last executing test programs: 12.080146648s ago: executing program 4 (id=410): clock_gettime(0x0, &(0x7f0000000000)={0x0}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5) r5 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0xe12c, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, 0x0, 0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, r6, 0x0) io_uring_enter(r5, 0x3332, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000a80)) prlimit64(0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x80, 0x8, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfc, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) clock_settime(0x0, &(0x7f0000000080)={r0}) 9.154227213s ago: executing program 1 (id=434): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5248, &(0x7f0000000080)={0x0, 0x100000, 0x400, 0xffffffff}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/4096, 0x1000}], &(0x7f00000001c0), 0x1}, 0x20) 8.779111835s ago: executing program 4 (id=437): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r2, @ANYBLOB="c5c876d700000000240012800b000100677265746170000014000280", @ANYRES64=r1], 0x44}}, 0x0) 8.603436586s ago: executing program 1 (id=439): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000200)="1cdc71c9", 0x4}, {0x0, 0xea}], 0x2) 8.442566896s ago: executing program 3 (id=440): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 8.409512687s ago: executing program 4 (id=442): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}], 0x18}, 0x20040001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r7, &(0x7f0000000040)='net/ip_vs\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = io_uring_setup(0xa5f, &(0x7f0000000100)={0x0, 0x80000000, 0x0, 0x4, 0xd5}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x28ce80, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffef6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000340)=r11) close_range(r8, 0xffffffffffffffff, 0x0) 8.354275067s ago: executing program 0 (id=443): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) 8.273702898s ago: executing program 1 (id=444): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 8.110604859s ago: executing program 3 (id=446): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0xfe, "0000ca06e700"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000740)=0xff) 8.042212648s ago: executing program 0 (id=447): clock_gettime(0x0, &(0x7f0000000000)={0x0}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5) r5 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0xe12c, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, 0x0, 0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3332, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x80, 0x8, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfc, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) clock_settime(0x0, &(0x7f0000000080)={r0}) 7.982644159s ago: executing program 1 (id=448): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000100)}, 0x20) 7.106274703s ago: executing program 3 (id=450): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x123, 0x5}, 0x14}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="50020206e53018"], 0x7) 7.010173694s ago: executing program 1 (id=452): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r2, @ANYBLOB="c5c876d700000000240012800b000100677265746170000014000280", @ANYRES64=r1], 0x44}}, 0x0) 6.824423565s ago: executing program 3 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{}, {0x0, 0x4}]}, 0x18, 0x0) 6.673148616s ago: executing program 3 (id=455): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010023010000"], 0x1c}}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r1}) 6.425736507s ago: executing program 2 (id=456): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 6.284200038s ago: executing program 2 (id=457): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x2, 0x0, 0x0, 0x0}) 6.046201859s ago: executing program 2 (id=458): munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil) 5.983238409s ago: executing program 2 (id=459): syz_emit_ethernet(0x25, &(0x7f0000000000)={@local, @local, @void, {@generic={0x8, "65684ae5e7267f16800f6cc6b90ce552e37068b6bd96ec"}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'lc\x00', 0x13}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2a, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x7, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) r9 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55d, &(0x7f0000000ec0)="$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") r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000001080)=0x4) getdents(r10, &(0x7f0000000040)=""/104, 0x4d) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0xb, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24044005}, 0x240048d0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYRES8=r9, @ANYBLOB="9fc6b26af2dad3c1dec0f2ee7fd1da7a8d15f8a2d0afc994ab4a976f5665ce8a1180ae7e82c160190f67ea6a57a8de17a4408e0a4f68dd5138006d42abf615b25b8720645ba1f08bdc7cd282ce297790cfd802d47f07171dd7944b6f370045a0187906ae78e61d30486d6bfbff6a9910ffe3bca2d15220ce292ba921f996ea121a545840f75edd8edefaa93d876e273cd1bded806514d9a7519ebd41cf9ccd1082632b4cf90384d157522e5e29ca284ecf6113232334f9989fa000979893a6c5edfe27c0a75c25ad32554547e76cb32a848b8f5889ca8cd3ed47662ef8e3", @ANYRES8=r8, @ANYRES8=r11, @ANYRESDEC=r9, @ANYRESHEX=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0x1ac, 0x0, &(0x7f00000005c0)="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", 0x0, 0xfe, 0x60000000, 0x7, 0x0, &(0x7f00000002c0)="b36e52d00a2945", &(0x7f0000000300), 0x0, 0xf80d, 0x9}, 0x50) ioctl$PIO_UNIMAP(r11, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) ioctl$VT_DISALLOCATE(r11, 0x5608) ioctl$PIO_UNIMAP(r11, 0x4b67, 0x0) 4.958562624s ago: executing program 0 (id=460): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="6105010303030602046b7f06beacfe46fd18176d06801f1f01ad"], 0x1a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 4.674255656s ago: executing program 0 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x10000, 0x0) 4.556645987s ago: executing program 0 (id=462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x6}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x1007, 0xfe, 0xc, 0x2}, {0x8, 0x4b, 0x80, 0x9}, {0x0, 0x4, 0x6, 0xff}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@data_err_abort}, {@minixdf}, {@minixdf}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x4a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x1000000004ffe2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000e6ff0900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028"], 0xec}}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r9) 4.189269228s ago: executing program 4 (id=463): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x123, 0x5}, 0x14}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="50020206e53018"], 0x7) 4.173062248s ago: executing program 3 (id=464): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x5, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0xa4}}, 0x0) 4.128145438s ago: executing program 1 (id=465): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000005c0)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='fscache_invalidate\x00', r2, 0x0, 0x8b}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x20, 0x4, 0x3, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20001, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) sendmmsg$unix(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) mkdir(0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = getegid() r9 = getgid() setregid(r8, r9) r10 = fcntl$getown(r7, 0x9) ioprio_set$pid(0x1, r10, 0x2000) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r11, 0x5609, &(0x7f0000000180)={0xb, 0x173, 0xcd}) 4.046302089s ago: executing program 2 (id=466): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48140, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 1.136462324s ago: executing program 0 (id=467): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 1.076634074s ago: executing program 4 (id=468): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./bus\x00', 0x3000c46, &(0x7f0000000340)={[{@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) 245.93µs ago: executing program 2 (id=469): r0 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) 0s ago: executing program 4 (id=470): clock_gettime(0x0, &(0x7f0000000000)={0x0}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5) r5 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0xe12c, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, 0x0, 0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3332, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x80, 0x8, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfc, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) clock_settime(0x0, &(0x7f0000000080)={r0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.59' (ED25519) to the list of known hosts. syzkaller login: [ 69.031541][ T4243] cgroup: Unknown subsys name 'net' [ 69.197708][ T4243] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.704247][ T4243] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.462224][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.468837][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.142716][ T4254] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.151067][ T4254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.161174][ T4259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.192999][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.200334][ T4254] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.200450][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.207873][ T4254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.216836][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.223997][ T4254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.231459][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.237673][ T4254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.244543][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.257572][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.258914][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.265357][ T4254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.272690][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.279411][ T4254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.286916][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.293036][ T4254] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.300733][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.307830][ T4254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.314705][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.321501][ T4254] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.328136][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.348769][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.351892][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.357092][ T4254] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.364013][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.402441][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.410279][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.795408][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 72.862483][ T4261] chnl_net:caif_netlink_parms(): no params data found [ 72.928362][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 73.007605][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 73.068018][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 73.086814][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.094721][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.103029][ T4261] device bridge_slave_0 entered promiscuous mode [ 73.112303][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.119980][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.128024][ T4253] device bridge_slave_0 entered promiscuous mode [ 73.156628][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.164209][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.172616][ T4261] device bridge_slave_1 entered promiscuous mode [ 73.180837][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.187943][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.196188][ T4253] device bridge_slave_1 entered promiscuous mode [ 73.265841][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.273331][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.282174][ T4256] device bridge_slave_0 entered promiscuous mode [ 73.323491][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.330745][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.339320][ T4256] device bridge_slave_1 entered promiscuous mode [ 73.348156][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.360095][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.395169][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.406145][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.425058][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.432317][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.441145][ T4260] device bridge_slave_0 entered promiscuous mode [ 73.448511][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.455676][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.464126][ T4262] device bridge_slave_0 entered promiscuous mode [ 73.496891][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.504765][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.512912][ T4260] device bridge_slave_1 entered promiscuous mode [ 73.520618][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.527720][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.535803][ T4262] device bridge_slave_1 entered promiscuous mode [ 73.544875][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.556705][ T4253] team0: Port device team_slave_0 added [ 73.591676][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.602741][ T4253] team0: Port device team_slave_1 added [ 73.611152][ T4261] team0: Port device team_slave_0 added [ 73.649769][ T4261] team0: Port device team_slave_1 added [ 73.664973][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.676400][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.703798][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.711176][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.737923][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.751435][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.762532][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.774266][ T4256] team0: Port device team_slave_0 added [ 73.783030][ T4256] team0: Port device team_slave_1 added [ 73.796620][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.803948][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.829989][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.875078][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.882209][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.908572][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.955309][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.962504][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.989467][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.006784][ T4262] team0: Port device team_slave_0 added [ 74.015380][ T4260] team0: Port device team_slave_0 added [ 74.023878][ T4260] team0: Port device team_slave_1 added [ 74.030146][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.037110][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.063978][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.094258][ T4262] team0: Port device team_slave_1 added [ 74.109102][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.116078][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.142257][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.165424][ T4253] device hsr_slave_0 entered promiscuous mode [ 74.172900][ T4253] device hsr_slave_1 entered promiscuous mode [ 74.228851][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.235832][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.261863][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.277438][ T4261] device hsr_slave_0 entered promiscuous mode [ 74.284714][ T4261] device hsr_slave_1 entered promiscuous mode [ 74.292022][ T4261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.300101][ T4261] Cannot create hsr debugfs directory [ 74.310888][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.317872][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.344312][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.356627][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.363954][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.391526][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.419595][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 74.425960][ T4257] Bluetooth: hci3: command 0x0409 tx timeout [ 74.430288][ T4259] Bluetooth: hci4: command 0x0409 tx timeout [ 74.445021][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.452302][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.479927][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.505858][ T4257] Bluetooth: hci2: command 0x0409 tx timeout [ 74.505878][ T4259] Bluetooth: hci1: command 0x0409 tx timeout [ 74.550400][ T4256] device hsr_slave_0 entered promiscuous mode [ 74.557118][ T4256] device hsr_slave_1 entered promiscuous mode [ 74.564054][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.571979][ T4256] Cannot create hsr debugfs directory [ 74.580720][ T4260] device hsr_slave_0 entered promiscuous mode [ 74.587619][ T4260] device hsr_slave_1 entered promiscuous mode [ 74.594616][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.602273][ T4260] Cannot create hsr debugfs directory [ 74.766596][ T4262] device hsr_slave_0 entered promiscuous mode [ 74.774216][ T4262] device hsr_slave_1 entered promiscuous mode [ 74.781074][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.789233][ T4262] Cannot create hsr debugfs directory [ 74.994755][ T4261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.029844][ T4261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.041980][ T4261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.057991][ T4261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.096246][ T4253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.114102][ T4253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.134502][ T4253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.145085][ T4253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.218086][ T4260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.247351][ T4260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.259506][ T4260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.290157][ T4260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.317033][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.343094][ T4256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.360522][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.381148][ T4256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.391451][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.402467][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.441984][ T4256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.472713][ T4262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.481760][ T4256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.492796][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.502865][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.514020][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.521375][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.531945][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.543024][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.551948][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.559098][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.566899][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.591119][ T4262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.602754][ T4262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.614087][ T4262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.626130][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.634952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.644238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.654783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.664059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.699249][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.706812][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.716400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.728349][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.737798][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.778421][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.793719][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.805263][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.823766][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.843367][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.853896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.872560][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.924018][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.943724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.960506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.971968][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.979133][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.986821][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.995577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.006386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.014690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.024734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.035650][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.042818][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.064959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.074362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.083384][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.090646][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.101634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.118746][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.144304][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.157917][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.171746][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.178952][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.211177][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.224620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.247188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.285097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.294701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.304969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.314156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.324736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.333893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.341679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.349283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.357974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.367087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.376176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.384833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.393518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.401494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.409741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.421328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.430250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.443503][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.463066][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.472270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.481389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.495947][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.507002][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 76.507011][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 76.513292][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 76.527363][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.546883][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.565036][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.579348][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 76.585419][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 76.593270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.604323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.613560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.622686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.632438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.642167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.651775][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.658970][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.708183][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.718485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.734931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.755145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.764313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.773620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.783291][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.790473][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.800420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.809871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.844884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.871932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.909075][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.921171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.934599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.944106][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.954379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.966007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.983442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.000183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.017015][ T4256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.028269][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.048803][ T4261] device veth0_vlan entered promiscuous mode [ 77.075825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.086074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.094992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.105042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.113781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.122665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.131531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.141779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.150432][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.157529][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.165793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.173528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.186717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.194996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.217202][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.237376][ T4261] device veth1_vlan entered promiscuous mode [ 77.260151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.270353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.289054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.298367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.316380][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.323628][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.339366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.354482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.362735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.406846][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.430608][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.451076][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.467425][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.477379][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.492606][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.501893][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.511438][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.526622][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.552314][ T4262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.564898][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.575399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.585160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.606560][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.637611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.645893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.654498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.665442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.692615][ T4261] device veth0_macvtap entered promiscuous mode [ 77.721577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.734648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.744368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.753986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.763737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.781917][ T4261] device veth1_macvtap entered promiscuous mode [ 77.844125][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.864520][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.879699][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.899698][ T4253] device veth0_vlan entered promiscuous mode [ 77.914328][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.938213][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.957018][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.965943][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.992458][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.004873][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.014317][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.027087][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.038297][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.050430][ T4253] device veth1_vlan entered promiscuous mode [ 78.062240][ T4256] device veth0_vlan entered promiscuous mode [ 78.076338][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.089994][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.107413][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.134070][ T4256] device veth1_vlan entered promiscuous mode [ 78.146466][ T4261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.156191][ T4261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.165800][ T4261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.174872][ T4261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.190630][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.200613][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.241520][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.251688][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.260742][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.269213][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.280386][ T4253] device veth0_macvtap entered promiscuous mode [ 78.306805][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.317214][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.328971][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.337621][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.346592][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.355327][ T4260] device veth0_vlan entered promiscuous mode [ 78.366245][ T4253] device veth1_macvtap entered promiscuous mode [ 78.403540][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.417585][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.426429][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.436548][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.448497][ T4260] device veth1_vlan entered promiscuous mode [ 78.479893][ T4256] device veth0_macvtap entered promiscuous mode [ 78.492724][ T4256] device veth1_macvtap entered promiscuous mode [ 78.539238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.540279][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.552551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.563331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.564158][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.573926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.578834][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 78.584268][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 78.588128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.592690][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 78.615072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.624084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.635536][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.646864][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.659588][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 78.660647][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.665635][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 78.685434][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.696399][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.709923][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.724614][ T4253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.733496][ T4253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.744408][ T4253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.753449][ T4253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.764567][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.774291][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.784824][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.794107][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.810789][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.822392][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.833064][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.844717][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.856337][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.880634][ T4260] device veth0_macvtap entered promiscuous mode [ 78.904808][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.914609][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.923940][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.936533][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.945610][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.954532][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.963755][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.972216][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.981835][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.992284][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.003091][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.013174][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.023872][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.035875][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.047238][ T4260] device veth1_macvtap entered promiscuous mode [ 79.065311][ T4262] device veth0_vlan entered promiscuous mode [ 79.076716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.085810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.095043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.107372][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.116577][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.125961][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.135023][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.165498][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.179361][ T4262] device veth1_vlan entered promiscuous mode [ 79.181336][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.219186][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.294762][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.316622][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.327055][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.379533][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.392978][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.403753][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.416580][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.436904][ T4262] device veth0_macvtap entered promiscuous mode [ 79.469268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.485520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.495421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.505633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.517043][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.528591][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.538434][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.550512][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.560816][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.572530][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.588255][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.600919][ T4262] device veth1_macvtap entered promiscuous mode [ 79.640641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.663063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.686851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.696795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.723550][ T4260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.733320][ T4260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.749271][ T4260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.758091][ T4260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.785486][ T4339] loop0: detected capacity change from 0 to 512 [ 79.807309][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.817750][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.829861][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.839348][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.853983][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.865460][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.877966][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.889391][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.899913][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.911122][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.916941][ T4339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.924717][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.937956][ T4339] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.955325][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.967557][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.989502][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.016336][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.047834][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.058260][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.093081][ T4339] netlink: 'syz.0.7': attribute type 10 has an invalid length. [ 80.117270][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.138503][ T4339] team0: Port device batadv0 added [ 80.151867][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.162866][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.173550][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.185466][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.195804][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.206605][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.217878][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.228487][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.246704][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.274816][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 80.292702][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.306230][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.310508][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.331788][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.342093][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.353846][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.366447][ T4262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.389789][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.406209][ T4262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.498383][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.517305][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.537946][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.554310][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.579934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.595709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.658974][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 80.659807][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 80.665197][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 80.739162][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 80.745284][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 80.772237][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.837167][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.878374][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.917145][ T26] audit: type=1326 audit(1732926801.506:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 80.941654][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.992786][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.020953][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.028283][ T26] audit: type=1326 audit(1732926801.506:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 81.095426][ T26] audit: type=1326 audit(1732926801.506:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 81.125247][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.167165][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.187467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.206300][ T26] audit: type=1326 audit(1732926801.616:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 81.569149][ T4299] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.747587][ T4380] loop1: detected capacity change from 0 to 512 [ 81.824562][ T4299] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 81.846341][ T4299] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 81.854194][ T4380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.901901][ T4380] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 81.919124][ T4380] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.919391][ T4385] loop0: detected capacity change from 0 to 764 [ 81.960683][ T4299] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.044449][ T4299] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.114914][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.147072][ T4299] usb 3-1: Product: syz [ 82.158416][ T4299] usb 3-1: Manufacturer: syz [ 82.209378][ T4299] usb 3-1: SerialNumber: syz [ 82.291934][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 82.343763][ T4392] loop4: detected capacity change from 0 to 1024 [ 82.437538][ T4392] EXT4-fs: Ignoring removed nobh option [ 82.508820][ T4392] EXT4-fs: Ignoring removed orlov option [ 82.599369][ T4392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.725565][ T26] audit: type=1800 audit(1732926801.010:6): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.21" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 82.986670][ T4406] loop0: detected capacity change from 0 to 128 [ 83.033650][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 83.135937][ T4406] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 83.211097][ T4406] FAT-fs (loop0): Filesystem has been set read-only [ 83.218968][ T4409] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 84.096573][ T4430] loop1: detected capacity change from 0 to 764 [ 84.413951][ T4440] loop0: detected capacity change from 0 to 512 [ 84.511757][ T4440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.595998][ T4440] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 84.669749][ T4440] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.888873][ T4299] usb 3-1: 0:2 : does not exist [ 84.941666][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 84.977176][ T4299] usb 3-1: USB disconnect, device number 2 [ 85.137450][ T4452] loop2: detected capacity change from 0 to 1024 [ 85.151335][ T4456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 85.185360][ T4452] EXT4-fs: Ignoring removed nobh option [ 85.234307][ T4452] EXT4-fs: Ignoring removed orlov option [ 85.290596][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.317793][ T4452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.481420][ T26] audit: type=1800 audit(1732926803.770:7): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.41" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 85.679444][ T4471] dccp_close: ABORT with 1 bytes unread [ 85.687954][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 86.328752][ T22] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 86.564403][ T22] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 86.639829][ T22] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 86.766669][ T4489] loop1: detected capacity change from 0 to 2048 [ 86.791520][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.801890][ T4489] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 86.831459][ T7] cfg80211: failed to load regulatory.db [ 86.832578][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.896175][ T4499] loop4: detected capacity change from 0 to 2048 [ 86.899954][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.963808][ T22] usb 3-1: Product: syz [ 86.969996][ T4499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.979600][ T22] usb 3-1: Manufacturer: syz [ 86.984328][ T22] usb 3-1: SerialNumber: syz [ 87.010889][ T4245] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.062472][ T4489] loop1: detected capacity change from 0 to 256 [ 87.114045][ T4489] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.164532][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 87.405502][ T4510] loop3: detected capacity change from 0 to 2048 [ 87.491966][ T4510] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.61: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 87.602231][ T4510] EXT4-fs (loop3): Remounting filesystem read-only [ 87.703497][ T4510] EXT4-fs (loop3): get root inode failed [ 87.733273][ T4510] EXT4-fs (loop3): mount failed [ 88.189604][ T4536] Zero length message leads to an empty skb [ 88.711642][ T4551] syz.4.77 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.925907][ T22] usb 3-1: 0:2 : does not exist [ 88.988964][ T22] usb 3-1: USB disconnect, device number 3 [ 89.281866][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.282564][ T4568] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 89.605578][ T4579] loop4: detected capacity change from 0 to 2048 [ 89.650253][ T26] audit: type=1326 audit(1732926806.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 89.697644][ T4579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.721807][ T26] audit: type=1326 audit(1732926806.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 89.799590][ T26] audit: type=1326 audit(1732926806.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 90.186683][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 90.350765][ T1180] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.494942][ T26] audit: type=1326 audit(1732926806.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 90.553657][ T1180] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 90.596519][ T26] audit: type=1326 audit(1732926806.240:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 90.618601][ T1180] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 90.625127][ T26] audit: type=1326 audit(1732926806.240:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 90.676161][ T1180] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.718508][ T1180] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.726683][ T26] audit: type=1326 audit(1732926806.240:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 90.758429][ T1180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.793997][ T1180] usb 2-1: Product: syz [ 90.798236][ T1180] usb 2-1: Manufacturer: syz [ 90.838647][ T1180] usb 2-1: SerialNumber: syz [ 90.873827][ T26] audit: type=1326 audit(1732926806.240:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 90.922220][ T26] audit: type=1326 audit(1732926806.240:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 90.960371][ T26] audit: type=1326 audit(1732926806.250:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e82580809 code=0x7ffc0000 [ 91.068054][ T4606] loop3: detected capacity change from 0 to 512 [ 91.112822][ T4606] EXT4-fs: Ignoring removed i_version option [ 91.128879][ T4606] EXT4-fs: Ignoring removed oldalloc option [ 91.134906][ T4606] EXT4-fs: quotafile must be on filesystem root [ 92.390136][ T4640] mmap: syz.3.117 (4640) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.776238][ T1180] usb 2-1: 0:2 : does not exist [ 92.816322][ T1180] usb 2-1: USB disconnect, device number 2 [ 92.941519][ T4657] device pim6reg1 entered promiscuous mode [ 93.079272][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.303649][ T4671] loop3: detected capacity change from 0 to 256 [ 93.329394][ T4671] ======================================================= [ 93.329394][ T4671] WARNING: The mand mount option has been deprecated and [ 93.329394][ T4671] and is ignored by this kernel. Remove the mand [ 93.329394][ T4671] option from the mount to silence this warning. [ 93.329394][ T4671] ======================================================= [ 93.516011][ T4671] FAT-fs (loop3): Directory bread(block 64) failed [ 93.553309][ T4671] FAT-fs (loop3): Directory bread(block 65) failed [ 93.577035][ T4671] FAT-fs (loop3): Directory bread(block 66) failed [ 93.619360][ T4671] FAT-fs (loop3): Directory bread(block 67) failed [ 93.626042][ T4671] FAT-fs (loop3): Directory bread(block 68) failed [ 93.670005][ T4671] FAT-fs (loop3): Directory bread(block 69) failed [ 93.759763][ T4671] FAT-fs (loop3): Directory bread(block 70) failed [ 93.766587][ T4671] FAT-fs (loop3): Directory bread(block 71) failed [ 93.790614][ T4671] FAT-fs (loop3): Directory bread(block 72) failed [ 93.892281][ T4671] FAT-fs (loop3): Directory bread(block 73) failed [ 93.989429][ T4298] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.214681][ T4298] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 94.335697][ T4298] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 94.508679][ T4298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.570134][ T4298] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.653392][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.673664][ T4298] usb 5-1: Product: syz [ 94.677907][ T4298] usb 5-1: Manufacturer: syz [ 94.708012][ T4298] usb 5-1: SerialNumber: syz [ 94.861794][ T4709] loop0: detected capacity change from 0 to 512 [ 94.916338][ T4709] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.145: corrupted xattr block 255 [ 94.960440][ T4709] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 94.968790][ T4709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.989116][ T4709] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.145: corrupted xattr block 255 [ 95.211647][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 95.567112][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 95.567129][ T26] audit: type=1326 audit(1732926808.400:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 95.642408][ T26] audit: type=1326 audit(1732926808.400:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 95.666639][ T26] audit: type=1326 audit(1732926808.470:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 95.689597][ T26] audit: type=1326 audit(1732926808.480:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 95.712429][ T26] audit: type=1326 audit(1732926808.480:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 95.735116][ T26] audit: type=1326 audit(1732926808.490:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 95.780434][ T26] audit: type=1326 audit(1732926808.490:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 95.854669][ T26] audit: type=1326 audit(1732926808.490:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 95.962117][ T26] audit: type=1326 audit(1732926808.660:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4741 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 96.036135][ T26] audit: type=1326 audit(1732926808.670:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4741 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 96.442625][ T4760] smc: net device bond0 applied user defined pnetid SYZ0 [ 96.514384][ T4762] netlink: 116 bytes leftover after parsing attributes in process `syz.2.165'. [ 96.551933][ T4762] smc: net device bond0 erased user defined pnetid SYZ0 [ 96.640581][ T4298] usb 5-1: 0:2 : does not exist [ 96.693189][ T4298] usb 5-1: USB disconnect, device number 2 [ 96.911937][ T4779] netlink: 'syz.2.172': attribute type 11 has an invalid length. [ 96.922551][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.326969][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 97.938930][ T4298] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 98.164486][ T4298] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 98.199736][ T4803] loop3: detected capacity change from 0 to 128 [ 98.247417][ T4298] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 98.507592][ T4298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.535915][ T4298] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.554396][ T4803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.555367][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.588113][ T4298] usb 5-1: Product: syz [ 98.592818][ T4298] usb 5-1: Manufacturer: syz [ 98.597466][ T4298] usb 5-1: SerialNumber: syz [ 98.621386][ T4803] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.866508][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 98.981637][ T4828] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 99.148169][ T4832] loop2: detected capacity change from 0 to 512 [ 99.173073][ T4832] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.195413][ T4832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.253472][ T4832] EXT4-fs (loop2): 1 truncate cleaned up [ 99.305643][ T4832] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.375043][ T4840] loop0: detected capacity change from 0 to 164 [ 99.410731][ T4840] syz.0.196: attempt to access beyond end of device [ 99.410731][ T4840] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 99.436108][ T4840] syz.0.196: attempt to access beyond end of device [ 99.436108][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.469409][ T4840] syz.0.196: attempt to access beyond end of device [ 99.469409][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.509805][ T4840] syz.0.196: attempt to access beyond end of device [ 99.509805][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.545551][ T4840] syz.0.196: attempt to access beyond end of device [ 99.545551][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.620170][ T4840] syz.0.196: attempt to access beyond end of device [ 99.620170][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.647563][ T4840] syz.0.196: attempt to access beyond end of device [ 99.647563][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.697093][ T4840] syz.0.196: attempt to access beyond end of device [ 99.697093][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.727201][ T4846] Invalid ELF header magic: != ELF [ 99.735057][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 99.764741][ T4840] syz.0.196: attempt to access beyond end of device [ 99.764741][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.799069][ T4840] syz.0.196: attempt to access beyond end of device [ 99.799069][ T4840] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.808863][ T4848] x_tables: unsorted entry at hook 2 [ 99.990411][ T4855] loop3: detected capacity change from 0 to 128 [ 100.508018][ T4868] loop0: detected capacity change from 0 to 128 [ 100.573649][ T4298] usb 5-1: 0:2 : does not exist [ 100.620307][ T4868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.633009][ T4298] usb 5-1: USB disconnect, device number 3 [ 100.648883][ T4868] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.834584][ T4877] loop4: detected capacity change from 0 to 512 [ 100.841741][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 100.841756][ T26] audit: type=1326 audit(1732926811.810:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 100.864215][ T4877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.890057][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.968670][ T26] audit: type=1326 audit(1732926811.840:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 100.995708][ T4877] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.069236][ T26] audit: type=1326 audit(1732926811.840:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 101.095443][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 101.096818][ T26] audit: type=1326 audit(1732926811.840:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 101.108775][ T4877] EXT4-fs (loop4): 1 truncate cleaned up [ 101.125503][ T26] audit: type=1326 audit(1732926811.840:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 101.152193][ T26] audit: type=1326 audit(1732926812.100:60): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 101.176404][ T26] audit: type=1326 audit(1732926812.100:61): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 101.199244][ T4877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.244834][ T4892] syz.1.213[4892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.262229][ T4892] syz.1.213[4892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.311667][ T26] audit: type=1326 audit(1732926812.120:62): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 101.458939][ T26] audit: type=1326 audit(1732926812.120:63): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 101.517265][ T26] audit: type=1326 audit(1732926812.120:64): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 101.561538][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 101.574324][ T4900] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 102.019130][ T22] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 102.253148][ T22] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 102.335520][ T22] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.533134][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.571231][ T22] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.588609][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.607162][ T22] usb 1-1: Product: syz [ 102.612007][ T22] usb 1-1: Manufacturer: syz [ 102.631147][ T22] usb 1-1: SerialNumber: syz [ 102.901779][ T4920] capability: warning: `syz.4.224' uses 32-bit capabilities (legacy support in use) [ 103.024864][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 103.908479][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 104.227326][ T4972] syz.2.245[4972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.227439][ T4972] syz.2.245[4972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.678313][ T22] usb 1-1: 0:2 : does not exist [ 104.768971][ T22] usb 1-1: USB disconnect, device number 2 [ 104.832136][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 105.009600][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.328345][ T5013] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.353182][ T5013] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.974750][ T5017] loop3: detected capacity change from 0 to 256 [ 106.042179][ T5017] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 106.157291][ T5019] loop2: detected capacity change from 0 to 512 [ 106.173898][ T4245] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.190987][ T5019] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.263234][ T5019] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 106.360575][ T5019] EXT4-fs (loop2): 1 truncate cleaned up [ 106.366539][ T5019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.649112][ T4296] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 106.887159][ T4296] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 106.963320][ T4296] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 107.139024][ T4296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.171737][ T4296] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.173354][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 107.186974][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.211148][ T4296] usb 1-1: Product: syz [ 107.215371][ T4296] usb 1-1: Manufacturer: syz [ 107.240782][ T4296] usb 1-1: SerialNumber: syz [ 107.251083][ T5033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.269'. [ 107.503949][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 107.503964][ T26] audit: type=1326 audit(1732926816.430:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.2.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 107.604886][ T26] audit: type=1326 audit(1732926816.470:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.2.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 107.628228][ T26] audit: type=1326 audit(1732926816.470:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.2.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 107.652370][ T26] audit: type=1326 audit(1732926816.470:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.2.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 107.675807][ T26] audit: type=1326 audit(1732926816.470:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.2.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c3b80809 code=0x7ffc0000 [ 107.967680][ T5053] syz.2.277[5053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.967810][ T5053] syz.2.277[5053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.019521][ T26] audit: type=1326 audit(1732926815.310:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 108.061019][ T26] audit: type=1326 audit(1732926815.310:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 108.096723][ T26] audit: type=1326 audit(1732926815.360:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 108.126494][ T26] audit: type=1326 audit(1732926815.360:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 108.165209][ T26] audit: type=1326 audit(1732926815.360:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 108.698428][ T5059] device syzkaller0 entered promiscuous mode [ 109.283983][ T4296] usb 1-1: 0:2 : does not exist [ 109.341226][ T4296] usb 1-1: USB disconnect, device number 3 [ 109.555313][ T5087] syz.0.290 uses obsolete (PF_INET,SOCK_PACKET) [ 109.650590][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.769200][ T5074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.283'. [ 110.802966][ T5085] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.838855][ T5085] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 111.568135][ T5118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.301'. [ 111.658898][ T1180] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 111.794496][ T5124] loop0: detected capacity change from 0 to 512 [ 111.859854][ T5124] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.304: casefold flag without casefold feature [ 111.860662][ T1180] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 111.890761][ T1180] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 111.903040][ T1180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.915767][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 111.916055][ T1180] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.934846][ T1180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.944853][ T1180] usb 5-1: Product: syz [ 111.949305][ T5124] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.304: couldn't read orphan inode 15 (err -117) [ 111.961626][ T1180] usb 5-1: Manufacturer: syz [ 111.966495][ T1180] usb 5-1: SerialNumber: syz [ 112.018871][ T5124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.544630][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 112.767065][ T5155] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 113.198191][ T5168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.316'. [ 113.527284][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 113.563356][ T5174] loop0: detected capacity change from 0 to 512 [ 113.600752][ T5174] EXT4-fs: Ignoring removed orlov option [ 113.650432][ T5174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.706652][ T5174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.845310][ T5174] EXT4-fs (loop0): 1 orphan inode deleted [ 113.868776][ T5174] EXT4-fs (loop0): 1 truncate cleaned up [ 113.879077][ T5174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.135121][ T5193] program syz.2.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.137254][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 114.144873][ T5193] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 114.402650][ T5199] loop0: detected capacity change from 0 to 128 [ 114.481665][ T5199] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.537977][ T5199] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.558379][ T5202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.331'. [ 114.736432][ T1180] usb 5-1: 0:2 : does not exist [ 114.766334][ T1180] usb 5-1: USB disconnect, device number 4 [ 114.848056][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 114.919016][ T5213] program syz.3.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.028712][ T5217] ip6t_rpfilter: unknown options [ 115.034331][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.263368][ T5226] loop4: detected capacity change from 0 to 512 [ 115.282987][ T5231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'. [ 115.409855][ T5226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.439808][ T5237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.344'. [ 115.457931][ T5226] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.576132][ T5239] Illegal XDP return value 4294967274 on prog (id 139) dev N/A, expect packet loss! [ 115.627110][ T5243] Process accounting resumed [ 115.655847][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 115.655863][ T26] audit: type=1326 audit(1732926821.270:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 115.685370][ T26] audit: type=1326 audit(1732926821.300:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 116.068766][ T4301] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.334651][ T4301] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 116.413318][ T4301] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 116.576684][ T4301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.635750][ T5243] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 116.657594][ T4301] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.671172][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.685642][ T4301] usb 4-1: Product: syz [ 116.690273][ T4301] usb 4-1: Manufacturer: syz [ 116.694899][ T4301] usb 4-1: SerialNumber: syz [ 116.765248][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 116.903031][ T26] audit: type=1326 audit(1732926822.520:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bf780809 code=0x7ffc0000 [ 116.969023][ T26] audit: type=1326 audit(1732926822.550:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bf780809 code=0x7ffc0000 [ 116.979522][ T5258] loop1: detected capacity change from 0 to 1024 [ 117.083108][ T26] audit: type=1326 audit(1732926822.550:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fa5bf780809 code=0x7ffc0000 [ 117.122563][ T26] audit: type=1326 audit(1732926822.550:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bf780809 code=0x7ffc0000 [ 117.128962][ T5258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.208797][ T26] audit: type=1326 audit(1732926821.000:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bf780809 code=0x7ffc0000 [ 117.249391][ T5258] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.288637][ T26] audit: type=1326 audit(1732926821.000:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bf780809 code=0x7ffc0000 [ 117.359703][ T26] audit: type=1326 audit(1732926821.000:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5bf780809 code=0x7ffc0000 [ 117.424149][ T26] audit: type=1326 audit(1732926821.000:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bf780809 code=0x7ffc0000 [ 117.497331][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 117.516417][ T5272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'. [ 118.277122][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 118.648242][ T5298] loop0: detected capacity change from 0 to 128 [ 118.655280][ T4301] usb 4-1: 0:2 : does not exist [ 118.679882][ T4301] usb 4-1: USB disconnect, device number 2 [ 118.776413][ T5306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.369'. [ 118.989873][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.396226][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 119.435152][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 119.467847][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.506706][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.529608][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.572743][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.612040][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.646480][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.677325][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.724280][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.829150][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 119.973347][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 120.136770][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 120.305325][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 120.462751][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 120.542606][ T4332] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 120.600647][ T4332] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 120.838833][ T5353] loop1: detected capacity change from 0 to 512 [ 120.845949][ T5353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.863972][ T22] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 120.947949][ T5356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.384'. [ 121.020570][ T5353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.060527][ T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 121.069997][ T22] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 121.101985][ T5353] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.105118][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.171592][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.218918][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.247318][ T22] usb 4-1: Product: syz [ 121.277700][ T22] usb 4-1: Manufacturer: syz [ 121.283558][ T22] usb 4-1: SerialNumber: syz [ 121.324500][ T5353] EXT4-fs (loop1): unmounting filesystem. [ 121.445802][ T5372] loop1: detected capacity change from 0 to 128 [ 121.589197][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 121.589213][ T26] audit: type=1326 audit(1732926825.430:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 121.686701][ T26] audit: type=1326 audit(1732926825.470:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 121.744621][ T26] audit: type=1326 audit(1732926825.480:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 121.847902][ T26] audit: type=1326 audit(1732926825.480:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 121.915636][ T26] audit: type=1326 audit(1732926825.480:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d6180809 code=0x7ffc0000 [ 122.033196][ T26] audit: type=1804 audit(1732926823.020:211): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.388" name="/newroot/84/file0/bus" dev="loop1" ino=1048600 res=1 errno=0 [ 122.167798][ T26] audit: type=1800 audit(1732926823.020:212): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.388" name="bus" dev="loop1" ino=1048600 res=0 errno=0 [ 122.175089][ T5394] loop1: detected capacity change from 0 to 256 [ 122.648109][ T5406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.397'. [ 122.792637][ T22] usb 4-1: 0:2 : does not exist [ 122.910170][ T22] usb 4-1: USB disconnect, device number 3 [ 123.858136][ T5420] loop4: detected capacity change from 0 to 512 [ 123.907263][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.404'. [ 123.934145][ T5420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.961038][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.027457][ T5420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.052951][ T5420] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.159094][ T5420] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 124.180582][ T5420] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 124.204482][ T5420] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.403: Failed to acquire dquot type 0 [ 124.240513][ T5433] loop3: detected capacity change from 0 to 164 [ 124.402326][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 124.607974][ T5446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.411'. [ 124.998729][ T22] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 125.187685][ T22] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 125.280919][ T22] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 125.521910][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.553874][ T5455] process 'syz.3.414' launched './file1' with NULL argv: empty string added [ 125.580582][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.625060][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.656682][ T22] usb 5-1: Product: syz [ 125.671936][ T22] usb 5-1: Manufacturer: syz [ 125.687069][ T22] usb 5-1: SerialNumber: syz [ 126.329261][ T5476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.424'. [ 126.660827][ T5488] loop1: detected capacity change from 0 to 128 [ 126.673344][ T5486] loop0: detected capacity change from 0 to 512 [ 126.689443][ T5486] EXT4-fs: Ignoring removed oldalloc option [ 126.748740][ T5486] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm gtp: Parent and EA inode have the same ino 15 [ 126.864052][ T5486] EXT4-fs (loop0): Remounting filesystem read-only [ 126.886032][ T5486] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm gtp: Parent and EA inode have the same ino 15 [ 126.980011][ T5486] EXT4-fs (loop0): Remounting filesystem read-only [ 126.989176][ T5486] EXT4-fs (loop0): 1 orphan inode deleted [ 127.017588][ T5486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.053099][ T26] audit: type=1326 audit(1732926825.920:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.150264][ T5494] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 127.157471][ T26] audit: type=1326 audit(1732926825.980:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.204643][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 127.211065][ T26] audit: type=1326 audit(1732926825.980:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.304142][ T26] audit: type=1326 audit(1732926825.980:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.388830][ T26] audit: type=1326 audit(1732926826.000:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.436224][ T26] audit: type=1326 audit(1732926826.000:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.450330][ T5499] syz.1.434[5499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.478192][ T5499] syz.1.434[5499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.517193][ T26] audit: type=1326 audit(1732926826.000:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.558323][ T5500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'. [ 127.603650][ T26] audit: type=1326 audit(1732926826.000:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.650968][ T22] usb 5-1: 0:2 : does not exist [ 127.690061][ T5504] netlink: 'syz.0.436': attribute type 4 has an invalid length. [ 127.700951][ T22] usb 5-1: USB disconnect, device number 5 [ 127.727627][ T26] audit: type=1326 audit(1732926826.000:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ac780809 code=0x7ffc0000 [ 127.795427][ T26] audit: type=1326 audit(1732926826.000:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84ac77f170 code=0x7ffc0000 [ 127.845050][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'. [ 127.970293][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.076486][ T5504] syz.0.436 (5504) used greatest stack depth: 20024 bytes left [ 128.306689][ T5517] device syzkaller0 entered promiscuous mode [ 128.421946][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 128.848935][ T14] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 129.083658][ T14] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 129.201400][ T14] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 129.330427][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.389715][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.410428][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.419695][ T14] usb 1-1: Product: syz [ 129.424598][ T14] usb 1-1: Manufacturer: syz [ 129.431299][ T14] usb 1-1: SerialNumber: syz [ 130.502040][ T5569] IPVS: lc: UDP 0.0.0.0:0 - no destination available [ 130.584241][ T5570] loop2: detected capacity change from 0 to 1024 [ 130.643363][ T5570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.652112][ T5570] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.470918][ T14] usb 1-1: 0:2 : does not exist [ 131.504451][ T14] usb 1-1: USB disconnect, device number 4 [ 131.624806][ T33] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 131.782588][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.983834][ T5584] loop0: detected capacity change from 0 to 512 [ 132.038405][ T5584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.053910][ T5584] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.149846][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 132.168749][ T5569] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 132.354531][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 132.451359][ T5594] Cannot find set identified by id 0 to match [ 135.285886][ C1] hrtimer: interrupt took 2879236142 ns [ 135.306072][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.312417][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.373315][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 135.574838][ T5596] Process accounting resumed [ 135.646551][ T5600] loop4: detected capacity change from 0 to 128 [ 135.755497][ T5600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.764561][ T5600] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.728921][ T14] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2635 jiffies s: 5289 root: 0x2/. [ 161.762732][ T14] rcu: blocking rcu_node structures (internal RCU debug): [ 161.776156][ T14] Sending NMI from CPU 0 to CPUs 1: [ 161.781730][ C1] NMI backtrace for cpu 1 [ 161.781752][ C1] CPU: 1 PID: 5594 Comm: syz.1.465 Not tainted 6.1.119-syzkaller #0 [ 161.781770][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.781779][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 161.781818][ C1] Code: 48 8b 3d f8 5d 10 0d 48 89 de 5b e9 47 b2 56 00 cc cc cc cc cc cc cc 48 8b 04 24 65 48 8b 0d 44 d3 77 7e 65 8b 15 45 d3 77 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 161.781834][ C1] RSP: 0018:ffffc900001e0cb8 EFLAGS: 00000082 [ 161.781849][ C1] RAX: ffffffff88da9e01 RBX: ffff88807b991330 RCX: ffff888028a1bb80 [ 161.781862][ C1] RDX: 0000000000010003 RSI: 0000000000000001 RDI: 0000000000000000 [ 161.781872][ C1] RBP: ffff88807b9912e8 R08: ffffffff88da9da8 R09: 0000000000000003 [ 161.781884][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807b991000 [ 161.781896][ C1] R13: ffff88807b991340 R14: dffffc0000000000 R15: ffff88807b991328 [ 161.781909][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 161.781923][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.781934][ C1] CR2: 000000110c3826ec CR3: 000000000d08e000 CR4: 00000000003506e0 [ 161.781949][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.781958][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.781968][ C1] Call Trace: [ 161.781973][ C1] [ 161.781979][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 161.782011][ C1] ? read_lock_is_recursive+0x10/0x10 [ 161.782039][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 161.782065][ C1] ? nmi_handle+0x25/0x440 [ 161.782098][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 161.782113][ C1] ? nmi_handle+0x12e/0x440 [ 161.782139][ C1] ? nmi_handle+0x25/0x440 [ 161.782164][ C1] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 161.782185][ C1] ? default_do_nmi+0x62/0x150 [ 161.782212][ C1] ? exc_nmi+0xa8/0x100 [ 161.782236][ C1] ? end_repeat_nmi+0x16/0x31 [ 161.782266][ C1] ? advance_sched+0x148/0x970 [ 161.782285][ C1] ? advance_sched+0x1a1/0x970 [ 161.782305][ C1] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 161.782327][ C1] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 161.782349][ C1] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 161.782371][ C1] [ 161.782375][ C1] [ 161.782380][ C1] advance_sched+0x1a1/0x970 [ 161.782403][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 161.782423][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 161.782443][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 161.782474][ C1] ? hrtimer_interrupt+0x980/0x980 [ 161.782499][ C1] hrtimer_interrupt+0x392/0x980 [ 161.782531][ C1] __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 161.782557][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 161.782575][ C1] [ 161.782579][ C1] [ 161.782584][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 161.782610][ C1] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 161.782634][ C1] Code: 2b 00 74 08 4c 89 f7 e8 af 81 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 161.782647][ C1] RSP: 0018:ffffc90004a3f140 EFLAGS: 00000206 [ 161.782660][ C1] RAX: 0000000000000001 RBX: 1ffff92000947e34 RCX: 1ffff92000947dd4 [ 161.782671][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c1340 RDI: ffffffff8b5e6200 [ 161.782684][ C1] RBP: ffffc90004a3f290 R08: dffffc0000000000 R09: fffffbfff224984d [ 161.782696][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000947e30 [ 161.782707][ C1] R13: dffffc0000000000 R14: ffffc90004a3f1a0 R15: 0000000000000246 [ 161.782731][ C1] ? read_lock_is_recursive+0x10/0x10 [ 161.782757][ C1] ? __folio_memcg_unlock+0x104/0x120 [ 161.782783][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 161.782806][ C1] ? folio_memcg_lock+0x85/0x380 [ 161.782830][ C1] ? page_ext_put+0x98/0xb0 [ 161.782859][ C1] ? pfn_valid+0xf6/0x440 [ 161.782873][ C1] pfn_valid+0x113/0x440 [ 161.782886][ C1] ? pfn_valid+0xf6/0x440 [ 161.782902][ C1] page_table_check_clear+0x1e/0x6d0 [ 161.782930][ C1] unmap_page_range+0x1b4a/0x2740 [ 161.782963][ C1] ? copy_page_range+0x4660/0x4660 [ 161.782981][ C1] ? uprobe_munmap+0x17c/0x400 [ 161.783008][ C1] ? unmap_single_vma+0x1af/0x290 [ 161.783030][ C1] unmap_vmas+0x48b/0x640 [ 161.783049][ C1] ? unmap_vmas+0x3d0/0x640 [ 161.783068][ C1] ? unmap_page_range+0x2740/0x2740 [ 161.783088][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 161.783121][ C1] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 161.783141][ C1] exit_mmap+0x249/0x980 [ 161.783158][ C1] ? vm_brk+0x20/0x20 [ 161.783171][ C1] ? memset+0x1f/0x40 [ 161.783201][ C1] ? uprobe_clear_state+0x271/0x280 [ 161.783219][ C1] ? mm_update_next_owner+0x51b/0x640 [ 161.783246][ C1] __mmput+0x115/0x3c0 [ 161.783262][ C1] exit_mm+0x226/0x300 [ 161.783287][ C1] ? do_exit+0x26a0/0x26a0 [ 161.783310][ C1] ? taskstats_exit+0x399/0x920 [ 161.783326][ C1] ? tty_audit_exit+0x150/0x1f0 [ 161.783353][ C1] do_exit+0x9f6/0x26a0 [ 161.783382][ C1] ? put_task_struct+0x80/0x80 [ 161.783406][ C1] ? get_signal+0x137e/0x17d0 [ 161.783432][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 161.783459][ C1] ? print_irqtrace_events+0x210/0x210 [ 161.783482][ C1] ? _raw_spin_lock_irq+0xdb/0x110 [ 161.783505][ C1] do_group_exit+0x202/0x2b0 [ 161.783528][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 161.783549][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 161.783567][ C1] get_signal+0x16f7/0x17d0 [ 161.783599][ C1] ? ptrace_notify+0x370/0x370 [ 161.783624][ C1] ? futex_wake+0x4ea/0x590 [ 161.783646][ C1] arch_do_signal_or_restart+0xb0/0x1a10 [ 161.783675][ C1] ? do_futex+0x375/0x490 [ 161.783695][ C1] ? get_sigframe_size+0x10/0x10 [ 161.783717][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 161.783748][ C1] ? exit_to_user_mode_loop+0x39/0x100 [ 161.783766][ C1] exit_to_user_mode_loop+0x6a/0x100 [ 161.783783][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 161.783800][ C1] syscall_exit_to_user_mode+0x60/0x270 [ 161.783820][ C1] do_syscall_64+0x47/0xb0 [ 161.783842][ C1] ? clear_bhb_loop+0x45/0xa0 [ 161.783868][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.783891][ C1] RIP: 0033:0x7f84ac780809 [ 161.783909][ C1] Code: Unable to access opcode bytes at 0x7f84ac7807df. [ 161.783916][ C1] RSP: 002b:00007f84ad5180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 161.783932][ C1] RAX: 0000000000000001 RBX: 00007f84ac945fa8 RCX: 00007f84ac780809 [ 161.783943][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f84ac945fac [ 161.783953][ C1] RBP: 00007f84ac945fa0 R08: 0000000000000010 R09: 0000000000000000 [ 161.783963][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84ac945fac [ 161.783974][ C1] R13: 0000000000000000 R14: 00007ffcbd355f70 R15: 00007ffcbd356058 [ 161.783992][ C1]