last executing test programs: 3m29.666127548s ago: executing program 0 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsopen(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x2c9ab000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r7, 0x18, 0x0, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x81, 0x2, 0xff, 0x5, 0xc7, 0x6}, 0x20) r8 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) r9 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r9, &(0x7f00000002c0)={{0x0, 0x0, 0x80, 0x9}, 0x0, 0x0, 0x1, 0x2}, 0x80, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000080)={0x1000000, 0x4, 0x9}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x2404c140) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m29.477290431s ago: executing program 0 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r8, r8], 0x2, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 3m28.448635626s ago: executing program 0 (id=320): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00ffffffe50000000000000c00090008"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3m27.794555016s ago: executing program 0 (id=322): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r1, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 3m26.794554502s ago: executing program 0 (id=323): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6700c0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') socket$kcm(0xa, 0x2, 0x73) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 3m25.085324237s ago: executing program 0 (id=327): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB="16d60081ab696f4db69ac88117e3cb78ae35a19ad6ef177a909565af550d31502da7f97f7846047ce08da60300a7f76780d7f830103819ff6f634cf9aa20d1e2f53013f38ff554615e156dd0ea35fabbfedaff329074d2a38035f6578212a3f6e536062278b694c112cdae1484ca319c7dd388d61e28a2818c5f42392ad0428c894a0b51f2731726e5a880eab5b244f597a6a69cb0452d9d58dd9c706abc118d548743aa59150346bbf2a5ad03d462bc7fa811b2da6f52628e6a0b213515f3ab5896ba5e17d8ae7d6c2148c3a0d701297d68fb4b251d3c04"]) ptrace(0x10, 0x1) close(0x3) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 3m9.676928598s ago: executing program 32 (id=327): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB="16d60081ab696f4db69ac88117e3cb78ae35a19ad6ef177a909565af550d31502da7f97f7846047ce08da60300a7f76780d7f830103819ff6f634cf9aa20d1e2f53013f38ff554615e156dd0ea35fabbfedaff329074d2a38035f6578212a3f6e536062278b694c112cdae1484ca319c7dd388d61e28a2818c5f42392ad0428c894a0b51f2731726e5a880eab5b244f597a6a69cb0452d9d58dd9c706abc118d548743aa59150346bbf2a5ad03d462bc7fa811b2da6f52628e6a0b213515f3ab5896ba5e17d8ae7d6c2148c3a0d701297d68fb4b251d3c04"]) ptrace(0x10, 0x1) close(0x3) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 24.827962106s ago: executing program 2 (id=702): socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000480)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @timestamp, @timestamp, @mss, @sack_perm], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca4145164", 0x22, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 20.906078764s ago: executing program 2 (id=711): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x63, &(0x7f00000003c0)={@random="00000000aca2", @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x19, 0x55, 0x65, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0x3, 0xd3}, @cipso={0x86, 0x6, 0x3}, @noop, @generic={0x48, 0x5, "936266"}, @ssrr={0x89, 0xf, 0xcc, [@multicast2, @multicast2, @loopback]}]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0xfffe, 0x5, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x2, 0x80101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 19.566103844s ago: executing program 2 (id=712): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @timestamp, @timestamp, @mss, @sack_perm], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca4145164", 0x22, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 15.777366369s ago: executing program 4 (id=719): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x2, 0x80101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 14.544364717s ago: executing program 1 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x113, 0x7b, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000300)={0x0, 0x24, 0x3, {0x3, 0x11, "98"}}, 0x0, 0x0, 0x0}, 0x0) 14.543587407s ago: executing program 4 (id=722): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x63, &(0x7f00000003c0)={@random="00000000aca2", @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x19, 0x55, 0x65, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0x3, 0xd3}, @cipso={0x86, 0x6, 0x3}, @noop, @generic={0x48, 0x5, "936266"}, @ssrr={0x89, 0xf, 0xcc, [@multicast2, @multicast2, @loopback]}]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0xfffe, 0x5, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x2, 0x80101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 12.928914371s ago: executing program 4 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 11.878038676s ago: executing program 5 (id=724): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x63, &(0x7f00000003c0)={@random="00000000aca2", @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x19, 0x55, 0x65, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0x3, 0xd3}, @cipso={0x86, 0x6, 0x3}, @noop, @generic={0x48, 0x5, "936266"}, @ssrr={0x89, 0xf, 0xcc, [@multicast2, @multicast2, @loopback]}]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0xfffe, 0x5, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x2, 0x80101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 11.864363616s ago: executing program 1 (id=725): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x63, &(0x7f00000003c0)={@random="00000000aca2", @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x19, 0x55, 0x65, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0x3, 0xd3}, @cipso={0x86, 0x6, 0x3}, @noop, @generic={0x48, 0x5, "936266"}, @ssrr={0x89, 0xf, 0xcc, [@multicast2, @multicast2, @loopback]}]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0xfffe, 0x5, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 10.586233495s ago: executing program 4 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 9.133011687s ago: executing program 3 (id=728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x709}, 0x14}}, 0x0) 9.111738097s ago: executing program 5 (id=729): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x63, &(0x7f00000003c0)={@random="00000000aca2", @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x19, 0x55, 0x65, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0x3, 0xd3}, @cipso={0x86, 0x6, 0x3}, @noop, @generic={0x48, 0x5, "936266"}, @ssrr={0x89, 0xf, 0xcc, [@multicast2, @multicast2, @loopback]}]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0xfffe, 0x5, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 8.23386017s ago: executing program 3 (id=730): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000000040)=""/46, 0x2e) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 7.853286086s ago: executing program 1 (id=731): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @timestamp, @timestamp, @mss, @sack_perm], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca4145164", 0x22, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 7.795263106s ago: executing program 5 (id=732): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={@empty, 0x19, r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000001c0)=0xfffffe00) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x1, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210ac2d59a56f2584c400"}) syz_pidfd_open(r1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020603000000000000000000030000000c00078008000800000000400900020073797a32000000000500040000000000050005000a000000050001000600000011000300686173683a6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x280000c0}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[], 0x0, 0x58}, 0x28) sendmsg$AUDIT_USER(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x3ed, 0x20, 0x70bd26, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x844) 7.443850331s ago: executing program 2 (id=733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) 7.442501921s ago: executing program 4 (id=734): rename(&(0x7f0000000000)='./file1\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x30b340, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.057071942s ago: executing program 3 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x113, 0x7b, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000300)={0x0, 0x24, 0x3, {0x3, 0x11, "98"}}, 0x0, 0x0, 0x0}, 0x0) 5.796794856s ago: executing program 5 (id=736): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 5.546497119s ago: executing program 4 (id=737): socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @timestamp, @timestamp, @mss, @sack_perm], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca4145164", 0x22, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 5.526578749s ago: executing program 1 (id=738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 4.613002223s ago: executing program 5 (id=739): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 3.166811744s ago: executing program 1 (id=740): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x63, &(0x7f00000003c0)={@random="00000000aca2", @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x19, 0x55, 0x65, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0x3, 0xd3}, @cipso={0x86, 0x6, 0x3}, @noop, @generic={0x48, 0x5, "936266"}, @ssrr={0x89, 0xf, 0xcc, [@multicast2, @multicast2, @loopback]}]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0xfffe, 0x5, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x2, 0x80101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 3.043671946s ago: executing program 3 (id=741): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x63, &(0x7f00000003c0)={@random="00000000aca2", @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x19, 0x55, 0x65, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0x3, 0xd3}, @cipso={0x86, 0x6, 0x3}, @noop, @generic={0x48, 0x5, "936266"}, @ssrr={0x89, 0xf, 0xcc, [@multicast2, @multicast2, @loopback]}]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0xfffe, 0x5, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x2, 0x80101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 1.995831361s ago: executing program 2 (id=742): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x63, &(0x7f00000003c0)={@random="00000000aca2", @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x19, 0x55, 0x65, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0x3, 0xd3}, @cipso={0x86, 0x6, 0x3}, @noop, @generic={0x48, 0x5, "936266"}, @ssrr={0x89, 0xf, 0xcc, [@multicast2, @multicast2, @loopback]}]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0xfffe, 0x5, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 860.679308ms ago: executing program 2 (id=743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x709}, 0x14}}, 0x0) 848.927438ms ago: executing program 1 (id=744): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @timestamp, @timestamp, @mss, @sack_perm], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca4145164", 0x22, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 174.193308ms ago: executing program 5 (id=745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fanotify_init(0x10, 0x400) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000140)="4e6a106d0103a9f1ef1bd2d08e33610b226f5a0237ccfb2d91866182b2d688a219bbe96e170c9db53b8cc13c6384db08336648be95a44ac11e312d83ea0042064d1246575e3c53038fc7c3f1ed5ba5db77b86b") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x9) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r7, 0x7fff}, 0xc) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 69.718899ms ago: executing program 3 (id=746): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=747): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000040000000000000000000001a50a44b474ee89f002857000000000000004000000000000000ec4128"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100), 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x1d, 0x0, 0x0, {0x2, 0xf1, 0x4}, 0x9fd066919859e51f}, 0x18, &(0x7f00000005c0)={&(0x7f0000000580)="b7c737093133d0956c", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x24040010) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 50.191595][ T4172] cgroup: Unknown subsys name 'net' [ 50.327094][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.484186][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.193019][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 53.268050][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 53.287907][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 53.329608][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.377881][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.385610][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.394019][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.412675][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 53.427982][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.435469][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.443784][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.512854][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.527069][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.534347][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.542108][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.557303][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.578941][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.586231][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.594647][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.601581][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.608634][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.616897][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.653364][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.660605][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.668233][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.682292][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.689483][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.697470][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.722315][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.739994][ T4183] team0: Port device team_slave_0 added [ 53.746057][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.753232][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.761494][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.768693][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.775973][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.784215][ T4196] device bridge_slave_0 entered promiscuous mode [ 53.792764][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.812973][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.824255][ T4183] team0: Port device team_slave_1 added [ 53.837411][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.844779][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.853025][ T4196] device bridge_slave_1 entered promiscuous mode [ 53.868164][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.923471][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.942474][ T4182] team0: Port device team_slave_0 added [ 53.950321][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.965536][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.972921][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.999074][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.012047][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.019093][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.045091][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.058274][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.069142][ T4182] team0: Port device team_slave_1 added [ 54.084496][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.102889][ T4187] team0: Port device team_slave_0 added [ 54.111585][ T4191] team0: Port device team_slave_0 added [ 54.139967][ T4187] team0: Port device team_slave_1 added [ 54.155827][ T4191] team0: Port device team_slave_1 added [ 54.170418][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.177384][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.203404][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.238295][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.245288][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.271797][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.285577][ T4196] team0: Port device team_slave_0 added [ 54.298933][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.306156][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.332201][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.356650][ T4196] team0: Port device team_slave_1 added [ 54.365260][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.372370][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.379549][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.386508][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.412580][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.424082][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.431315][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.457249][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.469741][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.476685][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.502634][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.543597][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.550612][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.576840][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.604154][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.610865][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.617327][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.625462][ T4182] Cannot create hsr debugfs directory [ 54.634135][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.641448][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.667484][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.733144][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.740149][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.746589][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.754252][ T4191] Cannot create hsr debugfs directory [ 54.773807][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.780757][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.787276][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.795030][ T4187] Cannot create hsr debugfs directory [ 54.826137][ T4196] device hsr_slave_0 entered promiscuous mode [ 54.833206][ T4196] device hsr_slave_1 entered promiscuous mode [ 54.839956][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.847510][ T4196] Cannot create hsr debugfs directory [ 54.899888][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 54.900792][ T1335] Bluetooth: hci4: command 0x0409 tx timeout [ 54.920178][ T1335] Bluetooth: hci2: command 0x0409 tx timeout [ 54.933541][ T1335] Bluetooth: hci0: command 0x0409 tx timeout [ 54.940992][ T1335] Bluetooth: hci1: command 0x0409 tx timeout [ 55.127304][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.145622][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.154469][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.164534][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.196357][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.206295][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.218329][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.231422][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.294101][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.313973][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.341618][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.367521][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.377276][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.394801][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.414145][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.437390][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.446061][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.458765][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.468979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.478111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.504180][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.518088][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.527717][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.536922][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.544206][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.554729][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.564449][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.573243][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.580398][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.588114][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.600617][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.622072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.644531][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.653315][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.664259][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.673066][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.681891][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.692697][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.706872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.717032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.726074][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.754902][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.763592][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.772476][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.784397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.793453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.802657][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.809759][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.817610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.826129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.834978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.843899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.852354][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.859423][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.867598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.876495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.885148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.894676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.905499][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.920310][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.929535][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.938126][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.979578][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.987413][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.997292][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.028489][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.042488][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.073532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.082224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.091397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.101039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.109424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.131809][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.158892][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.181457][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.195026][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.217121][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.231801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.240860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.257701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.265770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.282691][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.295368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.311844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.325377][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.332510][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.348645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.357434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.365890][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.372979][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.381287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.390288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.401959][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.428492][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.450846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.465452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.476109][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.483228][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.491927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.501759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.510772][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.517833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.525525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.536737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.552300][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.566616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.575214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.583603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.601428][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.631121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.638620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.646867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.661913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.671304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.680309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.688610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.698802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.707290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.715914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.724316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.733756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.743524][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.750621][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.758189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.767092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.775726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.784484][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.791585][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.801455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.810020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.818336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.826398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.834730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.852815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.863070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.872715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.888495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.919982][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.936749][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.948088][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.962638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.971472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.981180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.989443][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 56.990095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.995756][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 57.005225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.009747][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 57.023203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.023736][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 57.033838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.037341][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 57.051046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.060323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.068691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.077870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.086432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.105666][ T4182] device veth0_vlan entered promiscuous mode [ 57.130075][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.138304][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.155085][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.167753][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.186280][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.196863][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.213438][ T4182] device veth1_vlan entered promiscuous mode [ 57.238156][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.247649][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.257879][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.269471][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.277727][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.287014][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.296165][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.310081][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.324773][ T4183] device veth0_vlan entered promiscuous mode [ 57.351508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.361258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.375262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.392058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.419727][ T4183] device veth1_vlan entered promiscuous mode [ 57.449531][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.473038][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.482900][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.490825][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.502806][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.518250][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.529907][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.556739][ T4182] device veth0_macvtap entered promiscuous mode [ 57.574057][ T4183] device veth0_macvtap entered promiscuous mode [ 57.582347][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.592747][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.600523][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.607988][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.617346][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.626784][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.644402][ T4183] device veth1_macvtap entered promiscuous mode [ 57.658471][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.671308][ T4182] device veth1_macvtap entered promiscuous mode [ 57.685638][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.702525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.711543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.719741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.728369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.737087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.744757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.754693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.763383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.781892][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.796748][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.810790][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.820857][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.831089][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.840546][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.849683][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.858363][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.876057][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.884159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.892970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.901666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.911751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.922046][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.932956][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.944873][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.980616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.990287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.000161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.008700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.020379][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.030397][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.039246][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.047932][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.067465][ T4191] device veth0_vlan entered promiscuous mode [ 58.096365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.107591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.117135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.126113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.143292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.151790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.163682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.172325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.206281][ T4196] device veth0_vlan entered promiscuous mode [ 58.214636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.226265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.246367][ T4191] device veth1_vlan entered promiscuous mode [ 58.263331][ T4196] device veth1_vlan entered promiscuous mode [ 58.297864][ T4187] device veth0_vlan entered promiscuous mode [ 58.305495][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.314202][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.325748][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.333659][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.365279][ T4187] device veth1_vlan entered promiscuous mode [ 58.374921][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.401808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.410079][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.415498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.427228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.436759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.449622][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.472395][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.483338][ T4196] device veth0_macvtap entered promiscuous mode [ 58.494658][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.504372][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.513894][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.521989][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.531824][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.550931][ T4191] device veth0_macvtap entered promiscuous mode [ 58.559627][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.565339][ T4196] device veth1_macvtap entered promiscuous mode [ 58.574069][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.585189][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.592056][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.604065][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.604229][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.614481][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.632772][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.644676][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.665935][ T4191] device veth1_macvtap entered promiscuous mode [ 58.675316][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.683603][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.694472][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.702471][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.710570][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.718299][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.727281][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.736713][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.745884][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.756798][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.768809][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.778782][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.789568][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.801221][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.814640][ T4187] device veth0_macvtap entered promiscuous mode [ 58.826033][ T4187] device veth1_macvtap entered promiscuous mode [ 58.843078][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.858400][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.867095][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.877342][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.891136][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.901638][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.910635][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.922176][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.943576][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.954611][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.966196][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.977852][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.999431][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.011029][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.027209][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.049148][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.058051][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.070854][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 59.077919][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 59.090541][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.107581][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 59.125013][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.136177][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.154441][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.167513][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.188939][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.204518][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.215398][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.237502][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.274821][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 59.281239][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 59.293550][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.989114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 60.063201][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.157963][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.182201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.237864][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.294006][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.354576][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.396511][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.407473][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.420028][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.435317][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.460838][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.477969][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.488932][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.505401][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.517906][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.528272][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.539161][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.550364][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.603504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.617997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.641519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.757984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.779509][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.203344][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.218285][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.235020][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.313896][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 61.322149][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 61.328914][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 61.335776][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 61.338449][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.341902][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 61.359735][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.369171][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.377880][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.412638][ T4320] loop1: detected capacity change from 0 to 8 [ 61.429920][ T4320] squashfs: Unknown parameter 'ma}d' [ 61.700862][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.713382][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.749566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.807138][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.817820][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.831260][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.833891][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.888486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.902617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.999582][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.007589][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.072476][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.097856][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.097862][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.097909][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.133907][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.169622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.191012][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.339802][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.348750][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.376470][ T4330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 62.509680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.589701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.639706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.669594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.678642][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.687698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 65.864227][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 66.579647][ T4354] loop2: detected capacity change from 0 to 2048 [ 66.795761][ T4354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.956402][ T4354] ODEBUG: Out of memory. ODEBUG disabled [ 67.216074][ T4354] syz.2.11 (4354): drop_caches: 2 [ 67.989594][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 69.282649][ T4382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.301047][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.209184][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.519203][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 70.689854][ T4388] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 70.829294][ T21] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 70.840785][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.869184][ T21] usb 3-1: Product: syz [ 70.875042][ T21] usb 3-1: Manufacturer: syz [ 70.883687][ T21] usb 3-1: SerialNumber: syz [ 70.908052][ T21] usb 3-1: config 0 descriptor?? [ 70.916202][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22'. [ 70.970425][ T4395] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 70.985772][ T4397] loop1: detected capacity change from 0 to 8 [ 71.034377][ T4397] squashfs: Unknown parameter 'ma}d' [ 71.058541][ T4395] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 71.078882][ T4390] loop0: detected capacity change from 0 to 32768 [ 71.088865][ T4395] syz.3.22 (4395) used greatest stack depth: 20384 bytes left [ 71.112945][ T4401] loop3: detected capacity change from 0 to 2048 [ 71.179291][ T21] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 71.243533][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.259090][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.271482][ T4390] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.21 (4390) [ 71.297882][ T4401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.320359][ T4390] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 71.349105][ T4194] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.386569][ T4390] BTRFS info (device loop0): enabling auto defrag [ 71.438610][ T4390] BTRFS info (device loop0): doing ref verification [ 71.465783][ T4390] BTRFS info (device loop0): max_inline at 0 [ 71.542558][ T4401] syz.3.25 (4401): drop_caches: 2 [ 71.561699][ T4390] BTRFS info (device loop0): force clearing of disk cache [ 71.599113][ T4194] usb 5-1: Using ep0 maxpacket: 8 [ 71.618741][ T4390] BTRFS info (device loop0): turning on sync discard [ 71.656879][ T4390] BTRFS info (device loop0): disabling free space tree [ 71.697350][ T4390] BTRFS info (device loop0): has skinny extents [ 71.999164][ T4194] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 72.008240][ T4194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.411466][ T4390] BTRFS info (device loop0): enabling ssd optimizations [ 72.597375][ T4390] BTRFS info (device loop0): clearing free space tree [ 72.632572][ T4194] usb 5-1: Product: syz [ 72.636777][ T4194] usb 5-1: Manufacturer: syz [ 72.641456][ T4194] usb 5-1: SerialNumber: syz [ 72.650234][ T4390] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.693090][ T4390] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.740998][ T4194] usb 5-1: config 0 descriptor?? [ 72.769971][ T21] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 72.781530][ T4194] gspca_main: se401-2.14.0 probing 047d:5003 [ 72.820022][ T21] usb 3-1: USB disconnect, device number 2 [ 73.319168][ T4194] gspca_se401: ExtraFeatures: 98 [ 73.324235][ T4194] gspca_se401: Too many frame sizes [ 73.928279][ T4227] usb 5-1: USB disconnect, device number 2 [ 74.306766][ T4449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.633325][ T4468] loop4: detected capacity change from 0 to 2048 [ 75.774575][ T4468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.368289][ T26] cfg80211: failed to load regulatory.db [ 76.528305][ T4475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 76.543582][ T4475] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 76.603052][ T4475] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 76.673444][ T4468] syz.4.36 (4468): drop_caches: 2 [ 77.395802][ T4460] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.664135][ T4460] usb 5-1: Using ep0 maxpacket: 8 [ 77.948599][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061dbcc00: rx timeout, send abort [ 77.958430][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061dbcc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 77.972923][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061dbc000: rx timeout, send abort [ 77.981197][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061db7400: rx timeout, send abort [ 78.004835][ T4460] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 78.024417][ T4460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.037966][ T4460] usb 5-1: Product: syz [ 78.039940][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061db7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.052918][ T4460] usb 5-1: Manufacturer: syz [ 78.056623][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061dbc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.084537][ T4460] usb 5-1: SerialNumber: syz [ 78.113664][ T4460] usb 5-1: config 0 descriptor?? [ 78.384699][ T4460] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 79.504871][ T4500] loop1: detected capacity change from 0 to 8 [ 79.511259][ T4460] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 79.545496][ T4460] usb 5-1: USB disconnect, device number 3 [ 79.589883][ T4493] loop3: detected capacity change from 0 to 32768 [ 79.630128][ T4500] squashfs: Unknown parameter 'ma}d' [ 79.734738][ T4493] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.43 (4493) [ 79.762772][ T4339] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.431426][ T4493] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 80.441073][ T4493] BTRFS info (device loop3): enabling auto defrag [ 80.447905][ T4493] BTRFS info (device loop3): doing ref verification [ 80.455090][ T4493] BTRFS info (device loop3): max_inline at 0 [ 80.469231][ T4493] BTRFS info (device loop3): force clearing of disk cache [ 80.476385][ T4493] BTRFS info (device loop3): turning on sync discard [ 80.546278][ T4493] BTRFS info (device loop3): disabling free space tree [ 80.610457][ T4493] BTRFS info (device loop3): has skinny extents [ 80.619188][ T4339] usb 3-1: Using ep0 maxpacket: 8 [ 80.687485][ T4516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'. [ 80.740972][ T4516] netlink: 'syz.0.49': attribute type 10 has an invalid length. [ 81.020689][ T4339] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 81.122123][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.262248][ T4339] usb 3-1: Product: syz [ 81.276052][ T4493] BTRFS info (device loop3): enabling ssd optimizations [ 81.346291][ T4493] BTRFS info (device loop3): clearing free space tree [ 81.363020][ T4339] usb 3-1: Manufacturer: syz [ 81.444953][ T4339] usb 3-1: SerialNumber: syz [ 81.511090][ T4493] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.520839][ T4493] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.568206][ T4538] loop0: detected capacity change from 0 to 2048 [ 81.597166][ T4339] usb 3-1: config 0 descriptor?? [ 81.655150][ T4339] gspca_main: se401-2.14.0 probing 047d:5003 [ 81.665547][ T4538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.485766][ T4339] gspca_se401: ExtraFeatures: 98 [ 82.491258][ T4339] gspca_se401: Too many frame sizes [ 82.651169][ T4349] usb 3-1: USB disconnect, device number 3 [ 82.667436][ T4538] syz.0.50 (4538): drop_caches: 2 [ 82.930674][ T4174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4174) [ 84.086073][ T4571] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.684162][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880605a7000: rx timeout, send abort [ 84.693070][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880605a7000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.707489][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880605a5c00: rx timeout, send abort [ 84.715738][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061828400: rx timeout, send abort [ 84.759248][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061828400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.773669][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880605a5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 85.179107][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.199108][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 86.255932][ T4589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.61'. [ 86.273032][ T4589] netlink: 'syz.4.61': attribute type 10 has an invalid length. [ 86.320745][ T4589] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.524137][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 86.539741][ T26] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 86.548929][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.424799][ T26] usb 2-1: Product: syz [ 87.429074][ T26] usb 2-1: Manufacturer: syz [ 87.433678][ T26] usb 2-1: SerialNumber: syz [ 87.440037][ T26] usb 2-1: config 0 descriptor?? [ 87.564023][ T4604] loop2: detected capacity change from 0 to 2048 [ 87.640749][ T4604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.666414][ T4605] loop4: detected capacity change from 0 to 8 [ 87.699379][ T26] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 87.739992][ T4605] squashfs: Unknown parameter 'ma}d' [ 87.767448][ T4604] syz.2.64 (4604): drop_caches: 2 [ 88.180662][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 88.799556][ T26] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 89.515216][ T4621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 89.901588][ T26] usb 2-1: USB disconnect, device number 2 [ 90.098989][ T4607] loop0: detected capacity change from 0 to 32768 [ 91.927150][ T4641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.75'. [ 91.952615][ T4641] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 92.039523][ T4641] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.205203][ T4658] loop1: detected capacity change from 0 to 8 [ 92.243172][ T4658] squashfs: Unknown parameter 'ma}d' [ 92.257674][ T4659] loop0: detected capacity change from 0 to 2048 [ 92.298868][ T4659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.579662][ T4659] syz.0.80 (4659): drop_caches: 2 [ 94.160633][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 94.255486][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061cf5c00: rx timeout, send abort [ 94.264070][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061cf5c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 94.278483][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061cf4c00: rx timeout, send abort [ 94.286729][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880623f7400: rx timeout, send abort [ 94.393554][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880623f7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 94.408092][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061cf4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.872344][ T4682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 98.654698][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 100.784599][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 100.827082][ T4698] netlink: 'syz.3.90': attribute type 10 has an invalid length. [ 100.860759][ T4704] loop0: detected capacity change from 0 to 8 [ 101.000043][ T4704] squashfs: Unknown parameter 'ma}d' [ 103.466510][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880716db400: rx timeout, send abort [ 103.626867][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880716db400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.641381][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880716dbc00: rx timeout, send abort [ 103.649651][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880788b2400: rx timeout, send abort [ 105.075936][ T4736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 106.210543][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880788b2400: abort rx timeout. Force session deactivation [ 109.452313][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 110.147548][ T4766] loop2: detected capacity change from 0 to 8 [ 110.891311][ T4766] squashfs: Unknown parameter 'ma}d' [ 111.378919][ T4783] capability: warning: `syz.4.113' uses deprecated v2 capabilities in a way that may be insecure [ 112.826048][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 113.635129][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880605bb000: rx timeout, send abort [ 113.643590][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880605bb000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.657994][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880605bb800: rx timeout, send abort [ 113.666249][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060118800: rx timeout, send abort [ 114.248066][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060118800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.262481][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880605bb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.352083][ T4815] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.520269][ T4825] ptrace attach of "./syz-executor exec"[4191] was attempted by "./syz-executor exec"[4825] [ 116.827055][ T4832] ptrace attach of "./syz-executor exec"[4182] was attempted by "./syz-executor exec"[4832] [ 119.027026][ T4846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 119.508197][ T4844] loop1: detected capacity change from 0 to 32768 [ 121.763131][ T4863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'. [ 121.863114][ T4863] netlink: 'syz.1.132': attribute type 10 has an invalid length. [ 122.995608][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f5c0400: rx timeout, send abort [ 123.180882][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f5c1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 123.196315][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e8f8000: rx timeout, send abort [ 123.205132][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e8f8000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 123.470293][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 125.764025][ T4901] ptrace attach of "./syz-executor exec"[4187] was attempted by "./syz-executor exec"[4901] [ 129.166118][ T4923] loop0: detected capacity change from 0 to 8 [ 129.210328][ T4923] squashfs: Unknown parameter 'ma}d' [ 130.381184][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ea74800: rx timeout, send abort [ 131.151275][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ea74800: abort rx timeout. Force session deactivation [ 132.664992][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.675251][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.208501][ T4949] loop2: detected capacity change from 0 to 2048 [ 133.319273][ T4949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.373497][ T4958] syz.2.164 (4958): drop_caches: 2 [ 135.939382][ T4227] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.041547][ T4961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.156'. [ 136.079971][ T4961] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 136.150809][ T4961] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.309228][ T4227] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 136.411995][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.243150][ T4227] usb 5-1: config 0 descriptor?? [ 137.260482][ T4227] usb 5-1: can't set config #0, error -71 [ 137.272695][ T4227] usb 5-1: USB disconnect, device number 4 [ 137.535926][ T4972] ptrace attach of "./syz-executor exec"[4196] was attempted by "./syz-executor exec"[4972] [ 137.882133][ T4974] loop0: detected capacity change from 0 to 8 [ 137.912764][ T4974] squashfs: Unknown parameter 'ma}d' [ 140.532333][ T4967] loop3: detected capacity change from 0 to 32768 [ 140.584718][ T4991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.165'. [ 141.034618][ T5000] ptrace attach of "./syz-executor exec"[4182] was attempted by "./syz-executor exec"[5000] [ 142.026084][ T5008] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.681178][ T5009] syz.3.169 (5009): drop_caches: 2 [ 145.380175][ T5037] loop0: detected capacity change from 0 to 8 [ 145.485836][ T5041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 146.601262][ T5037] squashfs: Unknown parameter 'ma}d' [ 148.794390][ T5046] loop4: detected capacity change from 0 to 32768 [ 150.073455][ T5046] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 150.124141][ T5046] BTRFS info (device loop4): enabling auto defrag [ 150.131205][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eaa6400: rx timeout, send abort [ 150.139621][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eaa6400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.153998][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880619e0800: rx timeout, send abort [ 150.162280][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880619e1c00: rx timeout, send abort [ 150.172463][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880619e1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.186890][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880619e0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.279117][ T5046] BTRFS info (device loop4): doing ref verification [ 150.286076][ T5046] BTRFS info (device loop4): max_inline at 0 [ 150.309108][ T5046] BTRFS info (device loop4): force clearing of disk cache [ 150.316374][ T5046] BTRFS info (device loop4): turning on sync discard [ 150.329103][ T5046] BTRFS info (device loop4): disabling free space tree [ 150.349096][ T5046] BTRFS info (device loop4): has skinny extents [ 150.734826][ T5046] BTRFS error (device loop4): open_ctree failed: -12 [ 150.762526][ T4194] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.149587][ T4194] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 151.171317][ T4194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.227679][ T4194] usb 3-1: config 0 descriptor?? [ 151.609477][ T4194] hackrf 3-1:0.0: usb_control_msg() failed -32 request 0e [ 151.703821][ T4194] hackrf 3-1:0.0: Could not detect board [ 151.822913][ T4194] hackrf: probe of 3-1:0.0 failed with error -32 [ 151.903886][ T4194] usb 3-1: USB disconnect, device number 4 [ 152.053828][ T5098] loop1: detected capacity change from 0 to 8 [ 152.084763][ T5098] squashfs: Unknown parameter 'ma}d' [ 155.817350][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880799a1c00: rx timeout, send abort [ 155.825759][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880799a1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 155.840147][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880799a0000: rx timeout, send abort [ 155.848371][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880799a3000: rx timeout, send abort [ 155.898349][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880799a3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 155.912834][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880799a0000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 157.503222][ T5152] loop3: detected capacity change from 0 to 8 [ 157.643121][ T5152] squashfs: Unknown parameter 'ma}d' [ 158.374659][ T4552] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.439275][ T4552] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 159.458579][ T4552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.941004][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880795d7800: rx timeout, send abort [ 159.949657][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880795d7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.172688][ T4552] usb 5-1: config 0 descriptor?? [ 160.433339][ T4552] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 160.449392][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880795d7800: abort rx timeout. Force session deactivation [ 160.452871][ T4552] hackrf 5-1:0.0: Could not detect board [ 160.552272][ T4552] hackrf: probe of 5-1:0.0 failed with error -71 [ 160.567861][ T4552] usb 5-1: USB disconnect, device number 5 [ 163.523158][ T5201] loop2: detected capacity change from 0 to 8 [ 163.649735][ T5201] squashfs: Unknown parameter 'ma}d' [ 164.856140][ T5207] loop0: detected capacity change from 0 to 2048 [ 165.045280][ T5207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.759982][ T5219] syz.0.217 (5219): drop_caches: 2 [ 166.197272][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ee94400: rx timeout, send abort [ 166.205704][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ee94400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 167.599213][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.979147][ T1108] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 167.992567][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.033042][ T1108] usb 2-1: config 0 descriptor?? [ 168.673498][ T1108] hackrf 2-1:0.0: usb_control_msg() failed -32 request 0e [ 169.569687][ T1108] hackrf 2-1:0.0: Could not detect board [ 169.575743][ T1108] hackrf: probe of 2-1:0.0 failed with error -32 [ 169.592293][ T1108] usb 2-1: USB disconnect, device number 3 [ 171.835790][ T5257] loop3: detected capacity change from 0 to 8 [ 172.560567][ T5257] squashfs: Unknown parameter 'ma}d' [ 173.779490][ T5276] loop4: detected capacity change from 0 to 2048 [ 173.856061][ T5276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.186119][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060944000: rx timeout, send abort [ 174.194458][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060944000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.403501][ T5281] syz.4.237 (5281): drop_caches: 2 [ 175.699306][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 175.705626][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 175.721604][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 175.739741][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 175.745811][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 179.642208][ T5318] loop4: detected capacity change from 0 to 8 [ 180.669469][ T5318] squashfs: Unknown parameter 'ma}d' [ 180.974987][ C1] vcan0: j1939_tp_rxtimer: 0xffff888017986c00: rx timeout, send abort [ 181.048246][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888017986c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.846886][ T5336] loop2: detected capacity change from 0 to 2048 [ 182.000072][ T5336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.287966][ T5338] syz.2.251 (5338): drop_caches: 2 [ 186.272131][ T5374] loop0: detected capacity change from 0 to 8 [ 187.182164][ T5374] squashfs: Unknown parameter 'ma}d' [ 187.698378][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880795f1800: rx timeout, send abort [ 187.706943][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880795f1800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 188.172172][ T5383] loop0: detected capacity change from 0 to 2048 [ 188.197036][ T5386] Zero length message leads to an empty skb [ 188.765243][ T5383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.078004][ T5408] syz.0.266 (5408): drop_caches: 2 [ 191.587831][ T5414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.275'. [ 191.616004][ T5425] loop2: detected capacity change from 0 to 8 [ 191.671940][ T5425] squashfs: Unknown parameter 'ma}d' [ 191.711883][ T5414] netlink: 'syz.4.275': attribute type 10 has an invalid length. [ 192.357513][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 192.809130][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 192.862383][ T21] usb 4-1: no configurations [ 192.867019][ T21] usb 4-1: can't read configurations, error -22 [ 193.049064][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 193.329212][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 193.383167][ T21] usb 4-1: no configurations [ 193.405060][ T21] usb 4-1: can't read configurations, error -22 [ 193.509842][ T21] usb usb4-port1: attempt power cycle [ 194.039192][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 194.164523][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 194.214420][ T21] usb 4-1: no configurations [ 194.219268][ T21] usb 4-1: can't read configurations, error -22 [ 194.239867][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246177][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.434303][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 194.540118][ T21] usb 4-1: device descriptor read/8, error -71 [ 194.685528][ T21] usb usb4-port1: unable to enumerate USB device [ 195.794082][ T5458] loop4: detected capacity change from 0 to 2048 [ 196.095496][ T5458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.107897][ T5471] syz.4.285 (5471): drop_caches: 2 [ 198.211548][ T5481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.289'. [ 198.258868][ T5481] netlink: 'syz.0.289': attribute type 10 has an invalid length. [ 198.400104][ T5482] loop2: detected capacity change from 0 to 8 [ 198.573028][ T5482] squashfs: Unknown parameter 'ma}d' [ 199.159189][ T4349] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 199.529082][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 199.569280][ T4349] usb 1-1: no configurations [ 199.573943][ T4349] usb 1-1: can't read configurations, error -22 [ 200.529211][ T4349] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 201.029088][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 201.079331][ T4349] usb 1-1: no configurations [ 201.084049][ T4349] usb 1-1: can't read configurations, error -22 [ 201.094302][ T4349] usb usb1-port1: attempt power cycle [ 201.569207][ T4349] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 201.921226][ T4349] usb 1-1: device descriptor read/8, error -71 [ 201.937397][ T5509] ptrace attach of "./syz-executor exec"[4191] was attempted by "./syz-executor exec"[5509] [ 202.320059][ T5517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 202.565519][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ee42800: rx timeout, send abort [ 202.573979][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ee42800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 202.588491][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ee40000: rx timeout, send abort [ 202.596770][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ee40800: rx timeout, send abort [ 203.029630][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ee40800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 203.044240][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ee40000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 203.327392][ T5524] loop4: detected capacity change from 0 to 8 [ 203.400627][ T5525] loop0: detected capacity change from 0 to 2048 [ 203.409611][ T5524] squashfs: Unknown parameter 'ma}d' [ 203.557795][ T5525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.495785][ T5529] syz.0.303 (5529): drop_caches: 2 [ 205.760035][ T5530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 205.886334][ T5530] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 206.349106][ T4349] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.519158][ T4349] usb 5-1: Using ep0 maxpacket: 8 [ 207.559296][ T4349] usb 5-1: no configurations [ 207.563947][ T4349] usb 5-1: can't read configurations, error -22 [ 207.769133][ T4349] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 208.789119][ T4349] usb 5-1: Using ep0 maxpacket: 8 [ 208.839391][ T4349] usb 5-1: no configurations [ 208.844022][ T4349] usb 5-1: can't read configurations, error -22 [ 208.884652][ T4349] usb usb5-port1: attempt power cycle [ 209.103085][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880792ec000: rx timeout, send abort [ 209.111724][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880792ec000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.126151][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880792ecc00: rx timeout, send abort [ 209.134431][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880792eec00: rx timeout, send abort [ 209.234892][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880792eec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.249385][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880792ecc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.647797][ T5571] loop4: detected capacity change from 0 to 2048 [ 209.835014][ T5571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.895626][ T5575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.320'. [ 210.118084][ T5575] netlink: 'syz.0.320': attribute type 10 has an invalid length. [ 210.142666][ T5576] syz.4.318 (5576): drop_caches: 2 [ 215.656279][ T5607] ptrace attach of "./syz-executor exec"[4187] was attempted by "./syz-executor exec"[5607] [ 217.053072][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.224553][ T5625] loop2: detected capacity change from 0 to 2048 [ 217.292100][ T5625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.318389][ T5627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 217.560378][ T5629] syz.2.332 (5629): drop_caches: 2 [ 217.739198][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 218.949429][ T21] usb 4-1: device descriptor read/all, error -71 [ 225.070355][ T5676] fuse: Bad value for 'fd' [ 227.079466][ T1108] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 227.339371][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 227.459598][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.488714][ T1108] usb 5-1: config 0 has no interfaces? [ 227.679533][ T1108] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 227.702643][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.767977][ T1108] usb 5-1: Product: syz [ 227.798551][ T1108] usb 5-1: Manufacturer: syz [ 227.830716][ T1108] usb 5-1: SerialNumber: syz [ 227.888415][ T1108] usb 5-1: config 0 descriptor?? [ 229.771914][ T1274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.802424][ T1108] usb 5-1: USB disconnect, device number 9 [ 230.222458][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805edcbc00: rx timeout, send abort [ 230.233781][ T1274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.412598][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805edcbc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.427090][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f4f8c00: rx timeout, send abort [ 230.435499][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f4fa000: rx timeout, send abort [ 230.445064][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f4fa000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.459507][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f4f8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.723126][ T1274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.899129][ T26] Bluetooth: hci5: command 0x0409 tx timeout [ 231.027199][ T1274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.132473][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e8b7c00: rx timeout, send abort [ 231.140947][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e8b7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.155514][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e8b7000: rx timeout, send abort [ 231.163870][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e8b4400: rx timeout, send abort [ 231.382734][ T5715] chnl_net:caif_netlink_parms(): no params data found [ 231.546859][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e8b4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.561290][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e8b7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 232.521310][ T5715] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.653580][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.713881][ T5715] device bridge_slave_0 entered promiscuous mode [ 232.757747][ T5715] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.764954][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.782485][ T5715] device bridge_slave_1 entered promiscuous mode [ 232.817870][ T5755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 232.979307][ T26] Bluetooth: hci5: command 0x041b tx timeout [ 233.266064][ T5756] netlink: 'syz.1.364': attribute type 10 has an invalid length. [ 233.675667][ T5715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.739871][ T5715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.839158][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 235.278693][ T4240] Bluetooth: hci5: command 0x040f tx timeout [ 236.139236][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 236.147706][ T5715] team0: Port device team_slave_0 added [ 236.161647][ T5715] team0: Port device team_slave_1 added [ 236.208104][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 236.217713][ T5715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.235926][ T5715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.259261][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.262917][ T5715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.285356][ T26] usb 4-1: config 0 has no interfaces? [ 236.295228][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 236.315942][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 236.340147][ T5715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.347111][ T5715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.389955][ T5715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.463691][ T5715] device hsr_slave_0 entered promiscuous mode [ 236.490130][ T5715] device hsr_slave_1 entered promiscuous mode [ 236.497052][ T5715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.515312][ T5715] Cannot create hsr debugfs directory [ 236.609311][ T26] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 236.618521][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.627214][ T26] usb 4-1: Product: syz [ 236.632326][ T26] usb 4-1: Manufacturer: syz [ 236.638247][ T26] usb 4-1: SerialNumber: syz [ 236.651239][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 236.656075][ T26] usb 4-1: config 0 descriptor?? [ 236.797156][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880220c7800: rx timeout, send abort [ 236.856847][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 237.052740][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 237.286790][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062242000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 237.301326][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880220c5c00: rx timeout, send abort [ 237.337567][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880220c5c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 237.352098][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880220c7800: abort rx timeout. Force session deactivation [ 237.433503][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 237.445894][ T5811] loop3: detected capacity change from 0 to 8 [ 237.470467][ T26] usb 4-1: can't set config #0, error -71 [ 237.508474][ T26] usb 4-1: USB disconnect, device number 8 [ 237.575175][ T5811] squashfs: Unknown parameter 'ma}d' [ 237.804156][ T5818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.375'. [ 237.842639][ T5823] netlink: 'syz.4.375': attribute type 10 has an invalid length. [ 237.983635][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880714a8c00: rx timeout, send abort [ 237.992286][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880714a8c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.006881][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880714a9000: rx timeout, send abort [ 238.015223][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880714aac00: rx timeout, send abort [ 238.476081][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880714aac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.490538][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880714a9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.605311][ T1274] bond0: (slave wlan1): Releasing backup interface [ 238.874209][ T5715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.900782][ T5715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.965641][ T5715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.010209][ T5715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.139626][ T5846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 239.148625][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 239.186139][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 239.277491][ T1274] device hsr_slave_0 left promiscuous mode [ 239.304748][ T1274] device hsr_slave_1 left promiscuous mode [ 239.344119][ T1274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.362732][ T1274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.384550][ T1274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.389278][ T4548] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 239.403107][ T1274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.425794][ T1274] device bridge_slave_1 left promiscuous mode [ 239.444903][ T1274] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.504120][ T1274] device bridge_slave_0 left promiscuous mode [ 239.510665][ T1274] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.551134][ T1274] device veth1_macvtap left promiscuous mode [ 239.557475][ T1274] device veth0_macvtap left promiscuous mode [ 239.584832][ T1274] device veth1_vlan left promiscuous mode [ 239.604580][ T1274] device veth0_vlan left promiscuous mode [ 239.661900][ T4548] usb 4-1: Using ep0 maxpacket: 8 [ 239.783606][ T4548] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.805250][ T4548] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.991262][ T4548] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 240.008539][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.008835][ T1274] team0 (unregistering): Port device team_slave_1 removed [ 240.033301][ T4548] usb 4-1: Product: syz [ 240.046397][ T4548] usb 4-1: Manufacturer: syz [ 240.055598][ T1274] team0 (unregistering): Port device team_slave_0 removed [ 240.057750][ T4548] usb 4-1: SerialNumber: syz [ 240.104449][ T1274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.104776][ T4548] usb 4-1: config 0 descriptor?? [ 240.132566][ T1274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.264851][ T1274] bond0 (unregistering): Released all slaves [ 241.203277][ T5715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.284973][ T5828] loop1: detected capacity change from 0 to 131072 [ 241.364172][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.403615][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.456721][ T5828] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 241.511187][ T5715] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.557821][ T5828] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 241.682073][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.755437][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.860876][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.868061][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.896839][ T5828] F2FS-fs (loop1): invalid crc value [ 241.911295][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802495f400: rx timeout, send abort [ 241.919862][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802495f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.934268][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802495fc00: rx timeout, send abort [ 241.942531][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802495dc00: rx timeout, send abort [ 242.086590][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.169616][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.216292][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802495dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 242.230747][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802495fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 242.259408][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.267846][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.274954][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.326918][ T21] usb 4-1: USB disconnect, device number 9 [ 242.411209][ T5715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.470160][ T5715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.684287][ T5828] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 243.002691][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.035666][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.097767][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.198938][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.214371][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.224033][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.306971][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.334819][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.348194][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.382598][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.559346][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.206464][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.451863][ T5943] loop1: detected capacity change from 0 to 8 [ 246.502162][ T5943] squashfs: Unknown parameter 'ma}d' [ 246.539164][ T4339] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.716215][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.736623][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.847643][ T4339] usb 4-1: Using ep0 maxpacket: 8 [ 246.969559][ T4339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.048542][ T5715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.510533][ T4339] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.419803][ T4339] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 248.429248][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.437255][ T4339] usb 4-1: Product: syz [ 248.512252][ T4339] usb 4-1: Manufacturer: syz [ 248.516887][ T4339] usb 4-1: SerialNumber: syz [ 248.530027][ T4339] usb 4-1: config 0 descriptor?? [ 248.575640][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'. [ 248.621432][ T5965] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 248.756078][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.799907][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.862046][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.887109][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.912126][ T5715] device veth0_vlan entered promiscuous mode [ 248.939617][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.947949][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.974916][ T5715] device veth1_vlan entered promiscuous mode [ 249.062397][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.075206][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.110781][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.145117][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.172270][ T5715] device veth0_macvtap entered promiscuous mode [ 249.194415][ T5715] device veth1_macvtap entered promiscuous mode [ 249.279915][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.311063][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.340919][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.371842][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.424739][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.493327][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.519096][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.554648][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.581582][ T5715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.610263][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.627380][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.657836][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.779140][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.905688][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.997713][ T1108] usb 4-1: USB disconnect, device number 10 [ 250.008280][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.220765][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.370640][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.534402][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.544918][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.554760][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.565271][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.576270][ T5715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.586635][ T5715] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.595382][ T5715] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.666579][ T5715] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.612807][ T6007] loop2: detected capacity change from 0 to 8 [ 251.631740][ T5715] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.643775][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.653257][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.691521][ T6007] squashfs: Unknown parameter 'ma}d' [ 251.872713][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.882744][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.930995][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.559133][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.634152][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 252.678339][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.923912][ T6020] loop4: detected capacity change from 0 to 2048 [ 253.326897][ T6020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.891515][ T4548] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 254.719065][ T4548] usb 3-1: Using ep0 maxpacket: 8 [ 254.860358][ T4548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.879087][ T4548] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.039942][ T4548] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 255.159499][ T4548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.320741][ T4548] usb 3-1: Product: syz [ 255.406546][ T4548] usb 3-1: Manufacturer: syz [ 255.569855][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.576281][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.579223][ T4548] usb 3-1: SerialNumber: syz [ 255.610863][ T4548] usb 3-1: config 0 descriptor?? [ 256.234316][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806027ec00: rx timeout, send abort [ 256.246044][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806027ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 256.260545][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806027d400: rx timeout, send abort [ 256.268762][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806027cc00: rx timeout, send abort [ 256.280708][ T6079] loop4: detected capacity change from 0 to 8 [ 256.322075][ T6079] squashfs: Unknown parameter 'ma}d' [ 256.323771][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806027cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 256.341795][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806027d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 257.481075][ T7] usb 3-1: USB disconnect, device number 5 [ 264.673555][ T6131] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 266.273462][ T6148] loop3: detected capacity change from 0 to 8 [ 266.350233][ T6148] squashfs: Unknown parameter 'ma}d' [ 266.783558][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.439'. [ 266.972780][ T6155] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 267.536909][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.455'. [ 267.970852][ T6180] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 270.698637][ T6220] loop1: detected capacity change from 0 to 8 [ 271.132650][ T6220] squashfs: Unknown parameter 'ma}d' [ 271.664083][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 271.674012][ T6236] netlink: 'syz.4.458': attribute type 10 has an invalid length. [ 274.274363][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.474'. [ 274.324476][ T6264] netlink: 'syz.5.474': attribute type 10 has an invalid length. [ 275.571614][ T6264] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.098458][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c63c000: rx timeout, send abort [ 278.050724][ T6307] loop3: detected capacity change from 0 to 8 [ 278.160629][ T6307] squashfs: Unknown parameter 'ma}d' [ 281.596519][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.5.480'. [ 281.607210][ T6337] netlink: 'syz.5.480': attribute type 10 has an invalid length. [ 282.814801][ T6352] loop1: detected capacity change from 0 to 2048 [ 283.166076][ T6352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.024775][ T6349] loop5: detected capacity change from 0 to 32768 [ 285.044773][ T6374] loop1: detected capacity change from 0 to 8 [ 285.069647][ T6349] ======================================================= [ 285.069647][ T6349] WARNING: The mand mount option has been deprecated and [ 285.069647][ T6349] and is ignored by this kernel. Remove the mand [ 285.069647][ T6349] option from the mount to silence this warning. [ 285.069647][ T6349] ======================================================= [ 285.109934][ T6374] squashfs: Unknown parameter 'ma}d' [ 286.017970][ T6349] JBD2: recovery failed [ 286.049255][ T6349] (syz.5.481,6349,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 286.136685][ T6349] (syz.5.481,6349,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 286.307546][ T6349] (syz.5.481,6349,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 286.329224][ T6349] (syz.5.481,6349,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 286.557243][ T6349] (syz.5.481,6349,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 286.967677][ T6400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 287.138155][ T6400] netlink: 'syz.1.491': attribute type 10 has an invalid length. [ 289.699302][ T4460] Bluetooth: hci5: command 0x0411 tx timeout [ 293.441680][ T6466] loop4: detected capacity change from 0 to 32768 [ 293.592552][ T6444] loop2: detected capacity change from 0 to 32768 [ 293.622756][ T6466] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 294.738206][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 296.191900][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c73c000: rx timeout, send abort [ 296.700114][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c73c000: abort rx timeout. Force session deactivation [ 297.460199][ T4460] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 299.249139][ T4460] usb 4-1: Using ep0 maxpacket: 8 [ 299.883364][ T4460] usb 4-1: string descriptor 0 read error: -71 [ 299.895955][ T4460] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 299.931417][ T4460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.462777][ T4460] usb 4-1: config 0 descriptor?? [ 300.479193][ T4460] usb 4-1: can't set config #0, error -71 [ 300.489228][ T4460] usb 4-1: USB disconnect, device number 11 [ 302.048240][ T6551] loop3: detected capacity change from 0 to 32768 [ 302.108078][ T6551] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 303.100935][ T6596] loop2: detected capacity change from 0 to 8 [ 303.143518][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 304.491948][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880788a0000: rx timeout, send abort [ 305.000211][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880788a0000: abort rx timeout. Force session deactivation [ 307.216230][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ec06800: rx timeout, send abort [ 307.724516][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ec06800: abort rx timeout. Force session deactivation [ 309.253644][ T6628] loop1: detected capacity change from 0 to 2048 [ 309.554176][ T6628] hpfs: bad mount options. [ 313.046104][ T6662] loop4: detected capacity change from 0 to 8 [ 315.653747][ T6690] netlink: 20 bytes leftover after parsing attributes in process `syz.5.547'. [ 315.669603][ T6690] netlink: 'syz.5.547': attribute type 10 has an invalid length. [ 315.779142][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 317.852556][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.863178][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 317.868810][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.759276][ T1108] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 318.772644][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.789666][ T1108] usb 3-1: Product: syz [ 318.817975][ T1108] usb 3-1: Manufacturer: syz [ 318.909089][ T1108] usb 3-1: SerialNumber: syz [ 318.954032][ T1108] usb 3-1: config 0 descriptor?? [ 318.968444][ T6721] loop1: detected capacity change from 0 to 1024 [ 320.055060][ T6728] sched: RT throttling activated [ 320.069175][ T1108] usb 3-1: can't set config #0, error -71 [ 320.242220][ T1108] usb 3-1: USB disconnect, device number 6 [ 320.262635][ T6721] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.290726][ T6735] loop3: detected capacity change from 0 to 8 [ 320.669260][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 322.499082][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 322.812686][ T1108] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 322.842104][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.869140][ T1108] usb 3-1: Product: syz [ 322.879063][ T1108] usb 3-1: Manufacturer: syz [ 322.883793][ T1108] usb 3-1: SerialNumber: syz [ 322.900891][ T1108] usb 3-1: config 0 descriptor?? [ 322.970998][ T1108] gspca_main: se401-2.14.0 probing 047d:5003 [ 323.035878][ T6751] loop5: detected capacity change from 0 to 32768 [ 323.079372][ T6751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.562 (6751) [ 323.116312][ T6751] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 323.135331][ T6751] BTRFS info (device loop5): enabling auto defrag [ 323.153521][ T6751] BTRFS info (device loop5): doing ref verification [ 323.169074][ T6751] BTRFS info (device loop5): max_inline at 0 [ 323.177356][ T6751] BTRFS info (device loop5): force clearing of disk cache [ 323.224718][ T6751] BTRFS info (device loop5): turning on sync discard [ 323.237119][ T6751] BTRFS info (device loop5): disabling free space tree [ 323.244407][ T6751] BTRFS info (device loop5): has skinny extents [ 323.304204][ T6756] loop1: detected capacity change from 0 to 32768 [ 323.349110][ T1108] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 323.441725][ T6756] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 323.467758][ T6751] BTRFS info (device loop5): enabling ssd optimizations [ 323.491641][ T6751] BTRFS info (device loop5): clearing free space tree [ 323.499235][ T6751] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 323.509832][ T6781] loop4: detected capacity change from 0 to 8 [ 323.531988][ T6751] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 323.893370][ T25] audit: type=1800 audit(1751968419.938:2): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.564" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 324.956695][ T1108] gspca_se401: read req failed req 0x06 error -19 [ 324.974091][ T1108] usb 3-1: USB disconnect, device number 7 [ 325.674781][ T6800] loop3: detected capacity change from 0 to 8 [ 325.760288][ T6800] squashfs: Unknown parameter 'ma}d' [ 327.012348][ T6803] loop4: detected capacity change from 0 to 32768 [ 327.094964][ T6803] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 327.269904][ T6803] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 327.347250][ T6806] loop5: detected capacity change from 0 to 32768 [ 327.405848][ T6806] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 327.537070][ T6806] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 327.537097][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 327.599623][ T6819] loop3: detected capacity change from 0 to 2048 [ 327.705413][ T6819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.405272][ T5715] ocfs2: Unmounting device (7,5) on (node local) [ 330.497139][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.575'. [ 330.569801][ T6838] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 330.962873][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 331.761304][ T6856] loop5: detected capacity change from 0 to 8 [ 331.769068][ T4339] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 331.786410][ T6856] squashfs: Unknown parameter 'ma}d' [ 332.058255][ T6847] loop2: detected capacity change from 0 to 32768 [ 332.089069][ T4339] usb 4-1: Using ep0 maxpacket: 8 [ 332.094728][ T6847] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.580 (6847) [ 332.379816][ T4339] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 332.442850][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.562362][ T4339] usb 4-1: Product: syz [ 332.679086][ T4339] usb 4-1: Manufacturer: syz [ 332.683720][ T4339] usb 4-1: SerialNumber: syz [ 332.749993][ T4339] usb 4-1: config 0 descriptor?? [ 332.785096][ T6847] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 332.823819][ T4339] gspca_main: se401-2.14.0 probing 047d:5003 [ 332.845801][ T6847] BTRFS info (device loop2): enabling auto defrag [ 332.858206][ T6868] loop5: detected capacity change from 0 to 8 [ 332.864742][ T6847] BTRFS info (device loop2): doing ref verification [ 332.885010][ T6847] BTRFS info (device loop2): max_inline at 0 [ 332.902260][ T6847] BTRFS info (device loop2): force clearing of disk cache [ 332.914073][ T6847] BTRFS info (device loop2): turning on sync discard [ 332.924230][ T6847] BTRFS info (device loop2): disabling free space tree [ 332.944553][ T6847] BTRFS info (device loop2): has skinny extents [ 333.058052][ T6873] loop1: detected capacity change from 0 to 2048 [ 333.156751][ T6873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.279112][ T4339] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 334.316845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805efef800: rx timeout, send abort [ 334.492978][ T4339] gspca_se401: read req failed req 0x06 error -19 [ 334.560028][ T4339] usb 4-1: USB disconnect, device number 12 [ 334.825104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805efef800: abort rx timeout. Force session deactivation [ 337.037271][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.589'. [ 337.143244][ T6901] netlink: 'syz.4.589': attribute type 10 has an invalid length. [ 337.169343][ T6847] BTRFS error (device loop2): open_ctree failed: -12 [ 338.222102][ T6919] loop1: detected capacity change from 0 to 8 [ 338.266654][ T6920] loop5: detected capacity change from 0 to 1024 [ 338.292178][ T6919] squashfs: Unknown parameter 'ma}d' [ 339.610215][ T6920] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.696531][ T6934] loop1: detected capacity change from 0 to 8 [ 339.802091][ T6934] squashfs: Unknown parameter 'ma}d' [ 339.830870][ T6937] syz.5.594 sent an empty control message without MSG_MORE. [ 342.389909][ T4318] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 342.679223][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 342.799330][ T4318] usb 4-1: device descriptor read/all, error -71 [ 342.840142][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.603'. [ 342.875808][ T6953] netlink: 'syz.2.603': attribute type 10 has an invalid length. [ 343.301972][ T6955] loop5: detected capacity change from 0 to 2048 [ 343.459886][ T6955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.559229][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e9afc00: rx timeout, send abort [ 343.780616][ T6949] loop4: detected capacity change from 0 to 32768 [ 343.808455][ T6949] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.601 (6949) [ 344.067572][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e9afc00: abort rx timeout. Force session deactivation [ 344.320401][ T6949] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 345.608524][ T6949] BTRFS info (device loop4): enabling auto defrag [ 345.615086][ T6949] BTRFS info (device loop4): doing ref verification [ 345.625744][ T6949] BTRFS info (device loop4): max_inline at 0 [ 345.631858][ T6949] BTRFS info (device loop4): force clearing of disk cache [ 345.640200][ T6949] BTRFS info (device loop4): turning on sync discard [ 345.647100][ T6949] BTRFS info (device loop4): disabling free space tree [ 345.654344][ T6949] BTRFS info (device loop4): has skinny extents [ 345.763317][ T6949] BTRFS error (device loop4): open_ctree failed: -12 [ 347.474506][ T4174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4174) [ 347.488833][ T6994] loop1: detected capacity change from 0 to 8 [ 347.554783][ T6994] squashfs: Unknown parameter 'ma}d' [ 348.703730][ T7013] loop1: detected capacity change from 0 to 8 [ 349.039933][ T7015] loop4: detected capacity change from 0 to 512 [ 349.059255][ T4465] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 349.279406][ T7015] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 349.279406][ T7015] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 349.279406][ T7015] [ 349.298604][ T7015] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 349.359220][ T4465] usb 4-1: Using ep0 maxpacket: 8 [ 349.591251][ T7015] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nogrpid,nouser_xattr,journal_dev=0x0000000000000008,jqfmt=vfsold,. Quota mode: writeback. [ 349.609103][ T7015] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.689169][ T4465] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 349.701431][ T4465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.713728][ T4465] usb 4-1: Product: syz [ 349.721201][ T4465] usb 4-1: Manufacturer: syz [ 349.729062][ T4465] usb 4-1: SerialNumber: syz [ 349.739860][ T4465] usb 4-1: config 0 descriptor?? [ 349.831466][ T4465] gspca_main: se401-2.14.0 probing 047d:5003 [ 350.084890][ T25] audit: type=1800 audit(1751968446.158:3): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.614" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 350.219074][ T4465] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 350.875069][ T7032] loop3: detected capacity change from 0 to 2048 [ 350.991105][ T7032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.515503][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dac1400: rx timeout, send abort [ 351.679205][ T4465] gspca_se401: read req failed req 0x06 error -19 [ 351.700541][ T4465] usb 4-1: USB disconnect, device number 15 [ 352.023833][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dac1400: abort rx timeout. Force session deactivation [ 354.902616][ T7042] loop4: detected capacity change from 0 to 32768 [ 355.116511][ T7042] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 355.166520][ T7042] BTRFS info (device loop4): enabling auto defrag [ 355.199631][ T7042] BTRFS info (device loop4): doing ref verification [ 355.444716][ T7042] BTRFS info (device loop4): max_inline at 0 [ 355.509129][ T7042] BTRFS info (device loop4): force clearing of disk cache [ 355.544183][ T7042] BTRFS info (device loop4): turning on sync discard [ 355.557929][ T7042] BTRFS info (device loop4): disabling free space tree [ 355.656849][ T7042] BTRFS info (device loop4): has skinny extents [ 355.959951][ T7042] BTRFS info (device loop4): enabling ssd optimizations [ 355.970539][ T7042] BTRFS info (device loop4): clearing free space tree [ 355.981898][ T7042] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 356.004460][ T7042] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 356.080664][ T7076] loop3: detected capacity change from 0 to 32768 [ 356.305447][ T7076] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 358.132789][ T4339] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 358.215883][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 358.819173][ T4339] usb 3-1: Using ep0 maxpacket: 8 [ 359.189753][ T4339] usb 3-1: string descriptor 0 read error: -71 [ 359.203477][ T4339] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 359.309072][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.370101][ T4339] usb 3-1: config 0 descriptor?? [ 359.781399][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e96b400: rx timeout, send abort [ 360.289718][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e96b400: abort rx timeout. Force session deactivation [ 360.332032][ T4339] usb 3-1: can't set config #0, error -71 [ 360.343712][ T4339] usb 3-1: USB disconnect, device number 8 [ 360.408285][ T7124] loop4: detected capacity change from 0 to 8 [ 361.348275][ T7125] loop1: detected capacity change from 0 to 32768 [ 361.455086][ T7125] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 362.206707][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 363.876823][ T7153] loop2: detected capacity change from 0 to 32768 [ 363.978831][ T7153] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.643 (7153) [ 363.979134][ T4460] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 364.034692][ T7153] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 364.060486][ T7153] BTRFS info (device loop2): enabling auto defrag [ 364.087851][ T7153] BTRFS info (device loop2): doing ref verification [ 364.107406][ T7153] BTRFS info (device loop2): max_inline at 0 [ 364.123858][ T7153] BTRFS info (device loop2): force clearing of disk cache [ 364.143633][ T7153] BTRFS info (device loop2): turning on sync discard [ 364.154579][ T7158] loop5: detected capacity change from 0 to 32768 [ 364.161329][ T7153] BTRFS info (device loop2): disabling free space tree [ 364.168197][ T7153] BTRFS info (device loop2): has skinny extents [ 364.250408][ T7158] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 364.279159][ T4460] usb 5-1: Using ep0 maxpacket: 8 [ 364.337385][ T7179] loop3: detected capacity change from 0 to 1024 [ 364.455654][ T7153] BTRFS info (device loop2): enabling ssd optimizations [ 364.474811][ T7179] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.501506][ T7153] BTRFS info (device loop2): clearing free space tree [ 364.508377][ T7153] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 364.548436][ T7153] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 364.971126][ T5715] ocfs2: Unmounting device (7,5) on (node local) [ 365.070815][ T4460] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 365.095526][ T4460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.103746][ T4460] usb 5-1: Product: syz [ 365.108050][ T4460] usb 5-1: Manufacturer: syz [ 365.112717][ T4460] usb 5-1: SerialNumber: syz [ 365.127557][ T4460] usb 5-1: config 0 descriptor?? [ 365.221201][ T4460] gspca_main: se401-2.14.0 probing 047d:5003 [ 365.689245][ T4460] gspca_se401: Wrong descriptor type [ 365.960110][ T4460] usb 5-1: USB disconnect, device number 10 [ 366.143666][ T7202] loop5: detected capacity change from 0 to 65 [ 366.254187][ T7202] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 366.859978][ T7207] loop4: detected capacity change from 0 to 8 [ 371.127814][ T7215] loop1: detected capacity change from 0 to 65 [ 371.972075][ T7215] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 375.922728][ T7244] loop3: detected capacity change from 0 to 32768 [ 375.956197][ T7244] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.662 (7244) [ 376.017564][ T7244] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 376.029231][ T7256] loop2: detected capacity change from 0 to 1024 [ 376.047495][ T7244] BTRFS info (device loop3): enabling auto defrag [ 376.094027][ T7244] BTRFS info (device loop3): doing ref verification [ 376.115401][ T7256] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.166783][ T7244] BTRFS info (device loop3): max_inline at 0 [ 376.195057][ T7244] BTRFS info (device loop3): force clearing of disk cache [ 376.202670][ T7244] BTRFS info (device loop3): turning on sync discard [ 376.216923][ T7244] BTRFS info (device loop3): disabling free space tree [ 376.224436][ T7244] BTRFS info (device loop3): has skinny extents [ 376.834328][ T7244] BTRFS info (device loop3): enabling ssd optimizations [ 376.879938][ T7244] BTRFS info (device loop3): clearing free space tree [ 376.948963][ T7244] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 377.049100][ T7244] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 378.481769][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.488083][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.692748][ T7291] loop2: detected capacity change from 0 to 8 [ 382.108397][ T4240] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 383.519192][ T4240] usb 5-1: Using ep0 maxpacket: 8 [ 383.766249][ T7337] loop5: detected capacity change from 0 to 8 [ 384.730245][ T7340] loop2: detected capacity change from 0 to 65 [ 386.479104][ T7340] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 386.550615][ T4240] usb 5-1: string descriptor 0 read error: -71 [ 386.557959][ T4240] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 386.570654][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.581341][ T4240] usb 5-1: config 0 descriptor?? [ 386.599144][ T4240] usb 5-1: can't set config #0, error -71 [ 386.616477][ T4240] usb 5-1: USB disconnect, device number 11 [ 387.868034][ T7370] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 390.174285][ T7384] loop3: detected capacity change from 0 to 65 [ 390.427426][ T7384] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 390.859100][ T4460] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 391.109142][ T4460] usb 5-1: Using ep0 maxpacket: 8 [ 391.264157][ T7377] loop2: detected capacity change from 0 to 32768 [ 391.493770][ T7377] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 392.479301][ T4460] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 392.498823][ T4460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.511191][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 392.580270][ T4460] usb 5-1: Product: syz [ 392.585057][ T4460] usb 5-1: Manufacturer: syz [ 392.590057][ T4460] usb 5-1: SerialNumber: syz [ 392.599690][ T4460] usb 5-1: config 0 descriptor?? [ 392.676693][ T4460] gspca_main: se401-2.14.0 probing 047d:5003 [ 393.139339][ T4460] gspca_se401: Wrong descriptor type [ 393.348476][ T4240] usb 5-1: USB disconnect, device number 12 [ 393.495380][ T7417] loop2: detected capacity change from 0 to 8 [ 393.735872][ T7405] loop3: detected capacity change from 0 to 32768 [ 394.109769][ T7405] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 394.369263][ T25] audit: type=1800 audit(1751968490.238:4): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.702" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 395.324030][ T7442] loop4: detected capacity change from 0 to 65 [ 395.377071][ T7442] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 396.151456][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 397.210802][ T7444] loop4: detected capacity change from 0 to 32768 [ 397.282728][ T7444] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.709 (7444) [ 397.313204][ T7444] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 397.343135][ T7444] BTRFS info (device loop4): enabling auto defrag [ 397.365648][ T7444] BTRFS info (device loop4): doing ref verification [ 397.391134][ T7444] BTRFS info (device loop4): max_inline at 0 [ 397.427660][ T7444] BTRFS info (device loop4): force clearing of disk cache [ 397.447931][ T7444] BTRFS info (device loop4): turning on sync discard [ 397.465658][ T7444] BTRFS info (device loop4): disabling free space tree [ 397.478923][ T7444] BTRFS info (device loop4): has skinny extents [ 397.900166][ T7444] BTRFS info (device loop4): enabling ssd optimizations [ 397.956183][ T7444] BTRFS info (device loop4): clearing free space tree [ 398.027281][ T7444] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 398.114765][ T7444] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 398.419408][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061a70400: rx timeout, send abort [ 398.927761][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061a70400: abort rx timeout. Force session deactivation [ 398.937207][ T7477] loop2: detected capacity change from 0 to 8 [ 400.066221][ T4404] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (4404) [ 402.511925][ T25] audit: type=1800 audit(1751968498.588:5): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.712" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 410.448259][ T7554] loop1: detected capacity change from 0 to 8 [ 410.817526][ T25] audit: type=1800 audit(1751968506.888:6): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.731" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 412.889203][ T7577] loop4: detected capacity change from 0 to 8 [ 417.445030][ T7604] loop1: detected capacity change from 0 to 8 [ 418.218707][ T7612] netlink: 'syz.3.746': attribute type 10 has an invalid length. [ 418.272414][ T7610] ================================================================== [ 418.280885][ T7610] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550 [ 418.288117][ T7610] Read of size 1 at addr ffff888061f0a030 by task syz.5.745/7610 [ 418.295853][ T7610] [ 418.298183][ T7610] CPU: 0 PID: 7610 Comm: syz.5.745 Not tainted 5.15.186-syzkaller #0 [ 418.306254][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.316336][ T7610] Call Trace: [ 418.319627][ T7610] [ 418.322559][ T7610] dump_stack_lvl+0x168/0x230 [ 418.327258][ T7610] ? show_regs_print_info+0x20/0x20 [ 418.332481][ T7610] ? load_image+0x3b0/0x3b0 [ 418.336996][ T7610] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 418.342378][ T7610] ? __local_bh_disable_ip+0xfb/0x190 [ 418.347758][ T7610] print_address_description+0x60/0x2d0 [ 418.353312][ T7610] ? rose_get_neigh+0x17e/0x550 [ 418.358169][ T7610] kasan_report+0xdf/0x130 [ 418.362596][ T7610] ? rose_get_neigh+0x17e/0x550 [ 418.367457][ T7610] rose_get_neigh+0x17e/0x550 [ 418.372149][ T7610] rose_connect+0x412/0x1370 [ 418.376753][ T7610] ? aa_sk_perm+0x7b4/0x8f0 [ 418.381262][ T7610] ? rose_bind+0xa00/0xa00 [ 418.385683][ T7610] ? aa_af_perm+0x1c0/0x2b0 [ 418.390191][ T7610] ? tomoyo_socket_connect_permission+0x195/0x280 [ 418.396623][ T7610] ? bpf_lsm_socket_connect+0x5/0x10 [ 418.401912][ T7610] ? security_socket_connect+0x7c/0xa0 [ 418.407379][ T7610] ? rose_bind+0xa00/0xa00 [ 418.411812][ T7610] __sys_connect+0x389/0x410 [ 418.416425][ T7610] ? __sys_connect_file+0x170/0x170 [ 418.421654][ T7610] ? vtime_user_exit+0x2dc/0x400 [ 418.426614][ T7610] __x64_sys_connect+0x76/0x80 [ 418.431403][ T7610] do_syscall_64+0x4c/0xa0 [ 418.435829][ T7610] ? clear_bhb_loop+0x30/0x80 [ 418.440511][ T7610] ? clear_bhb_loop+0x30/0x80 [ 418.445197][ T7610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.451112][ T7610] RIP: 0033:0x7fc1eb146929 [ 418.455545][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.475166][ T7610] RSP: 002b:00007fc1e8fae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 418.483612][ T7610] RAX: ffffffffffffffda RBX: 00007fc1eb36dfa0 RCX: 00007fc1eb146929 [ 418.491592][ T7610] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d [ 418.499569][ T7610] RBP: 00007fc1eb1c8b39 R08: 0000000000000000 R09: 0000000000000000 [ 418.507547][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.515528][ T7610] R13: 0000000000000000 R14: 00007fc1eb36dfa0 R15: 00007ffeebeb2ef8 [ 418.523530][ T7610] [ 418.526557][ T7610] [ 418.528876][ T7610] Allocated by task 4370: [ 418.533204][ T7610] __kasan_kmalloc+0xb5/0xf0 [ 418.537811][ T7610] rose_add_node+0x227/0xdb0 [ 418.542420][ T7610] rose_rt_ioctl+0x9db/0xe20 [ 418.547018][ T7610] rose_ioctl+0x27a/0x790 [ 418.551353][ T7610] sock_do_ioctl+0xd3/0x2f0 [ 418.555859][ T7610] sock_ioctl+0x4ed/0x6e0 [ 418.560194][ T7610] __se_sys_ioctl+0xfa/0x170 [ 418.564786][ T7610] do_syscall_64+0x4c/0xa0 [ 418.569209][ T7610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.575106][ T7610] [ 418.577429][ T7610] Freed by task 7610: [ 418.581405][ T7610] kasan_set_track+0x4b/0x70 [ 418.586004][ T7610] kasan_set_free_info+0x1f/0x40 [ 418.590943][ T7610] ____kasan_slab_free+0xd5/0x110 [ 418.595972][ T7610] slab_free_freelist_hook+0xea/0x170 [ 418.601345][ T7610] kfree+0xef/0x2a0 [ 418.605154][ T7610] rose_rt_device_down+0x3e5/0x430 [ 418.610266][ T7610] rose_device_event+0x5ec/0x680 [ 418.615209][ T7610] raw_notifier_call_chain+0xcb/0x160 [ 418.620585][ T7610] __dev_notify_flags+0x178/0x2d0 [ 418.625615][ T7610] dev_change_flags+0xe3/0x1a0 [ 418.630378][ T7610] dev_ifsioc+0x147/0xe70 [ 418.634711][ T7610] dev_ioctl+0x55f/0xe50 [ 418.638952][ T7610] sock_do_ioctl+0x222/0x2f0 [ 418.643540][ T7610] sock_ioctl+0x4ed/0x6e0 [ 418.647876][ T7610] __se_sys_ioctl+0xfa/0x170 [ 418.652462][ T7610] do_syscall_64+0x4c/0xa0 [ 418.656875][ T7610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.662769][ T7610] [ 418.665087][ T7610] The buggy address belongs to the object at ffff888061f0a000 [ 418.665087][ T7610] which belongs to the cache kmalloc-512 of size 512 [ 418.679138][ T7610] The buggy address is located 48 bytes inside of [ 418.679138][ T7610] 512-byte region [ffff888061f0a000, ffff888061f0a200) [ 418.692330][ T7610] The buggy address belongs to the page: [ 418.697961][ T7610] page:ffffea000187c200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888061f09400 pfn:0x61f08 [ 418.709419][ T7610] head:ffffea000187c200 order:2 compound_mapcount:0 compound_pincount:0 [ 418.717752][ T7610] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 418.725760][ T7610] raw: 00fff00000010200 ffffea00017bdc08 ffffea0000781b08 ffff888016841c80 [ 418.734358][ T7610] raw: ffff888061f09400 0000000000100005 00000001ffffffff 0000000000000000 [ 418.742947][ T7610] page dumped because: kasan: bad access detected [ 418.749373][ T7610] page_owner tracks the page as allocated [ 418.755086][ T7610] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4191, ts 53111407107, free_ts 11531204745 [ 418.773585][ T7610] get_page_from_freelist+0x1b77/0x1c60 [ 418.779145][ T7610] __alloc_pages+0x1e1/0x470 [ 418.783750][ T7610] new_slab+0xc0/0x4b0 [ 418.787839][ T7610] ___slab_alloc+0x81e/0xdf0 [ 418.792444][ T7610] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 418.798266][ T7610] __alloc_skb+0x22c/0x750 [ 418.802694][ T7610] __neigh_notify+0x142/0x2e0 [ 418.807376][ T7610] __neigh_update+0xd1a/0x1ff0 [ 418.812122][ T7610] neigh_add+0x985/0xcb0 [ 418.816344][ T7610] rtnetlink_rcv_msg+0x9b9/0xe60 [ 418.821268][ T7610] netlink_rcv_skb+0x1e0/0x430 [ 418.826027][ T7610] netlink_unicast+0x77c/0x920 [ 418.830790][ T7610] netlink_sendmsg+0x8ab/0xbc0 [ 418.835569][ T7610] __sys_sendto+0x423/0x580 [ 418.840069][ T7610] __x64_sys_sendto+0xda/0xf0 [ 418.844726][ T7610] do_syscall_64+0x4c/0xa0 [ 418.849125][ T7610] page last free stack trace: [ 418.853774][ T7610] free_unref_page_prepare+0x637/0x6c0 [ 418.859224][ T7610] free_unref_page+0x94/0x280 [ 418.863882][ T7610] free_contig_range+0x96/0xf0 [ 418.868628][ T7610] destroy_args+0xef/0x8b0 [ 418.873024][ T7610] debug_vm_pgtable+0x318/0x370 [ 418.877855][ T7610] do_one_initcall+0x1ee/0x680 [ 418.882689][ T7610] do_initcall_level+0x137/0x1f0 [ 418.887612][ T7610] do_initcalls+0x4b/0x90 [ 418.891930][ T7610] kernel_init_freeable+0x3ce/0x560 [ 418.897119][ T7610] kernel_init+0x19/0x1b0 [ 418.901430][ T7610] ret_from_fork+0x1f/0x30 [ 418.905830][ T7610] [ 418.908135][ T7610] Memory state around the buggy address: [ 418.913743][ T7610] ffff888061f09f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 418.921812][ T7610] ffff888061f09f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 418.929860][ T7610] >ffff888061f0a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.937913][ T7610] ^ [ 418.943538][ T7610] ffff888061f0a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.951576][ T7610] ffff888061f0a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.959614][ T7610] ================================================================== [ 418.967657][ T7610] Disabling lock debugging due to kernel taint [ 418.973893][ T7610] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 418.981094][ T7610] CPU: 0 PID: 7610 Comm: syz.5.745 Tainted: G B 5.15.186-syzkaller #0 [ 418.990548][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.000607][ T7610] Call Trace: [ 419.003894][ T7610] [ 419.006820][ T7610] dump_stack_lvl+0x168/0x230 [ 419.011504][ T7610] ? show_regs_print_info+0x20/0x20 [ 419.016704][ T7610] ? load_image+0x3b0/0x3b0 [ 419.021212][ T7610] panic+0x2c9/0x7f0 [ 419.025108][ T7610] ? bpf_jit_dump+0xd0/0xd0 [ 419.029611][ T7610] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 419.035513][ T7610] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 419.041409][ T7610] ? _raw_spin_unlock+0x40/0x40 [ 419.046254][ T7610] ? rose_get_neigh+0x17e/0x550 [ 419.051100][ T7610] check_panic_on_warn+0x80/0xa0 [ 419.056032][ T7610] ? rose_get_neigh+0x17e/0x550 [ 419.060877][ T7610] end_report+0x6d/0xf0 [ 419.065019][ T7610] kasan_report+0x102/0x130 [ 419.069508][ T7610] ? rose_get_neigh+0x17e/0x550 [ 419.074344][ T7610] rose_get_neigh+0x17e/0x550 [ 419.079008][ T7610] rose_connect+0x412/0x1370 [ 419.083591][ T7610] ? aa_sk_perm+0x7b4/0x8f0 [ 419.088080][ T7610] ? rose_bind+0xa00/0xa00 [ 419.092480][ T7610] ? aa_af_perm+0x1c0/0x2b0 [ 419.096966][ T7610] ? tomoyo_socket_connect_permission+0x195/0x280 [ 419.103368][ T7610] ? bpf_lsm_socket_connect+0x5/0x10 [ 419.108642][ T7610] ? security_socket_connect+0x7c/0xa0 [ 419.114082][ T7610] ? rose_bind+0xa00/0xa00 [ 419.118486][ T7610] __sys_connect+0x389/0x410 [ 419.123064][ T7610] ? __sys_connect_file+0x170/0x170 [ 419.128248][ T7610] ? vtime_user_exit+0x2dc/0x400 [ 419.133171][ T7610] __x64_sys_connect+0x76/0x80 [ 419.137922][ T7610] do_syscall_64+0x4c/0xa0 [ 419.142325][ T7610] ? clear_bhb_loop+0x30/0x80 [ 419.146990][ T7610] ? clear_bhb_loop+0x30/0x80 [ 419.151652][ T7610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 419.157624][ T7610] RIP: 0033:0x7fc1eb146929 [ 419.162024][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.181611][ T7610] RSP: 002b:00007fc1e8fae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 419.190008][ T7610] RAX: ffffffffffffffda RBX: 00007fc1eb36dfa0 RCX: 00007fc1eb146929 [ 419.197968][ T7610] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d [ 419.205925][ T7610] RBP: 00007fc1eb1c8b39 R08: 0000000000000000 R09: 0000000000000000 [ 419.213879][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.221834][ T7610] R13: 0000000000000000 R14: 00007fc1eb36dfa0 R15: 00007ffeebeb2ef8 [ 419.229795][ T7610] [ 419.233025][ T7610] Kernel Offset: disabled [ 419.237350][ T7610] Rebooting in 86400 seconds..