rcu+0x5/0x20 [ 327.709122][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 327.714834][ C0] [ 327.717791][ C0] [ 327.720810][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 327.726836][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 327.733449][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 9f 64 17 f7 65 8b 05 30 01 c1 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 327.753146][ C0] RSP: 0018:ffffc90003ea7740 EFLAGS: 00000206 [ 327.759254][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 11ffa207b03d3800 [ 327.767313][ C0] RDX: dffffc0000000000 RSI: ffffffff8aac1cc0 RDI: 0000000000000001 [ 327.775363][ C0] RBP: ffffc90003ea77d0 R08: ffffffff91b622e7 R09: 1ffffffff236c45c [ 327.783421][ C0] R10: dffffc0000000000 R11: fffffbfff236c45d R12: dffffc0000000000 [ 327.791467][ C0] R13: ffffea00011e19c8 R14: ffff88807adfa050 R15: 1ffff920007d4ee8 [ 327.799549][ C0] ? _raw_spin_unlock+0x40/0x40 [ 327.804436][ C0] ? __folio_memcg+0x63/0x170 [ 327.809150][ C0] ? folio_memcg+0x127/0x4b0 [ 327.813849][ C0] release_pages+0x2092/0x2340 [ 327.818644][ C0] ? filemap_remove_folio+0x1aa/0x2c0 [ 327.824114][ C0] ? lru_cache_disable+0x30/0x30 [ 327.829083][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 327.834367][ C0] __pagevec_release+0x6d/0xe0 [ 327.839170][ C0] shmem_undo_range+0x808/0x21d0 [ 327.844190][ C0] ? verify_lock_unused+0x140/0x140 [ 327.849468][ C0] ? shmem_truncate_range+0xb0/0xb0 [ 327.854748][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 327.859834][ C0] ? __rwlock_init+0x140/0x140 [ 327.864619][ C0] shmem_evict_inode+0x225/0x9f0 [ 327.869635][ C0] ? _raw_spin_unlock+0x24/0x40 [ 327.874503][ C0] ? inode_wait_for_writeback+0x1df/0x220 [ 327.880291][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 327.885854][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 327.890936][ C0] ? bit_waitqueue+0x30/0x30 [ 327.895549][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 327.900809][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 327.906377][ C0] evict+0x4b2/0x9d0 [ 327.910381][ C0] ? proc_nr_inodes+0x2f0/0x2f0 [ 327.915251][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 327.920509][ C0] ? _raw_spin_unlock+0x24/0x40 [ 327.925377][ C0] ? iput+0x79f/0x9c0 [ 327.929424][ C0] do_unlinkat+0x388/0x580 [ 327.933863][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 327.938994][ C0] ? getname_flags+0x206/0x500 [ 327.943847][ C0] __x64_sys_unlink+0x45/0x50 [ 327.948538][ C0] do_syscall_64+0x4c/0xa0 [ 327.953027][ C0] ? clear_bhb_loop+0x60/0xb0 [ 327.957721][ C0] ? clear_bhb_loop+0x60/0xb0 [ 327.962460][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.968371][ C0] RIP: 0033:0x7fa9433a8007 [ 327.972869][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 327.992540][ C0] RSP: 002b:00007ffe439f88f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 328.001023][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9433a8007 [ 328.009008][ C0] RDX: 00007ffe439f8920 RSI: 00007ffe439f89b0 RDI: 00007ffe439f89b0 [ 328.017044][ C0] RBP: 00007ffe439f89b0 R08: 00007ffe439f99b0 R09: 00000000ffffffff [ 328.025079][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe439f9a40 [ 328.033108][ C0] R13: 00007fa943437363 R14: 000000000004f411 R15: 00007ffe439f9a80 [ 328.041162][ C0] [ 328.044203][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 328.051482][ C0] CPU: 0 PID: 4278 Comm: syz-executor Not tainted syzkaller #0 [ 328.059030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 328.069085][ C0] Call Trace: [ 328.072365][ C0] [ 328.075211][ C0] dump_stack_lvl+0x188/0x24e [ 328.079909][ C0] ? memcpy+0x3c/0x60 [ 328.083903][ C0] ? show_regs_print_info+0x12/0x12 [ 328.089115][ C0] ? load_image+0x410/0x410 [ 328.093643][ C0] panic+0x2d3/0x710 [ 328.097553][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 328.102083][ C0] __warn+0x2f8/0x4f0 [ 328.106072][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 328.111817][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 328.117573][ C0] report_bug+0x2ba/0x4f0 [ 328.121938][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 328.127699][ C0] handle_bug+0x3a/0x70 [ 328.131877][ C0] exc_invalid_op+0x16/0x40 [ 328.136408][ C0] asm_exc_invalid_op+0x16/0x20 [ 328.141299][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 328.147653][ C0] Code: f7 4c 89 ef e8 60 37 01 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 8b 6a c8 f7 0f 0b e9 61 f8 ff ff e8 7f 6a c8 f7 <0f> 0b e9 85 fb ff ff e8 73 6a c8 f7 48 c7 c7 40 13 fd 8e 4c 89 e6 [ 328.167282][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010246 [ 328.173346][ C0] RAX: ffffffff89b9fe21 RBX: dffffc0000000000 RCX: ffff88807e08bc00 [ 328.181316][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.189281][ C0] RBP: 0000000000000000 R08: ffff88807e08bc00 R09: 0000000000000003 [ 328.197250][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888024cd2208 [ 328.205239][ C0] R13: ffff888055dcb024 R14: ffff888024cd2740 R15: ffff888055dcb000 [ 328.213208][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 328.218951][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 328.224670][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 328.230213][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 328.235668][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 328.241210][ C0] __iterate_interfaces+0x225/0x4c0 [ 328.246408][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 328.252635][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 328.259825][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 328.266055][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 328.273073][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 328.278272][ C0] __hrtimer_run_queues+0x522/0xc90 [ 328.283465][ C0] ? hw_scan_work+0xf00/0xf00 [ 328.288141][ C0] ? hrtimer_interrupt+0x980/0x980 [ 328.293246][ C0] ? acpi_pm_read+0x5/0x20 [ 328.297662][ C0] hrtimer_run_softirq+0x173/0x290 [ 328.302768][ C0] handle_softirqs+0x291/0x910 [ 328.307528][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 328.312376][ C0] ? do_softirq+0x210/0x210 [ 328.316864][ C0] ? hrtimer_interrupt+0x775/0x980 [ 328.321973][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 328.327162][ C0] __irq_exit_rcu+0x13b/0x230 [ 328.331831][ C0] ? irq_exit_rcu+0x20/0x20 [ 328.336329][ C0] irq_exit_rcu+0x5/0x20 [ 328.340562][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 328.346188][ C0] [ 328.349107][ C0] [ 328.352028][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 328.358006][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 328.364543][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 9f 64 17 f7 65 8b 05 30 01 c1 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 328.384156][ C0] RSP: 0018:ffffc90003ea7740 EFLAGS: 00000206 [ 328.390223][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 11ffa207b03d3800 [ 328.398185][ C0] RDX: dffffc0000000000 RSI: ffffffff8aac1cc0 RDI: 0000000000000001 [ 328.406148][ C0] RBP: ffffc90003ea77d0 R08: ffffffff91b622e7 R09: 1ffffffff236c45c [ 328.414111][ C0] R10: dffffc0000000000 R11: fffffbfff236c45d R12: dffffc0000000000 [ 328.422092][ C0] R13: ffffea00011e19c8 R14: ffff88807adfa050 R15: 1ffff920007d4ee8 [ 328.430071][ C0] ? _raw_spin_unlock+0x40/0x40 [ 328.434937][ C0] ? __folio_memcg+0x63/0x170 [ 328.439631][ C0] ? folio_memcg+0x127/0x4b0 [ 328.444224][ C0] release_pages+0x2092/0x2340 [ 328.448983][ C0] ? filemap_remove_folio+0x1aa/0x2c0 [ 328.454354][ C0] ? lru_cache_disable+0x30/0x30 [ 328.459292][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 328.464487][ C0] __pagevec_release+0x6d/0xe0 [ 328.469254][ C0] shmem_undo_range+0x808/0x21d0 [ 328.474189][ C0] ? verify_lock_unused+0x140/0x140 [ 328.479394][ C0] ? shmem_truncate_range+0xb0/0xb0 [ 328.484603][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 328.489619][ C0] ? __rwlock_init+0x140/0x140 [ 328.494372][ C0] shmem_evict_inode+0x225/0x9f0 [ 328.499305][ C0] ? _raw_spin_unlock+0x24/0x40 [ 328.504150][ C0] ? inode_wait_for_writeback+0x1df/0x220 [ 328.509869][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 328.515411][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 328.520426][ C0] ? bit_waitqueue+0x30/0x30 [ 328.525015][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 328.530208][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 328.535747][ C0] evict+0x4b2/0x9d0 [ 328.539641][ C0] ? proc_nr_inodes+0x2f0/0x2f0 [ 328.544488][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 328.549696][ C0] ? _raw_spin_unlock+0x24/0x40 [ 328.554558][ C0] ? iput+0x79f/0x9c0 [ 328.558555][ C0] do_unlinkat+0x388/0x580 [ 328.562967][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 328.568077][ C0] ? getname_flags+0x206/0x500 [ 328.572864][ C0] __x64_sys_unlink+0x45/0x50 [ 328.577532][ C0] do_syscall_64+0x4c/0xa0 [ 328.581945][ C0] ? clear_bhb_loop+0x60/0xb0 [ 328.586618][ C0] ? clear_bhb_loop+0x60/0xb0 [ 328.591314][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.597226][ C0] RIP: 0033:0x7fa9433a8007 [ 328.601642][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 328.621246][ C0] RSP: 002b:00007ffe439f88f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 328.629656][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9433a8007 [ 328.637619][ C0] RDX: 00007ffe439f8920 RSI: 00007ffe439f89b0 RDI: 00007ffe439f89b0 [ 328.645581][ C0] RBP: 00007ffe439f89b0 R08: 00007ffe439f99b0 R09: 00000000ffffffff [ 328.653539][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe439f9a40 [ 328.661499][ C0] R13: 00007fa943437363 R14: 000000000004f411 R15: 00007ffe439f9a80 [ 328.669472][ C0] [ 328.672735][ C0] Kernel Offset: disabled [ 328.677080][ C0] Rebooting in 86400 seconds..