last executing test programs: 2m5.840217782s ago: executing program 2 (id=283): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m5.686777844s ago: executing program 2 (id=285): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m5.495496937s ago: executing program 2 (id=289): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket(0x10, 0x400000000080803, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, 0x0, 0x0) landlock_restrict_self(r2, 0x0) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x3b0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'wg2\x00', &(0x7f0000000300)=@ethtool_ringparam={0x11, 0x4, 0x46, 0xfffffffe, 0x3, 0x1, 0x20000, 0x0, 0xf}}) 2m1.137858091s ago: executing program 2 (id=294): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) mknodat$loop(r4, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) 1m54.183784582s ago: executing program 2 (id=319): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x4048884) 1m53.816068387s ago: executing program 2 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket(0x6, 0x2, 0xfffffffe) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000140)=0x89c, 0x4) readv(r7, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/171, 0xab}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x301c40a, &(0x7f0000000740)={[{@rodir}, {@shortname_winnt}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}]}, 0x6, 0x2d5, &(0x7f0000000240)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 1m38.332450364s ago: executing program 32 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket(0x6, 0x2, 0xfffffffe) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000140)=0x89c, 0x4) readv(r7, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/171, 0xab}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x301c40a, &(0x7f0000000740)={[{@rodir}, {@shortname_winnt}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}]}, 0x6, 0x2d5, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 7.104799066s ago: executing program 5 (id=635): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 7.032952937s ago: executing program 1 (id=637): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x490, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, r1, 0x0) 6.542887804s ago: executing program 1 (id=643): sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x24000050) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 5.891067114s ago: executing program 3 (id=644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000500)=0xb0000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000180)}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000002c0)={{@host, 0x7}, 0x1, 0x0, 0x404}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000280)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 5.292307713s ago: executing program 0 (id=645): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x3, 0x3, 0x28, '\x00', 0x4}) 5.288138633s ago: executing program 4 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x114, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0xf8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf4, 0x2, "58bacf852d6cd8a0a67092951106db5fd4dd54d1a8ff25aaeb13427f8c41e0abe5a84337a19781305b9c53aab392e5318112b819a8c9ab7ab877d3f04141fb27934282376cfb3ce4daed06804de7b8fcd2d6f1c845dd2c6369f01684ad34b7935bd453d5dafc1b3e7f1136e3a64c7a1d210fca7de358cacb72c8a9eee543c39ed2e6a2f0e5b3bb98f042c4271c73ed0324262834a9f060a7cb6b01385dc22e30e45d1f610e68961fea21fd87903356797adecd523ba5bf21a72a030d296516e6e7aaccbf19e64d87aa8c18489eb244b4161fb996c867ed53be235232f8fc4d98cc385bdd99973d126dd9c87bff321d06"}]}]]}, 0x114}}, 0x0) 4.892991629s ago: executing program 3 (id=647): openat$sysfs(0xffffffffffffff9c, 0x0, 0x200, 0x3d) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000180), 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.708081721s ago: executing program 1 (id=648): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r0, &(0x7f0000000440)="2086f70fd42e16", 0x7) close(r0) 3.813613534s ago: executing program 1 (id=649): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f00007b4000/0x4000)=nil, 0x4000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = eventfd2(0x4, 0x80000) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3810f16a, 0x0) write$eventfd(r4, &(0x7f0000000200)=0x5, 0xfffffeb7) 3.812132364s ago: executing program 4 (id=650): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = eventfd2(0x4, 0x80000) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3810f16a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000000000072000000000000000f89"], 0x72}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc004ae0a, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) write$eventfd(r3, &(0x7f0000000200)=0x5, 0xfffffeb7) 3.783294885s ago: executing program 3 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9859, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) connect$netrom(r2, &(0x7f0000000300)={{0x6, @default}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_ifreq(r1, 0x8990, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xc41, 0x0) sendto$inet6(r6, &(0x7f0000000380)="47487f524345eae0e6ddad1449d22b5c08b67a7ce40676c0bb52d00fd4f3058e77dd08c50d02ca73843135c628639c8c73da505f18ba73e851ad4a650deaf6a2cf0c28253067afd521d3cc268e94031ec139b417c8a8e615c0b41daa1f2a0b285d01ed53959ced70012e06b40231e40ffe40bbed722a23e5ed79877460fa0d3a919d0ca6fff30cbc3f58770c295f9c46d4d128fe688df06493da823860e09de0848adc42cdea", 0xa6, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x18, @local, 0x7}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x1, 0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.608446227s ago: executing program 0 (id=652): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0x80086603, 0x110c230000) 3.608262327s ago: executing program 5 (id=653): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x490, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, r1, 0x0) 3.492849089s ago: executing program 4 (id=654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1200800, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x1, 0x186, &(0x7f0000000c40)="$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") open(0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 3.356256851s ago: executing program 5 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 2.800019949s ago: executing program 3 (id=656): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000380)=ANY=[@ANYBLOB='nonumtail=0,uni_xlate=1,iocharset=chortname=win95,codepage=949,rodir,showexec,shortname=mixed,utf8=1,check=strict,iocharset=iso8859-7,utf8=0,\x00\x00\x00\x00\x00\x00\x00'], 0x25, 0x34c, &(0x7f0000001740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 2.412349475s ago: executing program 5 (id=657): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000500)=0xb0000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000180)}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000002c0)={{@host, 0x7}, 0x1, 0x0, 0x404}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000280)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 2.283761316s ago: executing program 0 (id=658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 2.283154696s ago: executing program 4 (id=659): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r0, &(0x7f0000000440)="2086f70fd42e16", 0x7) close(r0) 2.244472637s ago: executing program 0 (id=660): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0xffff1000, 0x20, 0x40, 0x2, 0x0, [{0x80, 0x20, 0x9, '\x00', 0xb}, {0x7f, 0x8, 0x5, '\x00', 0xbb}, {0x9, 0x5, 0x7, '\x00', 0x7}, {0x1, 0x0, 0xa, '\x00', 0x3}, {0xa, 0x0, 0x5, '\x00', 0x7f}, {0x81, 0x6, 0x40, '\x00', 0x65}, {0x4, 0x81, 0x4, '\x00', 0x10}, {0xf9, 0x9, 0x6, '\x00', 0x4}, {0x43, 0xb7, 0x7, '\x00', 0x7}, {0x8, 0x7b, 0x70, '\x00', 0x5}, {0x48, 0x8f, 0xf4, '\x00', 0x6}, {0x0, 0x6, 0xd, '\x00', 0xf4}, {0x4, 0xfb, 0x9, '\x00', 0x2}, {0xc8, 0xc0, 0x7, '\x00', 0x6}, {0x8, 0x2, 0x6, '\x00', 0x3a}, {0x1, 0x0, 0x7f, '\x00', 0x1f}, {0x6, 0x0, 0x5, '\x00', 0xf}, {0x8, 0x8, 0x10, '\x00', 0x5}, {0x0, 0xf1, 0x3c, '\x00', 0x86}, {0xf, 0x50, 0x5, '\x00', 0x2}, {0x2, 0x1, 0x8, '\x00', 0x8}, {0x7f, 0x4, 0x6, '\x00', 0x4}, {0x90, 0x49, 0x6, '\x00', 0xfc}, {0x7, 0x0, 0x7, '\x00', 0x3}]}}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000000000000080009"]) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r2, &(0x7f00000001c0), 0xe80) 1.909661592s ago: executing program 1 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x114, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0xf8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf4, 0x2, "58bacf852d6cd8a0a67092951106db5fd4dd54d1a8ff25aaeb13427f8c41e0abe5a84337a19781305b9c53aab392e5318112b819a8c9ab7ab877d3f04141fb27934282376cfb3ce4daed06804de7b8fcd2d6f1c845dd2c6369f01684ad34b7935bd453d5dafc1b3e7f1136e3a64c7a1d210fca7de358cacb72c8a9eee543c39ed2e6a2f0e5b3bb98f042c4271c73ed0324262834a9f060a7cb6b01385dc22e30e45d1f610e68961fea21fd87903356797adecd523ba5bf21a72a030d296516e6e7aaccbf19e64d87aa8c18489eb244b4161fb996c867ed53be235232f8fc4d98cc385bdd99973d126dd9c87bff321d06"}]}]]}, 0x114}}, 0x0) 1.752431294s ago: executing program 4 (id=662): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000500)=0xb0000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.36546504s ago: executing program 0 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000840)=[@code={0x1, 0x5e, {"b9800000c00f3235004000000f300f222566baf80cb82f4a1880ef66bafc0cecc4e23d3b8281143a3d420f07b8010000000f01c1f20f22e666b853008ed8c4e3d97d9200000100ce0fc76ca300"}}], 0x5e}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r4 = eventfd2(0x3, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000002c0)={0x7, 0x2, 0x4, r4, 0x4}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000c463"], 0x2de}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x8000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x1, 0x3, 0x87, 0x0, 0x5, 0x0, 0xbdb], 0xf000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.36286463s ago: executing program 5 (id=664): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000009400000000000000b9800000c00f3235001000000f30263e4b0f01c9"], 0x94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.207152902s ago: executing program 3 (id=665): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, r2, 0x0) 413.004374ms ago: executing program 1 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9859, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) connect$netrom(r2, &(0x7f0000000300)={{0x6, @default}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_ifreq(r1, 0x8990, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xc41, 0x0) sendto$inet6(r6, &(0x7f0000000380)="47487f524345eae0e6ddad1449d22b5c08b67a7ce40676c0bb52d00fd4f3058e77dd08c50d02ca73843135c628639c8c73da505f18ba73e851ad4a650deaf6a2cf0c28253067afd521d3cc268e94031ec139b417c8a8e615c0b41daa1f2a0b285d01ed53959ced70012e06b40231e40ffe40bbed722a23e5ed79877460fa0d3a919d0ca6fff30cbc3f58770c295f9c46d4d128fe688df06493da823860e09de0848adc42cdea", 0xa6, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x18, @local, 0x7}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x1, 0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 277.813306ms ago: executing program 3 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 277.001046ms ago: executing program 4 (id=668): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xfc4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xf70, 0x2, [@TCA_ROUTE4_ACT={0xf6c, 0x6, [@m_ct={0xe18, 0xa, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}]}, {0xdd9, 0x6, "02b57f031a48371d0d95626908ee06e59a74e5346fd6d0450c2829dfd0d3a86b63667dc3ea64c74d904b322fd3056cf5870f9408e82530db15f7c22a85c4bcce78fede1c2a843d8589ecb2e5f28679665adefd637863095cbd4e8c754d0073bad37e8b61e45316d38204faee0f2cc12e9d6c1e515ab90063e87c7b0a2029b2cdf049a11a7ef160937ecf1d8a3eda456fc0535ab33b096cbdf53f96f56f58f85e3bdba3ad45cf6437138d35680144885b97c7b4bbd1fe81f4c14dca8561228c8ebe2c805772b8b94a8e264f42c321d964e6093fd4f9630d158bc8698c59d787d64f60464b471523ac804d8e19fd6d3936db7bbfae5837951966016325e406545366d40717dfeeb20b54a4cf483dcc319750478044019cc6e6f0d29e9af3516898532a9b509f97dedb2bdc3451d8b3af83d3188d45d7e2c9e898ae5c3cf82c457b301408e97b13d4f57985d512a0c908d8891e59e012d55d34f5366436166fa5f1405e9f8eda8e39dcb580925665fadff6328001e0c367464d84edb0fde37c1ef5d4105c8758056fdc405648b676e2744788f2e7e1054405e0ef68dc900d1d3c1beab00d1ff577b4d2cd20610e7b9aaffcf81c8a19169cca0738d3c641dd8bf579924b3971897ed6d2ee7467e2c30278d3a28211c95b59d6a17ce287feb5359ffb818f9d230d7a86e58891025cbee76ca146f08ceb0c8d9b2e2c6b6b5671e707e5a54efcdd393197da90c8a7964c4e7c9451f3b278dda61713352480db6dca88bc3fe13123386c19388b9738c3d7881a6b945eb7dae95c598384cc8fde8b7169c594799d6c74e0b3c0ff681fc146980968e0624c4e18b76afd091d42c7c922500a8e0922742949f36ac958a06c241c55406526920f65aad34504df5f632a0d65425cb044ec458ab4d699b61c83035071a605691945ac89e084d30281ce7b33b0ed46660e126643ca8fcda14dce17868396f9e8138682ffd472205a96ae0eee55837b837d6f6d2d704d0c32c1d66d9fba93e6b09d942b89e2be4f6a7e870c75d0681d439d90babced54709a6dc5d9fba55f4fdc42d92c79377c251f8771b4b746a77de99ed1ba70c4aebc61d36c9bf9439fad5a09cedcbb2559275b4d09b9d9dc3ac1d14b243196f0a63a856644fc472e6ec57eb52a874581a401f423929b5e5f69cbdaa9feef0c09dad013e58c4cc4a745405327f5a309fa19c2628e03c79bec6f3ce87a2c3dcbc2bfa1d8657f94fbbaa1520f4e2310f030e33d68f293bd8db4a86b017632a64386ff2138303817d991385beaf61cce0e734c84f6f214b048cba2ba0d529459817e5a0aa8142198830c3a0ba04721e7c377c0c531d7633ebc77c3f59976ed15bcdb89f2b3b1fba8ede487047c6440d6b37bf43abc30a5528c948fa34338f5999a6522159821f46981bd585a0525a2d4c09cddbc4c2b7ae215178f0f5dfc3850e14b059d862d020c64b43ec30802b46e8578fd8182a3b1f89173d5eae6cc924cb28d14cd8e3e110b31ad7ebcd39aa67e07386d88c1831c7a9b42b0fe63a2c2a50e2b0a360351e2790700a55a58c6b58c8b3b35453b6a577354aa4d933c3161273be48ae16af9db5243303d63ee6157d254dff8e322b3d34a1cb7f982833386902a29bb7b762bca1cd8f8490623db608effc70bcbb017bca9819e25b2f8566bfc81cf72b5a3b739adbab0ac05075c6b4bc47e87774c70de43e88e9a442e14716bda2e4118669efc7f94fddde987a8dc98e801e0685217db080e3040384868a9ca8b8915aa574033f5c43299f8bd88e57e791e382596679c281a6e03bf69178be59e4f697e0a1b420165ac107722e47f3724536c5f33343bf061e82fc240776fe2ded2843042591151b2245986887af71c2e71dd7e4b164a86dc9acac25a6355636c5ba807f5865d181ffb928d413ccf3bdc8a5029bd75059abfae7e8ef82a80265139f79719a80550b6f358a89c0a0d1c4c940ce52f73b3b52e7ef20fae1392eec3fb197d4a66b01a798b7c7838aebacc12ce2ab09f08c6287b42c423b022cb6c97d9971eb13d648151c6df79d9eefa75f69a92d444a77fd49a2aec947f3399360e83205fddcc04d9fe89e0aa925225629bbe6ba90bf95c89343c69df60b94f201ee72318998b2eb49a478b2a2f6437b83dd80d0b9d6cf17cc166eca74b51e267fdd328e13ab8ff2034557aa3068bff4e5d5e159b566d5aff7929a1a9ee10f93b13ae4620102edd29d4e9ecac26814e225dd30d4161e8ac9de541c89dbe7d139182518676a04080cb4435f4d0e8fc3715ff4918f5336f69722faf0af089798db087e127d656c0816a4efe728691ad98069e4fba7a3acba096c38cdd3e742f57c0aa60619b23417fe462ad3bc5a9559199263183da0167e14c5c2a89e01bfb53c9f81c052d018282ce29209c1ce965ae56a7cd1fd38808b0b82b9f591caa3b153659817cfcce1ff9c305d88ddbf5d606ee1507664213b0162190f80c63de19e24f8b5739e1d4d51534827d438cbbc0484ee72ab3d4305534af53bff984819a61b887af8db1c2d61aab2d6d6cf403b69da6e5844b755119fce8aecf99a8b878f6da7d9e777b3a52edeefc56132951caa9e23df3169937ec37ec5915213415cf4bd9ab727e658195dd70cf7f3a8525a3fc8db0ba771cdd3d699b3a48f45ee773e2d66569c822107570cf1f40272dd409b1b204f4415b0b91b0e3527ec0b2fe008f77d9237ffdd34c1c52bb1d1265b96b4c863187dfadb16ec75b7f2d709528ffb8fef5cf3978615f800047efb7ca1dea3630534845c3a2071c427ca7af95466a8c00909f64397b8e5967ab8347f627b75761cb6567ac6f81d42841f7e73cee88c4cae92f84b1a9c3ca90ad0d70441199e5f41db508d9ea9bfe917746a1f3ae872de0287f48651194d686753338d3727c0f57531984d15942abb4d51a02eb289dedab2906e4294156f2fa718e7a2bfaddda9298e847827496dc222b663674e3a1ebc8ca610cb02465a1d133e44050994d8889b1b97e1bd272119fd7bc2685d7080afa61d99cb2d5dc5d9df0b4ecfbe9e7c240347a051e906b74e9f9c0e9153dce44c5604a145289e9ba85cc3f2be6334c23ed4ae664e0e680e9029483bbd0e3cdfdced8b7fd7fee31390c9073fd58926015b8470dc46ce8cbd1b0b051df4144aa9bbe127b1f9b8324726a40ee2e4042de702b4f4b1a9f041b251df389c2bb267f7801c22d008bedef6637d67dbc91918021ebfb6d0a86188a0f27ba36ee8b3f6562dd1023e30a5b6c6927b113628b595dded4ad4852d16dc24c0226cf4fe20e88b268d9d01653f15205b08d62f6f8c22f8b03b28f49f7d9587783f27df25844dd2c65e9d2ca1c578acb5f9f6ef2f1342befd2f27d353c065914f5912d68c1ebfa050f393f6b40f1ed1d3f0c43b0293c74aef07eac4eedcbd1c40b6d895da473dfc13fdeabf53f717d5971400ce93be0e6b082b977e34b3ec1d5149bee7340b67f25cf60c84ce575c3f0b881ce08e174e05aad8950d4dabc57cd745485d1e5cc74367a220f30d5e1599af0f0d77fb44af65da0b253d62b2d3407c4e800a12c41d255494ece48eeeb216ee03b06ef7c277206a989a1dab2f9b54ae5644612e5904a7e17ba34e66be5998b571671010b767695b52655e6861177aee6cf60a8a8f5e55e6e741281ce5fc729f8866dc5779a66e97ece407c85d4c67b46a7749ee48087f975323741f2bba4e9249163c203f12ad14a1bf2abb4b7551b42a54161a178620c18523be247d1dddf8a28ca00db3efa525929bd11c4839da2f2590f2fd9c62a20d7f763d59044becb369ae7b558814e715a28262e6ad64d9f84d87781ccdccbaf7ae3c52708b1df9309f8db3f0c8d3e08d789dee41f588763c775a754dfe97fdabc862503a9b719f4bd294081bacc8fb46bf5272dc040564393b1d9ecbc828ebbbdebc6a56014e8bad40313e7d57864bfa030b3af2f6ed4230363f6d6d2492541de618620c8e433c1db59629fa545a503c6257ea1cf37b7493ba8f6b346b61135a83145f169aa84e2efd5fda0eb876610adb98eb286ea85e41d814929ecf61367acabcfcb69743bfd51c364053065a272f5e23cbe5a7dcacba35b7fee02695307e16dfefc0720207dcd5607ccbaff5737ba60a50c500a1de0055978ad0f63f1622b293f100217884e2f554f07f108522ed367405bafe8bb42beb48c40fa35adb45b2cf24285f5a2ac3ff3cb69b6f8cc9ea1f819022e61c6d42536619d2a07934e4216f41fd50c76c6700b26d1915497705968d512ce7b7c25624787e4f59a8ecf9317ea679e3e99c884a09a14cda333117534cf12e422eafc55c277549d559e331f697d9824f35e8da4d26cd74bb3a4d2ca2f3661dd1fb1a715612b486c1a7c2025d555538228d1a8391228aafd3c13b1e7fb07711e9eb248cbf0762ae2bddcaf5f7c027c9da758651f2370c5505efcbcf14d8581c41ebf216298d649967be3b92d2ac8a8a4f30921e2155d8a6578fe092e3753850e7fcf064c2dffb0c2a05dc5abcde2736c17331666731fef48754d6f316ba5c5e5c993cef5a3f434877801c8600aa8331653d1e0d3217790312407f7d04ed8a7f9db10e55281546ce21804e4f0dcdb60d30b4150fdef363cdb2459ed770027b9a273ae681f7f3aff98bc746e67bd3e65578d46b2c04afcdf65430ce8f7b945553eecdd1ea0fb2167f19952aef43a5cd7c3c4b5f3f5310284e2dc5e75bcfd4d9cf1ac5626034c274cc0ca8e6059ef32e018f7146ed055e2e515fbcee8154d031694d96c655912ffe42d8cf8d19caea168850758864cdfd74ca2467c7de0122c31ea72cb5cc916fa430f75a0db1e776e4e66f8df9b7ac4377c8f3b7eaadfabcb97df5b3c44cad8c8a34177aea73a7428bd2f9261bfdb4aceea3728b00b7e3a7f685df1fc5197b09c0be65bddf91a00360f3a21c6e4925aa9259929ebf7aa9dc902b0e11e753c520f79f9842ce865ce4adfc81959dd3b5a4d0f6c394fbf45"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x7c, 0x15, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x3, 0x8, 0xc, 0x81}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xd4, 0x1a, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xe422, 0x4, 0x5, 0x7}, 0xe}}]}, {0x81, 0x6, "55abe99dbd7db41da2454ebdacd973131ae8a9b60686313b2d40c0322a7e0de66b6116a5ba3aee332d5fba451b20ae2103facc4974d375f8953d3a0de7bb92dab11078bd0bc5abb503d9b226f2448f7ef9a7d9592c1cb375cabe8b41b2f9372013210bb4ace41322a8f24e566b26c732e5ddb321bc94a64beb6e040e62"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xfc4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 216.339427ms ago: executing program 5 (id=669): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_debug_messages', 0x21a02, 0x62) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000078009106000000000000004a0775"], 0xfe33) sendfile(r3, r3, 0x0, 0x101) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x5) recvmmsg(r2, &(0x7f0000002200)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000001c00)=""/133, 0x85}, {&(0x7f0000000740)=""/212, 0xd4}, {&(0x7f0000001b00)=""/81, 0x51}], 0x4, &(0x7f0000001840)=""/255, 0xff}, 0xffff}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/48, 0x30}, {0x0}, {&(0x7f0000001940)=""/223, 0xdf}], 0x3}, 0x3ff}, {{&(0x7f0000001a80)=@pppol2tpv3in6, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e00)=""/137, 0x89}, 0x1}, {{&(0x7f0000001ec0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001f40)=""/71, 0x47}, {&(0x7f0000001fc0)=""/59, 0x3b}, {&(0x7f0000002000)=""/137, 0x89}], 0x3}, 0xcd}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002140)}], 0x1}, 0x8}], 0x5, 0x40, &(0x7f0000002340)) fdatasync(r2) prlimit64(0x0, 0x9, &(0x7f00000001c0)={0x200, 0x1}, &(0x7f0000000300)) write$uinput_user_dev(r3, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000002c0)) r5 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[3\xa9\xfd\xfa\xae\xd1m\x81\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\t\x00\x00\x00\x00\x00\x00\x00\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf88ZG\xf0\x00\x00\x00\x00\x00\x00\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00', 0x7) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3, 0x276, &(0x7f0000000640)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 0s ago: executing program 0 (id=670): socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f000052b000/0x4000)=nil, 0x4000}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) r4 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x3, 0x207}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r4], 0x1, 0x0, 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x66, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 50.564217][ T4159] cgroup: Unknown subsys name 'net' [ 50.693954][ T4159] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.866180][ T4159] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.121311][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 53.207200][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 53.231365][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 53.256611][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 53.313399][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.320721][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.329911][ T4171] device bridge_slave_0 entered promiscuous mode [ 53.342247][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.349489][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.357791][ T4171] device bridge_slave_1 entered promiscuous mode [ 53.425884][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.438807][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.445893][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.454329][ T4177] device bridge_slave_0 entered promiscuous mode [ 53.468597][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.487560][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.494637][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.502407][ T4177] device bridge_slave_1 entered promiscuous mode [ 53.529069][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.536387][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.546020][ T4170] device bridge_slave_0 entered promiscuous mode [ 53.578832][ T4171] team0: Port device team_slave_0 added [ 53.584660][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.592086][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.599788][ T4170] device bridge_slave_1 entered promiscuous mode [ 53.613517][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.620727][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.629218][ T4178] device bridge_slave_0 entered promiscuous mode [ 53.636253][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 53.647824][ T4171] team0: Port device team_slave_1 added [ 53.663351][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.672724][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.680053][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.687875][ T4178] device bridge_slave_1 entered promiscuous mode [ 53.714304][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.724621][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.752160][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.780401][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.787842][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.813938][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.843353][ T4177] team0: Port device team_slave_0 added [ 53.851439][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.863065][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.872954][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.880248][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.906691][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.932599][ T4177] team0: Port device team_slave_1 added [ 53.951235][ T4170] team0: Port device team_slave_0 added [ 53.978448][ T4170] team0: Port device team_slave_1 added [ 53.993326][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.000528][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.008789][ T4169] device bridge_slave_0 entered promiscuous mode [ 54.022913][ T4178] team0: Port device team_slave_0 added [ 54.041475][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.048752][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.056321][ T4169] device bridge_slave_1 entered promiscuous mode [ 54.063760][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.070908][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.097003][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.116669][ T4178] team0: Port device team_slave_1 added [ 54.130441][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.137560][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.164135][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.180580][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.188051][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.214012][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.233334][ T4171] device hsr_slave_0 entered promiscuous mode [ 54.240678][ T4171] device hsr_slave_1 entered promiscuous mode [ 54.247857][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.255598][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.281766][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.306360][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.326612][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.334069][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.361393][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.375513][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.385184][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.392423][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.418555][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.474790][ T4169] team0: Port device team_slave_0 added [ 54.495242][ T4177] device hsr_slave_0 entered promiscuous mode [ 54.501935][ T4177] device hsr_slave_1 entered promiscuous mode [ 54.509319][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.517059][ T4177] Cannot create hsr debugfs directory [ 54.530348][ T4169] team0: Port device team_slave_1 added [ 54.552859][ T4170] device hsr_slave_0 entered promiscuous mode [ 54.561719][ T4170] device hsr_slave_1 entered promiscuous mode [ 54.568209][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.575755][ T4170] Cannot create hsr debugfs directory [ 54.589985][ T4178] device hsr_slave_0 entered promiscuous mode [ 54.596963][ T4178] device hsr_slave_1 entered promiscuous mode [ 54.603551][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.611430][ T4178] Cannot create hsr debugfs directory [ 54.645381][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.652506][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.679087][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.720960][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.728349][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.754795][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.838704][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 54.846410][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 54.852768][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 54.862273][ T4169] device hsr_slave_0 entered promiscuous mode [ 54.869532][ T4169] device hsr_slave_1 entered promiscuous mode [ 54.875973][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.883900][ T4169] Cannot create hsr debugfs directory [ 54.907441][ T3973] Bluetooth: hci2: command 0x0409 tx timeout [ 54.907872][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 55.077406][ T4171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.092351][ T4171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.101322][ T4171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.112142][ T4171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.152030][ T4177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.173492][ T4177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.192528][ T4177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.215263][ T4177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.239374][ T4170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.249301][ T4170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.270332][ T4170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.284336][ T4170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.340102][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.351775][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.363881][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.372652][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.385493][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.454917][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.464421][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.478732][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.493189][ T4178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.502590][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.512178][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.521930][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.529253][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.538943][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.548688][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.556969][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.564045][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.573251][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.597371][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.606239][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.616755][ T4178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.626976][ T4178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.639810][ T4178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.654515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.664087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.674855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.720135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.730463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.739379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.748501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.756911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.765650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.789501][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.798071][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.811893][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.824181][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.846885][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.855282][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.873304][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.889645][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.901038][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.910155][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.925822][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.934305][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.958869][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.969798][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.978438][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.985459][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.993990][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.002969][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.011917][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.019056][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.027441][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.035866][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.046406][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.074217][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.090866][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.109464][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.120485][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.130049][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.138409][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.145440][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.153406][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.162217][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.171377][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.178487][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.186197][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.199046][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.206971][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.217167][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.228087][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.264260][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.275193][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.284573][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.296161][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.304962][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.314807][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.325265][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.333884][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.341110][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.355738][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.364749][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.373824][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.380918][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.389064][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.398028][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.406270][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.414536][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.422453][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.450688][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.463843][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.473252][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.483500][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.493735][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.503000][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.512017][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.519637][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.527022][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.535801][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.546150][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.555016][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.563780][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.572405][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.582320][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.611616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.625730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.640202][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.659912][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.674080][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.684236][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.693632][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.702254][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.716179][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.724741][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.764454][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.779079][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.794826][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.801979][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.811423][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.821091][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.837510][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.844703][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.853067][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.861509][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.870503][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.881538][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.911052][ T4208] Bluetooth: hci1: command 0x041b tx timeout [ 56.913157][ T4171] device veth0_vlan entered promiscuous mode [ 56.920530][ T4208] Bluetooth: hci0: command 0x041b tx timeout [ 56.939398][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.947892][ T4208] Bluetooth: hci3: command 0x041b tx timeout [ 56.953388][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.974315][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.984201][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.997754][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 57.004888][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 57.017136][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.026375][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.034750][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.043410][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.052618][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.060717][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.069606][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.082093][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.096105][ T4171] device veth1_vlan entered promiscuous mode [ 57.105887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.117201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.131761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.183885][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.192700][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.202368][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.210143][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.219880][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.228984][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.238073][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.252062][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.278416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.287125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.330422][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.343830][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.355844][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.365652][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.376533][ T4171] device veth0_macvtap entered promiscuous mode [ 57.390588][ T4170] device veth0_vlan entered promiscuous mode [ 57.403648][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.412813][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.421791][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.431924][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.443205][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.461029][ T4171] device veth1_macvtap entered promiscuous mode [ 57.495473][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.502902][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.513292][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.521300][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.532938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.541594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.551659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.559998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.576258][ T4169] device veth0_vlan entered promiscuous mode [ 57.598110][ T4170] device veth1_vlan entered promiscuous mode [ 57.610128][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.621776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.630470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.638197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.645567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.654425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.666772][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.676209][ T4169] device veth1_vlan entered promiscuous mode [ 57.690834][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.709235][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.720445][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.729517][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.744595][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.769515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.778245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.786087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.794474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.804014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.843121][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.853673][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.885919][ T4170] device veth0_macvtap entered promiscuous mode [ 57.905806][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.929807][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.938718][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.947049][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.956001][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.970215][ T4169] device veth0_macvtap entered promiscuous mode [ 57.983431][ T4177] device veth0_vlan entered promiscuous mode [ 57.998469][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.013861][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.023917][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.040383][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.052573][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.064386][ T4170] device veth1_macvtap entered promiscuous mode [ 58.092646][ T4169] device veth1_macvtap entered promiscuous mode [ 58.101762][ T4177] device veth1_vlan entered promiscuous mode [ 58.131312][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.141750][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.150972][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.159720][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.169888][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.192805][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.203891][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.215149][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.227063][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.238167][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.250394][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.266508][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.282041][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.296541][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.304904][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.313736][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.322656][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.332280][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.341011][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.350849][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.361032][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.374473][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.388280][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.397182][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.406216][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.450314][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.453563][ T4178] device veth0_vlan entered promiscuous mode [ 58.465271][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.476029][ T4177] device veth0_macvtap entered promiscuous mode [ 58.497030][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.511594][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.519703][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.530270][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.538971][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.546718][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.574371][ T4177] device veth1_macvtap entered promiscuous mode [ 58.585054][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.604589][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.623290][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.636045][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.648195][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.655509][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.665249][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.680095][ T4178] device veth1_vlan entered promiscuous mode [ 58.709535][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.726043][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.753014][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.772233][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.786448][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.820934][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.847152][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.864417][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.875199][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.892730][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.904480][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.926870][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.935929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.951694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.963852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.976457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.987744][ T2362] Bluetooth: hci3: command 0x040f tx timeout [ 58.991528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.994021][ T2362] Bluetooth: hci0: command 0x040f tx timeout [ 59.005361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.027441][ T2362] Bluetooth: hci1: command 0x040f tx timeout [ 59.049367][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.068229][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 59.068595][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.074410][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 59.091595][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.104625][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.122610][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.134325][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.164824][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.175966][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.187435][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.196175][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.204914][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.228961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.239899][ T4222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.247397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.256567][ T4222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.266222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.279527][ T4177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.288486][ T4177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.297530][ T4177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.306229][ T4177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.342426][ T4247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 59.361593][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.387095][ T4247] device bridge_slave_1 left promiscuous mode [ 59.394070][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.430212][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.439177][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.452091][ T4178] device veth0_macvtap entered promiscuous mode [ 59.498584][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.510283][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.525694][ T4178] device veth1_macvtap entered promiscuous mode [ 59.538694][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.549725][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.558277][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.611308][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.633003][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.643554][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.654562][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.664575][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.675726][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.685767][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.696401][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.710692][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.746093][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.774585][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.784481][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.792518][ T4252] hid-generic 0005:0C45:000B.0001: item fetching failed at offset 0/1 [ 59.792946][ T4252] hid-generic: probe of 0005:0C45:000B.0001 failed with error -22 [ 59.829648][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.842252][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.875973][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.888358][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.898959][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.908896][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.919523][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.929428][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.940164][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.952419][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.968767][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.976353][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.983171][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.993339][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.004981][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.016357][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.055816][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.065231][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.084578][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.095425][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.152067][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.161871][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.176696][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.186453][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.206686][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.215388][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.325668][ T4222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.366455][ T4222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.396812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.430555][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.457160][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.497076][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.572754][ T4272] netlink: 'syz.0.11': attribute type 9 has an invalid length. [ 60.606378][ T4272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 60.741544][ T4277] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 60.778201][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 61.078852][ T4216] Bluetooth: hci1: command 0x0419 tx timeout [ 61.086552][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 61.093309][ T4216] Bluetooth: hci3: command 0x0419 tx timeout [ 61.150647][ T4208] Bluetooth: hci4: command 0x0419 tx timeout [ 61.161027][ T4208] Bluetooth: hci2: command 0x0419 tx timeout [ 61.311575][ T4308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 61.504256][ T4320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'. [ 61.640651][ T4327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.902301][ T4341] loop4: detected capacity change from 0 to 65 [ 61.992138][ T4348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.999438][ T4341] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop4 [ 63.258863][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 64.336916][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 64.829529][ T4222] wlan1: Trigger new scan to find an IBSS to join [ 64.951270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.547564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.556638][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.567024][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 65.585722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 65.594986][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 65.630390][ T4216] Bluetooth: hci0: command 0x0c20 tx timeout [ 66.359316][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 66.368312][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 66.377271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.384116][ T4487] tipc: Started in network mode [ 68.451553][ T4487] tipc: Node identity ac14140f, cluster identity 4711 [ 68.463494][ T4487] tipc: New replicast peer: 255.255.255.255 [ 68.477172][ T4487] tipc: Enabled bearer , priority 10 [ 69.698190][ T4451] wlan1: Trigger new scan to find an IBSS to join [ 69.701996][ T4210] tipc: Node number set to 2886997007 [ 69.725671][ T4503] syz.4.100 sent an empty control message without MSG_MORE. [ 69.783070][ T26] audit: type=1326 audit(1750163909.637:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.3.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20fe6f929 code=0x0 [ 70.797205][ T4222] wlan1: Creating new IBSS network, BSSID aa:91:82:c0:6f:83 [ 71.018618][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.109206][ T26] audit: type=1326 audit(1750163912.967:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7782e929 code=0x7ffc0000 [ 73.196979][ T26] audit: type=1326 audit(1750163912.997:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f2e7782e929 code=0x7ffc0000 [ 73.320013][ T26] audit: type=1326 audit(1750163912.997:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7782e929 code=0x7ffc0000 [ 73.426748][ T26] audit: type=1326 audit(1750163912.997:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7782e929 code=0x7ffc0000 [ 74.598188][ T4587] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.227094][ T4605] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 75.901293][ T4617] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 76.119204][ T1108] cfg80211: failed to load regulatory.db [ 76.740945][ T4632] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 77.127100][ T26] audit: type=1326 audit(1750163916.977:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aac637929 code=0x0 [ 77.169482][ T4647] loop1: detected capacity change from 0 to 1024 [ 77.270913][ T4647] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 77.342267][ T4655] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 77.561795][ T26] audit: type=1804 audit(1750163917.417:8): pid=4660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.149" name="/newroot/23/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 77.598484][ T4659] loop0: detected capacity change from 0 to 512 [ 77.863197][ T4659] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 77.884725][ T4664] loop4: detected capacity change from 0 to 256 [ 77.906553][ T4659] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 77.944455][ T4659] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 78.026620][ T4664] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 78.048050][ T4659] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 78.112338][ T4659] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 78.352291][ T4669] 9pnet_virtio: no channels available for device ./file0/file0 [ 78.362729][ T4669] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 78.369781][ T4669] PKCS7: Only support pkcs7_signedData type [ 78.843737][ T4659] EXT4-fs (loop0): 1 truncate cleaned up [ 78.885469][ T4659] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,nomblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 78.973285][ T4676] tmpfs: Unknown parameter 'usrquota' [ 79.215452][ T26] audit: type=1326 audit(1750163919.067:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec31ad0929 code=0x0 [ 80.150091][ T4659] EXT4-fs (loop0): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload,. Quota mode: writeback. [ 81.481449][ T4692] process 'syz.2.163' launched '/dev/fd/8' with NULL argv: empty string added [ 81.536198][ T4693] loop2: detected capacity change from 0 to 256 [ 81.703228][ T4698] sp0: Synchronizing with TNC [ 82.050028][ T4703] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.533654][ T4709] loop0: detected capacity change from 0 to 512 [ 82.570098][ T4710] loop1: detected capacity change from 0 to 256 [ 82.617537][ T4709] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 82.730674][ T4710] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 83.168486][ T4716] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 83.175390][ T4716] PKCS7: Only support pkcs7_signedData type [ 83.483629][ T4715] 9pnet_virtio: no channels available for device ./file0/file0 [ 88.339243][ T4802] loop3: detected capacity change from 0 to 256 [ 88.827526][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 89.157936][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.307345][ T4802] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 89.560648][ T4823] loop4: detected capacity change from 0 to 256 [ 89.597381][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 89.799792][ T4828] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 89.806257][ T4828] PKCS7: Only support pkcs7_signedData type [ 90.017100][ T4827] 9pnet_virtio: no channels available for device ./file0/file0 [ 90.118703][ T4823] FAT-fs (loop4): Directory bread(block 64) failed [ 90.146545][ T4823] FAT-fs (loop4): Directory bread(block 65) failed [ 90.167732][ T7] usb 2-1: config 0 has no interfaces? [ 90.177548][ T4823] FAT-fs (loop4): Directory bread(block 66) failed [ 90.188668][ T4823] FAT-fs (loop4): Directory bread(block 67) failed [ 90.224715][ T4823] FAT-fs (loop4): Directory bread(block 68) failed [ 90.241850][ T4823] FAT-fs (loop4): Directory bread(block 69) failed [ 90.297546][ T4823] FAT-fs (loop4): Directory bread(block 70) failed [ 90.356418][ T4823] FAT-fs (loop4): Directory bread(block 71) failed [ 90.533575][ T4823] FAT-fs (loop4): Directory bread(block 72) failed [ 90.578022][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.582815][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.658123][ T4823] FAT-fs (loop4): Directory bread(block 73) failed [ 91.706854][ T4839] loop0: detected capacity change from 0 to 256 [ 92.207405][ T7] usb 2-1: Product: syz [ 92.222482][ T7] usb 2-1: Manufacturer: syz [ 92.233059][ T7] usb 2-1: SerialNumber: syz [ 92.260724][ T4848] loop1: detected capacity change from 0 to 65 [ 92.309664][ T7] usb 2-1: config 0 descriptor?? [ 92.393432][ T4848] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop1 [ 92.413608][ T7] usb 2-1: can't set config #0, error -71 [ 92.480974][ T7] usb 2-1: USB disconnect, device number 2 [ 93.379407][ T4870] loop3: detected capacity change from 0 to 256 [ 93.971299][ T4870] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 99.131812][ T4914] loop0: detected capacity change from 0 to 256 [ 99.330221][ T4914] FAT-fs (loop0): Directory bread(block 64) failed [ 99.336811][ T4914] FAT-fs (loop0): Directory bread(block 65) failed [ 99.359277][ T4914] FAT-fs (loop0): Directory bread(block 66) failed [ 99.373734][ T4914] FAT-fs (loop0): Directory bread(block 67) failed [ 99.395412][ T4914] FAT-fs (loop0): Directory bread(block 68) failed [ 99.414434][ T4914] FAT-fs (loop0): Directory bread(block 69) failed [ 99.433967][ T4914] FAT-fs (loop0): Directory bread(block 70) failed [ 99.448907][ T4914] FAT-fs (loop0): Directory bread(block 71) failed [ 99.463439][ T4914] FAT-fs (loop0): Directory bread(block 72) failed [ 99.476983][ T4914] FAT-fs (loop0): Directory bread(block 73) failed [ 99.573543][ T4923] netlink: 'syz.3.215': attribute type 4 has an invalid length. [ 100.585744][ T4941] loop0: detected capacity change from 0 to 65 [ 101.168936][ T4944] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.221'. [ 101.232937][ T4944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.221'. [ 101.341467][ T4796] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 101.370305][ T4941] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop0 [ 101.703338][ T4957] loop3: detected capacity change from 0 to 256 [ 102.146502][ T4957] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 103.975842][ T5002] loop8: detected capacity change from 0 to 16384 [ 104.177403][ T5005] loop_set_status: loop8 () has still dirty pages (nrpages=130) [ 104.876218][ T5021] Invalid ELF header type: 65535 != 1 [ 106.834192][ T5027] netlink: 3 bytes leftover after parsing attributes in process `syz.2.243'. [ 108.826283][ T5029] ODEBUG: Out of memory. ODEBUG disabled [ 110.047660][ T5035] loop2: detected capacity change from 0 to 32768 [ 110.284031][ T5035] XFS (loop2): Mounting V5 Filesystem [ 110.363697][ T5035] XFS (loop2): Ending clean mount [ 113.451297][ T4177] XFS (loop2): Unmounting Filesystem [ 119.027468][ T4210] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.103886][ T5141] usb usb7: usbfs: process 5141 (syz.2.282) did not claim interface 0 before use [ 119.397503][ T4210] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 119.425416][ T4210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.620983][ T4210] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.661844][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.697384][ T4210] usb 5-1: Product: syz [ 119.701590][ T4210] usb 5-1: Manufacturer: syz [ 119.726506][ T4210] usb 5-1: SerialNumber: syz [ 119.855242][ T4210] usb 5-1: config 0 descriptor?? [ 120.754964][ T5164] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 120.840688][ T5157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.874411][ T4210] usb 5-1: selecting invalid altsetting 0 [ 121.058439][ T5166] loop1: detected capacity change from 0 to 256 [ 121.200995][ T5157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.444594][ T5166] ======================================================= [ 123.444594][ T5166] WARNING: The mand mount option has been deprecated and [ 123.444594][ T5166] and is ignored by this kernel. Remove the mand [ 123.444594][ T5166] option from the mount to silence this warning. [ 123.444594][ T5166] ======================================================= [ 123.595472][ T5166] FAT-fs (loop1): Directory bread(block 64) failed [ 123.615555][ T5166] FAT-fs (loop1): Directory bread(block 65) failed [ 123.624322][ T5166] FAT-fs (loop1): Directory bread(block 66) failed [ 123.643475][ T5166] FAT-fs (loop1): Directory bread(block 67) failed [ 123.646016][ T5157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.665955][ T5166] FAT-fs (loop1): Directory bread(block 68) failed [ 123.672775][ T5166] FAT-fs (loop1): Directory bread(block 69) failed [ 123.700248][ T5166] FAT-fs (loop1): Directory bread(block 70) failed [ 123.736510][ T5166] FAT-fs (loop1): Directory bread(block 71) failed [ 123.795997][ T1111] usb 5-1: USB disconnect, device number 2 [ 123.848337][ T5166] FAT-fs (loop1): Directory bread(block 72) failed [ 123.858507][ T5157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.888033][ T5166] FAT-fs (loop1): Directory bread(block 73) failed [ 123.898972][ T5171] loop4: detected capacity change from 0 to 128 [ 123.925828][ T5157] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.937023][ T5157] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.947903][ T5157] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.958537][ T5157] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.114172][ T5171] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.178076][ T5179] netlink: 3 bytes leftover after parsing attributes in process `syz.3.295'. [ 124.189989][ T5171] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.385241][ T5210] input: syz1 as /devices/virtual/input/input5 [ 127.176821][ T5222] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.972455][ T5248] loop1: detected capacity change from 0 to 512 [ 131.082612][ T5248] EXT4-fs (loop1): Ignoring removed oldalloc option [ 131.147129][ T5248] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.318: Parent and EA inode have the same ino 15 [ 131.235356][ T5248] EXT4-fs (loop1): Remounting filesystem read-only [ 131.242495][ T5248] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.260635][ T5248] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.318: Parent and EA inode have the same ino 15 [ 131.283176][ T5248] EXT4-fs (loop1): Remounting filesystem read-only [ 131.298074][ T5248] EXT4-fs (loop1): 1 orphan inode deleted [ 131.303956][ T5248] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,block_validity,oldalloc,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 132.899282][ T5265] sched: RT throttling activated [ 133.122046][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.140766][ T1280] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 136.376633][ T5300] loop3: detected capacity change from 0 to 512 [ 136.943401][ T5300] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 136.966735][ T5300] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.237872][ T5300] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,dioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 138.113601][ T5300] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.748910][ T26] audit: type=1800 audit(1750163979.587:10): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.334" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 139.867684][ T5312] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.903955][ T5314] syz.0.337 (5314) used greatest stack depth: 17504 bytes left [ 140.493620][ T5326] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 141.871167][ T5352] loop3: detected capacity change from 0 to 256 [ 142.007089][ T5352] FAT-fs (loop3): Directory bread(block 64) failed [ 142.052462][ T5352] FAT-fs (loop3): Directory bread(block 65) failed [ 142.082813][ T5352] FAT-fs (loop3): Directory bread(block 66) failed [ 142.107334][ T5352] FAT-fs (loop3): Directory bread(block 67) failed [ 142.129402][ T5352] FAT-fs (loop3): Directory bread(block 68) failed [ 142.151039][ T5352] FAT-fs (loop3): Directory bread(block 69) failed [ 142.222755][ T5352] FAT-fs (loop3): Directory bread(block 70) failed [ 142.260452][ T5352] FAT-fs (loop3): Directory bread(block 71) failed [ 142.342124][ T5352] FAT-fs (loop3): Directory bread(block 72) failed [ 142.366166][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 142.430120][ T5352] FAT-fs (loop3): Directory bread(block 73) failed [ 143.285082][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 143.683407][ T5373] device hsr_slave_0 left promiscuous mode [ 144.086837][ T5382] device syzkaller0 entered promiscuous mode [ 144.127454][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.397304][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 144.798479][ T7] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 145.029076][ T7] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 145.052561][ T7] usb 5-1: config 0 has no interface number 0 [ 145.082535][ T7] usb 5-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 145.243609][ T7] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 145.263167][ T7] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 145.291040][ T7] usb 5-1: Product: syz [ 145.295531][ T7] usb 5-1: Manufacturer: syz [ 145.324886][ T7] usb 5-1: config 0 descriptor?? [ 145.348854][ T5376] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.102776][ T4252] usb 5-1: USB disconnect, device number 3 [ 148.602603][ T5424] loop4: detected capacity change from 0 to 256 [ 148.758071][ T5424] FAT-fs (loop4): Directory bread(block 64) failed [ 148.797459][ T5424] FAT-fs (loop4): Directory bread(block 65) failed [ 148.804101][ T5424] FAT-fs (loop4): Directory bread(block 66) failed [ 148.863116][ T5424] FAT-fs (loop4): Directory bread(block 67) failed [ 148.869852][ T5424] FAT-fs (loop4): Directory bread(block 68) failed [ 148.876518][ T5424] FAT-fs (loop4): Directory bread(block 69) failed [ 148.883256][ T5424] FAT-fs (loop4): Directory bread(block 70) failed [ 148.897327][ T5424] FAT-fs (loop4): Directory bread(block 71) failed [ 148.904943][ T5424] FAT-fs (loop4): Directory bread(block 72) failed [ 148.920348][ T5424] FAT-fs (loop4): Directory bread(block 73) failed [ 148.996942][ T3973] libceph: connect (1)[c::]:6789 error -101 [ 149.008769][ T3973] libceph: mon0 (1)[c::]:6789 connect error [ 149.278196][ T5408] ceph: No mds server is up or the cluster is laggy [ 149.298630][ T3973] libceph: connect (1)[c::]:6789 error -101 [ 149.345335][ T3973] libceph: mon0 (1)[c::]:6789 connect error [ 149.830338][ T5426] chnl_net:caif_netlink_parms(): no params data found [ 149.989945][ T5431] loop3: detected capacity change from 0 to 32768 [ 150.096116][ T5431] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.370 (5431) [ 150.219323][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.337299][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.355410][ T5431] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 150.385156][ T5431] BTRFS info (device loop3): using free space tree [ 150.403646][ T5426] device bridge_slave_0 entered promiscuous mode [ 150.448692][ T5431] BTRFS info (device loop3): has skinny extents [ 150.518667][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.747320][ T4252] Bluetooth: hci5: command 0x0409 tx timeout [ 150.775242][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.783794][ T5426] device bridge_slave_1 entered promiscuous mode [ 151.003979][ T5426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.113131][ T5426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.142555][ T5431] BTRFS info (device loop3): enabling ssd optimizations [ 151.240907][ T5426] team0: Port device team_slave_0 added [ 151.292090][ T5426] team0: Port device team_slave_1 added [ 151.428840][ T4763] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.702291][ T4355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4355) [ 151.733228][ T5484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.380'. [ 151.828043][ T5488] Zero length message leads to an empty skb [ 152.827410][ T4240] Bluetooth: hci5: command 0x041b tx timeout [ 153.040662][ T5497] loop4: detected capacity change from 0 to 256 [ 153.081034][ T4763] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.491584][ T5426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.519733][ T5426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.531755][ T5497] FAT-fs (loop4): Directory bread(block 64) failed [ 153.582709][ T5497] FAT-fs (loop4): Directory bread(block 65) failed [ 153.625210][ T5426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.630179][ T5497] FAT-fs (loop4): Directory bread(block 66) failed [ 153.663264][ T5497] FAT-fs (loop4): Directory bread(block 67) failed [ 153.672086][ T4763] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.717614][ T5497] FAT-fs (loop4): Directory bread(block 68) failed [ 153.724208][ T5497] FAT-fs (loop4): Directory bread(block 69) failed [ 153.734271][ T5426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.807871][ T5426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.860178][ T5510] Failed to get privilege flags for destination (handle=0x2:0x7) [ 153.882884][ T5497] FAT-fs (loop4): Directory bread(block 70) failed [ 153.947722][ T5497] FAT-fs (loop4): Directory bread(block 71) failed [ 153.954373][ T5497] FAT-fs (loop4): Directory bread(block 72) failed [ 154.023600][ T5426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.107494][ T5497] FAT-fs (loop4): Directory bread(block 73) failed [ 154.880724][ T4763] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.907414][ T4208] Bluetooth: hci5: command 0x040f tx timeout [ 155.254564][ T5426] device hsr_slave_0 entered promiscuous mode [ 155.367656][ T5426] device hsr_slave_1 entered promiscuous mode [ 155.410371][ T5426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.477564][ T5426] Cannot create hsr debugfs directory [ 155.605457][ T4240] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 155.877973][ T4240] usb 1-1: Using ep0 maxpacket: 16 [ 155.997509][ T4240] usb 1-1: config 1 has an invalid interface number: 76 but max is 0 [ 156.005649][ T4240] usb 1-1: config 1 has no interface number 0 [ 156.147986][ T4240] usb 1-1: config 1 interface 76 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 156.308336][ T5541] hfsplus: unable to find HFS+ superblock [ 156.766234][ T4240] usb 1-1: config 1 interface 76 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.826083][ T4240] usb 1-1: config 1 interface 76 has no altsetting 0 [ 156.926165][ T5426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.963387][ T5426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.987516][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 157.007508][ T4240] usb 1-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=b7.b4 [ 157.016110][ T5551] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 157.017035][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.041359][ T5426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.045385][ T5551] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 157.939219][ T5426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.980461][ T4240] usb 1-1: Product: syz [ 157.984667][ T4240] usb 1-1: Manufacturer: syz [ 158.052009][ T4240] usb 1-1: SerialNumber: syz [ 158.088674][ T5426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.147449][ T4240] usb 1-1: can't set config #1, error -71 [ 158.155287][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.830193][ T4240] usb 1-1: USB disconnect, device number 2 [ 159.078216][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.088848][ T5426] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.713332][ T5577] loop0: detected capacity change from 0 to 1024 [ 159.860878][ T5577] EXT4-fs (loop0): Ignoring removed orlov option [ 159.874116][ T5575] Failed to get privilege flags for destination (handle=0x2:0x7) [ 159.885677][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.911661][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.971985][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.979137][ T4796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.031532][ T5577] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 160.119746][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.128790][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.152760][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.159909][ T4796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.227710][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.237045][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.246336][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.272230][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.294733][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.315837][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.334272][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.499839][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.508885][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.518289][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.544319][ T5426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.564977][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.448629][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.457162][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.728402][ T5619] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 163.889371][ T4763] device hsr_slave_0 left promiscuous mode [ 163.949885][ T4763] device hsr_slave_1 left promiscuous mode [ 164.017137][ T4763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.054026][ T4763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.141951][ T4763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.188220][ T4763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.244280][ T4763] device bridge_slave_1 left promiscuous mode [ 164.253695][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.292591][ T4763] device bridge_slave_0 left promiscuous mode [ 164.299561][ T4763] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.383009][ T4763] device veth1_macvtap left promiscuous mode [ 164.404607][ T4763] device veth0_macvtap left promiscuous mode [ 164.424298][ T4763] device veth1_vlan left promiscuous mode [ 164.442569][ T4763] device veth0_vlan left promiscuous mode [ 165.943759][ T5647] Failed to get privilege flags for destination (handle=0x2:0x7) [ 167.144855][ T4763] team0 (unregistering): Port device team_slave_1 removed [ 167.335138][ T4763] team0 (unregistering): Port device team_slave_0 removed [ 167.530898][ T4763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.643296][ T4763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.934431][ T5666] loop4: detected capacity change from 0 to 512 [ 168.890300][ T4763] bond0 (unregistering): Released all slaves [ 168.898367][ T5666] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.417: casefold flag without casefold feature [ 168.967691][ T5666] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.417: couldn't read orphan inode 15 (err -117) [ 168.979842][ T5666] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.270393][ T5426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.475214][ T5673] loop0: detected capacity change from 0 to 512 [ 169.565847][ T5673] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 169.603935][ T5673] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.714059][ T26] audit: type=1800 audit(1750164009.567:11): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.418" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 169.924155][ T5426] device veth0_vlan entered promiscuous mode [ 169.944597][ T5426] device veth1_vlan entered promiscuous mode [ 170.002418][ T5426] device veth0_macvtap entered promiscuous mode [ 170.020693][ T5426] device veth1_macvtap entered promiscuous mode [ 170.045652][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.063538][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.073870][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.091844][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.104623][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.125405][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.136824][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.154824][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.166466][ T5426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.186621][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.207497][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.224489][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.236692][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.254138][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.265121][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.282762][ T5426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.294887][ T5426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.313615][ T5426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.326074][ T5426] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.343614][ T5426] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.354640][ T5426] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.369230][ T5426] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.403159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.414197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.424731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.433822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.468609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.501996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.530628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.971763][ T5691] loop4: detected capacity change from 0 to 8 [ 172.103259][ T5691] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 172.493384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.547546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.574302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.597181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.728675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.756788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.784404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.805413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.164232][ T5703] binder: 5697:5703 ioctl c0306201 0 returned -14 [ 174.046840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.351500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.364719][ T5709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.426'. [ 174.386170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.538590][ T5713] loop0: detected capacity change from 0 to 256 [ 174.774303][ T5713] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 174.832355][ T4786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.897385][ T4786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.009541][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.056013][ T4796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.095297][ T4796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.140077][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.308575][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 176.314941][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 176.560620][ T5735] loop4: detected capacity change from 0 to 2048 [ 176.691977][ T5734] loop0: detected capacity change from 0 to 512 [ 176.778190][ T5740] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 176.878007][ T5735] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.184132][ T5734] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 179.096433][ T5734] EXT4-fs (loop0): Unrecognized mount option "euid<00000000000000000000" or missing value [ 179.439417][ T5758] Cannot find add_set index 0 as target [ 180.669369][ T5771] loop5: detected capacity change from 0 to 256 [ 181.934897][ T5771] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 182.677309][ T5788] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 182.744136][ T5788] PKCS7: Only support pkcs7_signedData type [ 183.091600][ T5790] 9pnet_virtio: no channels available for device ./file0/file0 [ 183.286386][ T5777] loop0: detected capacity change from 0 to 4096 [ 183.307581][ T5794] loop3: detected capacity change from 0 to 512 [ 183.400861][ T5797] loop4: detected capacity change from 0 to 256 [ 183.491134][ T5777] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 183.531311][ T5794] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 183.564912][ T5802] loop5: detected capacity change from 0 to 65 [ 183.592163][ T5797] FAT-fs (loop4): Directory bread(block 64) failed [ 183.601534][ T5794] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.611857][ T5797] FAT-fs (loop4): Directory bread(block 65) failed [ 183.643684][ T5797] FAT-fs (loop4): Directory bread(block 66) failed [ 183.657556][ T5797] FAT-fs (loop4): Directory bread(block 67) failed [ 183.666115][ T5802] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop5 [ 183.674999][ T5797] FAT-fs (loop4): Directory bread(block 68) failed [ 183.692603][ T5797] FAT-fs (loop4): Directory bread(block 69) failed [ 183.702800][ T5797] FAT-fs (loop4): Directory bread(block 70) failed [ 183.702914][ T5777] ntfs: volume version 3.1. [ 183.717433][ T5797] FAT-fs (loop4): Directory bread(block 71) failed [ 183.724109][ T5797] FAT-fs (loop4): Directory bread(block 72) failed [ 183.731352][ T5794] EXT4-fs (loop3): 1 truncate cleaned up [ 183.773234][ T5794] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 183.785581][ T5797] FAT-fs (loop4): Directory bread(block 73) failed [ 185.722846][ T5833] bridge0: port 3(ipvlan2) entered blocking state [ 185.811176][ T5833] bridge0: port 3(ipvlan2) entered disabled state [ 187.010305][ T5843] loop0: detected capacity change from 0 to 256 [ 187.109465][ T5848] loop4: detected capacity change from 0 to 512 [ 187.191190][ T5843] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 187.223394][ T5816] loop5: detected capacity change from 0 to 32768 [ 187.349680][ T5848] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.459: casefold flag without casefold feature [ 188.187383][ T5848] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.459: couldn't read orphan inode 15 (err -117) [ 188.355413][ T5848] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.780731][ T5864] loop0: detected capacity change from 0 to 1024 [ 189.038231][ T5864] EXT4-fs (loop0): Ignoring removed orlov option [ 189.202397][ T5864] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 189.585517][ T5882] loop5: detected capacity change from 0 to 65 [ 189.704231][ T5882] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop5 [ 189.821090][ T5889] loop4: detected capacity change from 0 to 8 [ 189.852531][ T5889] squashfs: Unknown parameter '00000000000000000000' [ 189.917758][ T5890] loop0: detected capacity change from 0 to 512 [ 190.841364][ T5890] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 191.563381][ T5890] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 191.932436][ T5924] loop0: detected capacity change from 0 to 1024 [ 191.992653][ T5929] MPTCP: addr_signal error, rm_addr=1 [ 192.056982][ T5932] loop4: detected capacity change from 0 to 1024 [ 193.248828][ T5932] EXT4-fs (loop4): Ignoring removed orlov option [ 193.316649][ T4789] hfsplus: b-tree write err: -5, ino 4 [ 193.360370][ T5943] loop5: detected capacity change from 0 to 65 [ 193.377121][ T5932] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 193.594794][ T5943] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop5 [ 193.869755][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.638834][ T5972] loop4: detected capacity change from 0 to 8 [ 195.168034][ T26] audit: type=1800 audit(2000000003.020:12): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.486" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 195.339727][ T5962] loop0: detected capacity change from 0 to 32768 [ 196.853674][ T5989] loop1: detected capacity change from 0 to 32768 [ 197.799730][ T6017] loop4: detected capacity change from 0 to 65 [ 197.891159][ T6017] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop4 [ 198.268388][ T6029] loop5: detected capacity change from 0 to 512 [ 199.118281][ T6029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 199.126504][ T6029] System zones: 1-12 [ 199.362452][ T6029] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33261: comm syz.5.501: invalid block [ 199.442553][ T6029] EXT4-fs (loop5): Remounting filesystem read-only [ 199.476224][ T6029] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.501: invalid indirect mapped block 8 (level 2) [ 199.597806][ T6029] EXT4-fs (loop5): Remounting filesystem read-only [ 199.604735][ T6029] EXT4-fs (loop5): 1 truncate cleaned up [ 199.704447][ T6029] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 200.223020][ T6056] capability: warning: `syz.5.501' uses deprecated v2 capabilities in a way that may be insecure [ 202.234041][ T6051] loop4: detected capacity change from 0 to 32768 [ 202.396886][ T6081] loop1: detected capacity change from 0 to 128 [ 203.508985][ T6081] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.575612][ T6081] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.111582][ T6205] loop1: detected capacity change from 0 to 512 [ 211.217375][ T6209] loop5: detected capacity change from 0 to 65 [ 211.274002][ T6209] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop5 [ 211.295898][ T6205] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 211.427351][ T6205] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.221896][ T6221] loop0: detected capacity change from 0 to 512 [ 212.330733][ T6221] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 212.363695][ T6221] UDF-fs: Scanning with blocksize 512 failed [ 212.479998][ T6221] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 212.514674][ T6221] UDF-fs: Scanning with blocksize 1024 failed [ 212.541397][ T6221] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 212.549594][ T6221] UDF-fs: Scanning with blocksize 2048 failed [ 212.557775][ T6221] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 212.745530][ T6221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.867349][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 213.308298][ T1108] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.343395][ T6221] UDF-fs: error (device loop0): udf_read_inode: (ino 30) failed !bh [ 213.403685][ T6221] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=2, partition=0 [ 213.424059][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.611091][ T6246] batman_adv: batadv0: Adding interface: ip6gretap1 [ 213.679256][ T1108] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.694483][ T6246] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.720487][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.730255][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.753742][ T1108] usb 5-1: Product: syz [ 213.766917][ T1108] usb 5-1: Manufacturer: syz [ 213.792960][ T1108] usb 5-1: SerialNumber: syz [ 213.815828][ T1108] usb 5-1: config 0 descriptor?? [ 213.824735][ T6246] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 213.872190][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.916830][ T1108] usb 5-1: selecting invalid altsetting 0 [ 213.937092][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.008611][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.042203][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.078875][ T6248] batman_adv: batadv0: Removing interface: ip6gretap1 [ 215.423533][ T6274] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 215.462901][ T6276] loop3: detected capacity change from 0 to 2048 [ 215.555265][ T6276] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.935177][ T6286] loop5: detected capacity change from 0 to 4096 [ 215.967920][ T6291] loop3: detected capacity change from 0 to 65 [ 216.146344][ T6286] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.177638][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.190168][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.194971][ T6291] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop3 [ 216.198213][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.332396][ T4208] usb 5-1: USB disconnect, device number 4 [ 217.032774][ T4763] Bluetooth: hci3: Frame reassembly failed (-84) [ 218.307499][ T6307] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 219.067104][ T6318] loop0: detected capacity change from 0 to 1764 [ 219.077480][ T5486] Bluetooth: hci3: command 0x1003 tx timeout [ 219.084456][ T146] Bluetooth: hci3: sending frame failed (-49) [ 219.120679][ T6314] loop3: detected capacity change from 0 to 40427 [ 219.175624][ T6314] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 219.185174][ T6314] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 219.199021][ T6314] F2FS-fs (loop3): invalid crc value [ 219.215456][ T6314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 219.266518][ T6314] F2FS-fs (loop3): Start checkpoint disabled! [ 219.352364][ T6314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 219.775797][ T6331] loop0: detected capacity change from 0 to 2048 [ 220.013470][ T6331] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.540917][ T4780] attempt to access beyond end of device [ 220.540917][ T4780] loop3: rw=2049, want=40976, limit=40427 [ 221.157279][ T5486] Bluetooth: hci3: command 0x1001 tx timeout [ 221.163442][ T146] Bluetooth: hci3: sending frame failed (-49) [ 221.234436][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 221.273315][ T6367] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 222.617534][ T6375] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 223.160796][ T7] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 223.212007][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 223.428668][ T5486] Bluetooth: hci3: command 0x1009 tx timeout [ 223.437567][ T7] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.462013][ T7] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.507155][ T7] usb 6-1: Product: syz [ 223.511812][ T7] usb 6-1: Manufacturer: syz [ 223.544154][ T7] usb 6-1: SerialNumber: syz [ 223.551238][ T7] usb 6-1: config 0 descriptor?? [ 223.579714][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 223.592382][ T7] usb 6-1: selecting invalid altsetting 0 [ 223.659295][ T6402] loop4: detected capacity change from 0 to 2048 [ 224.506176][ T6402] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.284655][ T5486] usb 6-1: USB disconnect, device number 2 [ 226.354439][ T6448] loop0: detected capacity change from 0 to 8 [ 226.508974][ T6448] squashfs: Unknown parameter '00000000000000000000' [ 227.802724][ T6472] loop3: detected capacity change from 0 to 2048 [ 228.145052][ T6479] netlink: 3 bytes leftover after parsing attributes in process `syz.1.597'. [ 228.287490][ T6472] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.351642][ T6459] loop5: detected capacity change from 0 to 32768 [ 228.731606][ T6459] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 229.897105][ T5426] ocfs2: Unmounting device (7,5) on (node local) [ 230.232653][ T6517] loop1: detected capacity change from 0 to 8 [ 230.257397][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 230.271212][ T6517] squashfs: Unknown parameter '00000000000000000000' [ 231.258179][ T1108] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 231.331960][ T6527] loop3: detected capacity change from 0 to 1024 [ 231.348935][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 231.477831][ T6527] EXT4-fs (loop3): Ignoring removed orlov option [ 232.382018][ T1108] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 232.451860][ T6547] Failed to get privilege flags for destination (handle=0x2:0x7) [ 232.719502][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 232.728236][ T1108] usb 1-1: Product: syz [ 232.737030][ T1108] usb 1-1: Manufacturer: syz [ 232.744885][ T1108] usb 1-1: config 0 descriptor?? [ 232.758882][ T6527] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 232.783519][ T1108] usb 1-1: can't set config #0, error -71 [ 232.804373][ T1108] usb 1-1: USB disconnect, device number 3 [ 233.124244][ T6555] netlink: 3 bytes leftover after parsing attributes in process `syz.4.615'. [ 234.092204][ T6568] loop5: detected capacity change from 0 to 512 [ 234.974049][ T6568] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.019596][ T6568] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.068921][ T6585] loop0: detected capacity change from 0 to 8 [ 235.135430][ T6585] squashfs: Unknown parameter '00000000000000000000' [ 235.199136][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 235.330518][ T6592] device bond_slave_0 entered promiscuous mode [ 235.337321][ T6592] device bond_slave_1 entered promiscuous mode [ 235.401314][ T6592] device macvtap1 entered promiscuous mode [ 235.432225][ T6592] device bond0 entered promiscuous mode [ 235.450728][ T6592] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 235.774786][ T6600] device bond0 left promiscuous mode [ 235.920244][ T6600] device bond_slave_0 left promiscuous mode [ 235.926297][ T6600] device bond_slave_1 left promiscuous mode [ 236.353807][ T6617] Failed to get privilege flags for destination (handle=0x2:0x7) [ 238.200131][ T6641] loop4: detected capacity change from 0 to 1764 [ 238.205622][ T6642] loop1: detected capacity change from 0 to 2048 [ 238.233760][ T6645] loop3: detected capacity change from 0 to 8 [ 238.299538][ T6645] squashfs: Unknown parameter '00000000000000000000' [ 238.365512][ T6641] loop4: detected capacity change from 0 to 128 [ 238.487156][ T6641] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 238.508348][ T6642] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.877424][ T6667] Failed to get privilege flags for destination (handle=0x2:0x7) [ 240.387511][ T6638] loop5: detected capacity change from 0 to 32768 [ 241.322759][ T6638] (syz.5.635,6638,1):ocfs2_initialize_super:2313 ERROR: status = -12 [ 241.344166][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 241.395690][ T6638] (syz.5.635,6638,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 241.695734][ T6704] loop4: detected capacity change from 0 to 8 [ 241.764010][ T6704] squashfs: Unknown parameter '00000000000000000000' [ 242.715822][ T6712] loop3: detected capacity change from 0 to 256 [ 242.960327][ T6712] FAT-fs (loop3): Directory bread(block 64) failed [ 243.007930][ T6724] Failed to get privilege flags for destination (handle=0x2:0x7) [ 243.021610][ T6712] FAT-fs (loop3): Directory bread(block 65) failed [ 243.119620][ T6712] FAT-fs (loop3): Directory bread(block 66) failed [ 243.229311][ T6712] FAT-fs (loop3): Directory bread(block 67) failed [ 243.322920][ T6712] FAT-fs (loop3): Directory bread(block 68) failed [ 243.438863][ T6712] FAT-fs (loop3): Directory bread(block 69) failed [ 243.521030][ T6712] FAT-fs (loop3): Directory bread(block 70) failed [ 243.599947][ T6712] FAT-fs (loop3): Directory bread(block 71) failed [ 243.710822][ T6712] FAT-fs (loop3): Directory bread(block 72) failed [ 243.717480][ T6712] FAT-fs (loop3): Directory bread(block 73) failed [ 245.077720][ C1] ================================================================== [ 245.086482][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 245.094081][ C1] Read of size 2 at addr ffff88814074c82a by task syz.5.669/6752 [ 245.101828][ C1] [ 245.104176][ C1] CPU: 1 PID: 6752 Comm: syz.5.669 Not tainted 5.15.185-syzkaller #0 [ 245.112264][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.122624][ C1] Call Trace: [ 245.125937][ C1] [ 245.128810][ C1] dump_stack_lvl+0x168/0x230 [ 245.133528][ C1] ? show_regs_print_info+0x20/0x20 [ 245.138767][ C1] ? _printk+0xcc/0x110 [ 245.142949][ C1] ? rose_timer_expiry+0x470/0x490 [ 245.148535][ C1] ? load_image+0x3b0/0x3b0 [ 245.153078][ C1] print_address_description+0x60/0x2d0 [ 245.158771][ C1] ? rose_timer_expiry+0x470/0x490 [ 245.164127][ C1] kasan_report+0xdf/0x130 [ 245.168586][ C1] ? rose_timer_expiry+0x470/0x490 [ 245.173746][ C1] rose_timer_expiry+0x470/0x490 [ 245.178720][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 245.183768][ C1] call_timer_fn+0x16c/0x530 [ 245.188373][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 245.193410][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 245.199410][ C1] ? __run_timers+0x7c0/0x7c0 [ 245.204095][ C1] ? rcu_is_watching+0x11/0xa0 [ 245.208861][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 245.214077][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.219279][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 245.224322][ C1] __run_timers+0x525/0x7c0 [ 245.228975][ C1] ? detach_timer+0x2b0/0x2b0 [ 245.233757][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 245.239747][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 245.244612][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 245.249906][ C1] run_timer_softirq+0x63/0xf0 [ 245.254686][ C1] handle_softirqs+0x328/0x820 [ 245.259494][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 245.264373][ C1] ? do_softirq+0x200/0x200 [ 245.269022][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 245.274227][ C1] __irq_exit_rcu+0x12f/0x220 [ 245.278906][ C1] ? irq_exit_rcu+0x20/0x20 [ 245.283590][ C1] irq_exit_rcu+0x5/0x20 [ 245.287841][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 245.293485][ C1] [ 245.296417][ C1] [ 245.299361][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 245.305432][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 245.312209][ C1] Code: 74 05 e8 3e 14 d3 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 06 94 a6 f7 65 8b 05 a7 a3 57 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 245.331950][ C1] RSP: 0018:ffffc900039bf420 EFLAGS: 00000206 [ 245.338037][ C1] RAX: 3764be8ae96f8d00 RBX: 0000000000000a02 RCX: 3764be8ae96f8d00 [ 245.346014][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 [ 245.353982][ C1] RBP: ffffc900039bf4b0 R08: dffffc0000000000 R09: fffffbfff1ff3621 [ 245.362171][ C1] R10: fffffbfff1ff3621 R11: 1ffffffff1ff3620 R12: dffffc0000000000 [ 245.370173][ C1] R13: 1ffff11017226aab R14: ffff88802221f050 R15: 1ffff92000737e84 [ 245.378188][ C1] ? _raw_spin_unlock+0x40/0x40 [ 245.383097][ C1] __pagevec_lru_add+0x142a/0x17c0 [ 245.388227][ C1] ? lru_cache_add+0x750/0x750 [ 245.393001][ C1] lru_cache_add+0x516/0x750 [ 245.397592][ C1] shmem_getpage_gfp+0x1868/0x2d40 [ 245.402745][ C1] shmem_fault+0x1a9/0x520 [ 245.407167][ C1] ? shmem_fallocate+0xe20/0xe20 [ 245.412198][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 245.417672][ C1] ? count_memcg_event_mm+0x311/0x360 [ 245.423055][ C1] __do_fault+0x141/0x330 [ 245.427389][ C1] handle_mm_fault+0x2949/0x43c0 [ 245.432340][ C1] ? get_page+0xe0/0xe0 [ 245.436583][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 245.441841][ C1] __get_user_pages+0x93e/0x11c0 [ 245.446822][ C1] ? populate_vma_page_range+0x290/0x290 [ 245.452485][ C1] ? read_lock_is_recursive+0x10/0x10 [ 245.457886][ C1] populate_vma_page_range+0x213/0x290 [ 245.463379][ C1] __mm_populate+0x26f/0x3a0 [ 245.468000][ C1] ? check_vma_flags+0x480/0x480 [ 245.472955][ C1] ? preempt_count_add+0x8d/0x190 [ 245.477982][ C1] ? up_write+0x1bb/0x420 [ 245.482318][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 245.486913][ C1] ? account_locked_vm+0xe0/0xe0 [ 245.491853][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 245.496892][ C1] ksys_mmap_pgoff+0x140/0x780 [ 245.501667][ C1] ? mmap_region+0x15e0/0x15e0 [ 245.506430][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.511633][ C1] do_syscall_64+0x4c/0xa0 [ 245.516131][ C1] ? clear_bhb_loop+0x30/0x80 [ 245.520839][ C1] ? clear_bhb_loop+0x30/0x80 [ 245.525566][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.531485][ C1] RIP: 0033:0x7f36ee50b929 [ 245.536018][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.555727][ C1] RSP: 002b:00007f36ec373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 245.564258][ C1] RAX: ffffffffffffffda RBX: 00007f36ee732fa0 RCX: 00007f36ee50b929 [ 245.572444][ C1] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 245.580438][ C1] RBP: 00007f36ee58db39 R08: ffffffffffffffff R09: 0000000000000000 [ 245.588598][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 245.596665][ C1] R13: 0000000000000000 R14: 00007f36ee732fa0 R15: 00007ffcc7ead468 [ 245.604734][ C1] [ 245.607851][ C1] [ 245.610188][ C1] Allocated by task 4282: [ 245.614606][ C1] __kasan_kmalloc+0xb5/0xf0 [ 245.619474][ C1] rose_add_node+0x227/0xdb0 [ 245.624169][ C1] rose_rt_ioctl+0x9db/0xe20 [ 245.628758][ C1] rose_ioctl+0x27a/0x790 [ 245.633106][ C1] sock_do_ioctl+0xd3/0x2f0 [ 245.637691][ C1] sock_ioctl+0x4ed/0x6e0 [ 245.642013][ C1] __se_sys_ioctl+0xfa/0x170 [ 245.646598][ C1] do_syscall_64+0x4c/0xa0 [ 245.651017][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.656907][ C1] [ 245.659225][ C1] The buggy address belongs to the object at ffff88814074c800 [ 245.659225][ C1] which belongs to the cache kmalloc-512 of size 512 [ 245.673362][ C1] The buggy address is located 42 bytes inside of [ 245.673362][ C1] 512-byte region [ffff88814074c800, ffff88814074ca00) [ 245.686548][ C1] The buggy address belongs to the page: [ 245.692173][ C1] page:ffffea000501d300 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814074c800 pfn:0x14074c [ 245.703710][ C1] head:ffffea000501d300 order:2 compound_mapcount:0 compound_pincount:0 [ 245.712119][ C1] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 245.720284][ C1] raw: 057ff00000010200 ffffea0005202408 ffffea0005317908 ffff888016841c80 [ 245.728952][ C1] raw: ffff88814074c800 0000000000100008 00000001ffffffff 0000000000000000 [ 245.737871][ C1] page dumped because: kasan: bad access detected [ 245.744284][ C1] page_owner tracks the page as allocated [ 245.750101][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1981695705, free_ts 0 [ 245.768012][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 245.773578][ C1] __alloc_pages+0x1e1/0x470 [ 245.778165][ C1] alloc_page_interleave+0x24/0x1e0 [ 245.783368][ C1] new_slab+0xc0/0x4b0 [ 245.787436][ C1] ___slab_alloc+0x81e/0xdf0 [ 245.792026][ C1] __kmalloc_track_caller+0x1cb/0x330 [ 245.797421][ C1] krealloc+0x5a/0xf0 [ 245.801422][ C1] add_sysfs_param+0xe8/0x930 [ 245.806106][ C1] kernel_add_sysfs_param+0xaf/0x120 [ 245.811399][ C1] param_sysfs_builtin+0x164/0x1e0 [ 245.816505][ C1] param_sysfs_init+0x66/0x70 [ 245.821187][ C1] do_one_initcall+0x1ee/0x680 [ 245.825999][ C1] do_initcall_level+0x137/0x1f0 [ 245.830934][ C1] do_initcalls+0x4b/0x90 [ 245.835344][ C1] kernel_init_freeable+0x3ce/0x560 [ 245.840564][ C1] kernel_init+0x19/0x1b0 [ 245.844984][ C1] page_owner free stack trace missing [ 245.850345][ C1] [ 245.852665][ C1] Memory state around the buggy address: [ 245.858291][ C1] ffff88814074c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.866364][ C1] ffff88814074c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.874445][ C1] >ffff88814074c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.882520][ C1] ^ [ 245.887904][ C1] ffff88814074c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.895963][ C1] ffff88814074c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.904017][ C1] ================================================================== [ 245.912240][ C1] Disabling lock debugging due to kernel taint [ 245.918408][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.924452][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 245.931762][ C1] CPU: 1 PID: 6752 Comm: syz.5.669 Tainted: G B 5.15.185-syzkaller #0 [ 245.941247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.951330][ C1] Call Trace: [ 245.954629][ C1] [ 245.957490][ C1] dump_stack_lvl+0x168/0x230 [ 245.962241][ C1] ? show_regs_print_info+0x20/0x20 [ 245.967467][ C1] ? load_image+0x3b0/0x3b0 [ 245.972103][ C1] panic+0x2c9/0x7f0 [ 245.976036][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 245.980595][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 245.986608][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 245.992621][ C1] ? _raw_spin_unlock+0x40/0x40 [ 245.997621][ C1] ? print_memory_metadata+0x314/0x400 [ 246.003194][ C1] ? rose_timer_expiry+0x470/0x490 [ 246.008367][ C1] check_panic_on_warn+0x80/0xa0 [ 246.013436][ C1] ? rose_timer_expiry+0x470/0x490 [ 246.018859][ C1] end_report+0x6d/0xf0 [ 246.023119][ C1] kasan_report+0x102/0x130 [ 246.027728][ C1] ? rose_timer_expiry+0x470/0x490 [ 246.032879][ C1] rose_timer_expiry+0x470/0x490 [ 246.037848][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 246.042901][ C1] call_timer_fn+0x16c/0x530 [ 246.047528][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 246.052635][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 246.058615][ C1] ? __run_timers+0x7c0/0x7c0 [ 246.063292][ C1] ? rcu_is_watching+0x11/0xa0 [ 246.068051][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 246.073258][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 246.078621][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 246.083683][ C1] __run_timers+0x525/0x7c0 [ 246.088185][ C1] ? detach_timer+0x2b0/0x2b0 [ 246.093293][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 246.099267][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 246.104113][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 246.109403][ C1] run_timer_softirq+0x63/0xf0 [ 246.114192][ C1] handle_softirqs+0x328/0x820 [ 246.119063][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 246.123914][ C1] ? do_softirq+0x200/0x200 [ 246.128419][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 246.133722][ C1] __irq_exit_rcu+0x12f/0x220 [ 246.138394][ C1] ? irq_exit_rcu+0x20/0x20 [ 246.142978][ C1] irq_exit_rcu+0x5/0x20 [ 246.147218][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 246.152936][ C1] [ 246.155881][ C1] [ 246.158894][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 246.164963][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 246.171472][ C1] Code: 74 05 e8 3e 14 d3 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 06 94 a6 f7 65 8b 05 a7 a3 57 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 246.191080][ C1] RSP: 0018:ffffc900039bf420 EFLAGS: 00000206 [ 246.197336][ C1] RAX: 3764be8ae96f8d00 RBX: 0000000000000a02 RCX: 3764be8ae96f8d00 [ 246.205306][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 [ 246.213274][ C1] RBP: ffffc900039bf4b0 R08: dffffc0000000000 R09: fffffbfff1ff3621 [ 246.221246][ C1] R10: fffffbfff1ff3621 R11: 1ffffffff1ff3620 R12: dffffc0000000000 [ 246.229216][ C1] R13: 1ffff11017226aab R14: ffff88802221f050 R15: 1ffff92000737e84 [ 246.237192][ C1] ? _raw_spin_unlock+0x40/0x40 [ 246.242040][ C1] __pagevec_lru_add+0x142a/0x17c0 [ 246.247149][ C1] ? lru_cache_add+0x750/0x750 [ 246.251913][ C1] lru_cache_add+0x516/0x750 [ 246.256544][ C1] shmem_getpage_gfp+0x1868/0x2d40 [ 246.261669][ C1] shmem_fault+0x1a9/0x520 [ 246.266279][ C1] ? shmem_fallocate+0xe20/0xe20 [ 246.271227][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 246.277057][ C1] ? count_memcg_event_mm+0x311/0x360 [ 246.282444][ C1] __do_fault+0x141/0x330 [ 246.286798][ C1] handle_mm_fault+0x2949/0x43c0 [ 246.291741][ C1] ? get_page+0xe0/0xe0 [ 246.295909][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 246.301022][ C1] __get_user_pages+0x93e/0x11c0 [ 246.305967][ C1] ? populate_vma_page_range+0x290/0x290 [ 246.311698][ C1] ? read_lock_is_recursive+0x10/0x10 [ 246.317112][ C1] populate_vma_page_range+0x213/0x290 [ 246.322644][ C1] __mm_populate+0x26f/0x3a0 [ 246.327258][ C1] ? check_vma_flags+0x480/0x480 [ 246.332378][ C1] ? preempt_count_add+0x8d/0x190 [ 246.337410][ C1] ? up_write+0x1bb/0x420 [ 246.341873][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 246.346462][ C1] ? account_locked_vm+0xe0/0xe0 [ 246.351401][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 246.356425][ C1] ksys_mmap_pgoff+0x140/0x780 [ 246.361201][ C1] ? mmap_region+0x15e0/0x15e0 [ 246.365957][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 246.371155][ C1] do_syscall_64+0x4c/0xa0 [ 246.375572][ C1] ? clear_bhb_loop+0x30/0x80 [ 246.380244][ C1] ? clear_bhb_loop+0x30/0x80 [ 246.384917][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.390808][ C1] RIP: 0033:0x7f36ee50b929 [ 246.395218][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.414820][ C1] RSP: 002b:00007f36ec373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 246.423234][ C1] RAX: ffffffffffffffda RBX: 00007f36ee732fa0 RCX: 00007f36ee50b929 [ 246.431202][ C1] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 246.439167][ C1] RBP: 00007f36ee58db39 R08: ffffffffffffffff R09: 0000000000000000 [ 246.447223][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 246.455187][ C1] R13: 0000000000000000 R14: 00007f36ee732fa0 R15: 00007ffcc7ead468 [ 246.463155][ C1] [ 246.466368][ C1] Kernel Offset: disabled [ 246.475910][ C1] Rebooting in 86400 seconds..