last executing test programs: 2m33.292516734s ago: executing program 2 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x3, 0x1}, 0x48) 2m29.706648704s ago: executing program 2 (id=155): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev(r0, &(0x7f0000000180), 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x4}]}, 0x40}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 2m26.323845364s ago: executing program 2 (id=164): setitimer(0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000d1d) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 2m25.446735455s ago: executing program 2 (id=167): syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffe, 0x80142) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x28}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 2m23.536638136s ago: executing program 2 (id=172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0xfffffffffffffe53, 0x0}}, 0xd) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xed8b, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x8}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) 2m23.174776853s ago: executing program 2 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./rpc_pipe\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 2m7.60764269s ago: executing program 32 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./rpc_pipe\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 1m40.223793436s ago: executing program 4 (id=303): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x28, r2, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) sendmsg$NL80211_CMD_SET_STATION(r0, 0x0, 0x800) 1m39.969197688s ago: executing program 4 (id=305): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1810002, &(0x7f00000035c0)=ANY=[], 0x1, 0x1d4, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, 0x0, 0x0, 0x8000c61) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000001b00)={0x6, 0x48574653, 0x1, @stepwise={0x9, 0x2, 0xfffffff8, 0x58, 0x9, 0x7b}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x0, 0x7fff7fec}]}) r3 = getpid() write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x17, 0x2, {0xa, './mnt/test'}}, 0x13) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 1m39.661469983s ago: executing program 4 (id=308): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 1m39.405408834s ago: executing program 4 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0xffffffff}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m38.23875056s ago: executing program 4 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090936f70e0dd038e7ff7fc6e5539b324c078b089b3934076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 1m38.083867108s ago: executing program 4 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='10\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='-2 -3\n', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) close(r3) 1m22.767200662s ago: executing program 33 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='10\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='-2 -3\n', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) close(r3) 26.482429657s ago: executing program 3 (id=509): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x7fff, '\x00', @value64=0x2}}) 20.357478936s ago: executing program 3 (id=527): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 20.187604895s ago: executing program 6 (id=528): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 19.803694993s ago: executing program 6 (id=529): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r1, r3, 0x0, 0x7ffff004) 19.469970489s ago: executing program 0 (id=531): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x278, '\x00'/632}, &(0x7f0000000300)=0x2a0) 18.399209979s ago: executing program 0 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 17.11900161s ago: executing program 0 (id=535): socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d8, 0x325, 0x378, 0x3d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x11}, 0x0, 0x230, 0x2a0, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x4000000000000, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x3, 0x10, 0x6, 0x0, "a3248fc87b24ee73f335970c3a5369f49905a21ae893e7653334ffb53ae7806048e252e29e369d98586fe7b4535788469805bc21c887a286f4033514ea854ac9"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xffffff, 0xff000000], 'bond_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x62, 0xbc, 0x1, 0x4}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 16.056960091s ago: executing program 0 (id=538): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560", 0x20) r3 = accept$alg(r2, 0x0, 0x0) recvmsg(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) 15.768103904s ago: executing program 6 (id=541): syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 13.957277099s ago: executing program 6 (id=545): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x5, 0x0) getdents64(r1, 0xffffffffffffffff, 0x43) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000040cc1711104000010203010902780003010870c709040000000101"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x401, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x42, 0x0, 0x0) syz_emit_ethernet(0x28, &(0x7f00000000c0)={@local, @multicast, @void, {@arp={0x806, @generic={0x205, 0x8884, 0x6, 0x6, 0x2, @multicast, "cdf910769795", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}}}}, 0x0) 13.695213942s ago: executing program 3 (id=547): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x500, 0x131) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 12.501652389s ago: executing program 0 (id=552): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 12.092506438s ago: executing program 3 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x801, 0x0) shutdown(r3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 9.805798316s ago: executing program 6 (id=558): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$eJzs3E2IVeUbAPDnnJnxYxz/d/wTTUWglGgRjjrXahVoixZtXAhCH0JDXj/w6oR3ojShLBAhIlpIghDTMlrkokURQbSJoBYtCiJJqBZhWCEt2t2495w7XvQM2dXruU2/H5y573nvued5X85weB845wngP2tNRGyNiKGImIyISt6f5lu8lG2t445Vz+5rbUk0mzt+SyKJiFr17L7OuZL8c0X+s2UR8f+tSTw8fHXcxpGjB6br9drhfH/j7MFnNjaOHN2w/+D03tre2qHqlgemprbcX33wxs313MTLMTW1deS99WtOfvnxa9+0xjuWf9c9jxspWaBzWz+ClWikq50UXG8GzxunXv+o7DEAADdfmq/9h9vr/0oMRbZ4O3/uyUuVeHG07PEBAAAA16/ZHMo/AQAAgMUrkfsDAADAItd5DqBWPbuvs92sZw9W3BtxcVtEjGfxO+8XZ98Ot98fjvzd0pE+xL/rfB9O+g80Hi03/lc7y42/6t1y4899V278p9aVG/+nH8qNv3Z1ufFPzUR8si0rgHD1/S9t1zzoWBIRS/OaBsuv6exDf3vE6k8v3/+OXXX/S+fvf60zXc+LWCfnLpwo6p94JOLi8Yg7hoviJ/Pxk7ymQ682fH18V1H/qosRzbcj1kVx/OiKv3B9iI179tdrm7K/xfGrLzxeKerf/lk2/9EF4o/nxw111YnoxenRXR+sLOjfOZnFv+fu4ut/W9f8/5fX5hjvIf6a2+vbi/rXvZrF373A/Luv/6oe4nbM/dL4saj//S3XcVIAoGdpe22TpJPz7TSdnMzWe7fEaFqfaczet2fm2UO7szXQeIyknaVWth4ZSVr7m/O1SWd/6or9ar6GOFlZ3t6ffHqmvrvsyQMAAMAiNxbx/ROvfDix4or8/+dKlv8DAAAA/36t/P/OubfOtNp/FD4dCQAAAAyKerO337Xy/0snfv085P8AAACwaMn/AQAAYPHr5P9jC9T/W9lVu29TXn/4i8rI0j37l8XmsgcPAAAAXJNW/p9++9j5xpGjB6br9dphDY2BajyU/6cOyniSARtPvxsl3pwAAIC+uLzoL3skAAAAQP+kF5KIaG3rK2vHbl39zkT3t0uSP9vVAZZExHNndrz5/PTs7OHNrf7f5/tnT+f9U2XNAQAAAOjWydM7eTwAAAAAAAAAAAAAADD4bkY58bLnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI3zVwAAAP//QNGSjg==") syz_read_part_table(0x5e1, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0xff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) syz_io_uring_complete(0x0, 0x0) getdents64(r0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000480)='./file2\x00') 8.534325176s ago: executing program 6 (id=559): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket(0x80000000000000a, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 7.748186334s ago: executing program 3 (id=560): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.500653785s ago: executing program 0 (id=561): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x7fff, 0x1, 0x7, 0x2}, {0x3, 0x2, 0x40, 0x4}, {0x6, 0xd, 0xf, 0xde68}, {0x2, 0x4, 0x3, 0xfffff800}, {0x8, 0x0, 0x6, 0xff}, {0x8, 0x2, 0x1, 0x4}]}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4004890) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "e94641e5"}, @global=@item_012={0x1, 0x1, 0x9, "e1"}]}}, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000030000000000000002000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711822000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.458630637s ago: executing program 1 (id=562): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(0x0, r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) 7.229430968s ago: executing program 1 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7.074323236s ago: executing program 3 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 6.218174986s ago: executing program 1 (id=565): syz_read_part_table(0x5e2, &(0x7f00000002c0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.217818916s ago: executing program 5 (id=566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7fff, 0x10, 0x10000000, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x20000800, 0x49, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x3, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x8, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x104000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x9}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x6, 0x6, 0x4}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb8b, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x8, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x1000, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x6, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3a, 0x8, 0x9}, {0x7ffe, 0x57, 0xfffe, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0x80000001, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0xffffffff, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0x249, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x0, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x8, 0x2, 0x60, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x7fff, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x200007, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0x9}, {0xdf2e, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0x80000000, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1001, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x450, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x7, 0x7, 0xe}, {0x86, 0x9, 0x1, 0x9, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0x94d1, 0x9, 0x3, 0x7, 0xff, 0xa}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x1, 0x4}, {0x0, 0x8, 0x9, 0x10, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0xa}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x9}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x1}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0xabc2974b7b1167cf}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x22, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) 5.961429998s ago: executing program 5 (id=567): dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040870) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000200)="450161", 0x3, 0xfffffffffffffffe) fsopen(0x0, 0x0) chdir(0x0) 5.213559433s ago: executing program 1 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\//\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 4.277441188s ago: executing program 5 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x801, 0x0) shutdown(r3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.237057197s ago: executing program 5 (id=573): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.189385564s ago: executing program 1 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 0s ago: executing program 5 (id=575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): ed cc 0x0c25 length: 249 > 3 [ 77.564523][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.586139][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.593642][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.601904][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.619091][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.627294][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.634528][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.643217][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.963147][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 78.036773][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 78.099706][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 78.140238][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.148197][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.156179][ T4274] device bridge_slave_0 entered promiscuous mode [ 78.169323][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.176433][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.184257][ T4274] device bridge_slave_1 entered promiscuous mode [ 78.217357][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 78.239855][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 78.260464][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.277959][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.304996][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.312483][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.320099][ T4285] device bridge_slave_0 entered promiscuous mode [ 78.353143][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.360402][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.368135][ T4285] device bridge_slave_1 entered promiscuous mode [ 78.386982][ T4274] team0: Port device team_slave_0 added [ 78.404587][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.411760][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.419600][ T4273] device bridge_slave_0 entered promiscuous mode [ 78.428346][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.435463][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.443499][ T4273] device bridge_slave_1 entered promiscuous mode [ 78.461310][ T4274] team0: Port device team_slave_1 added [ 78.484314][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.503338][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.510576][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.518536][ T4272] device bridge_slave_0 entered promiscuous mode [ 78.531898][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.539396][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.547479][ T4272] device bridge_slave_1 entered promiscuous mode [ 78.555736][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.583390][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.597281][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.633797][ T4285] team0: Port device team_slave_0 added [ 78.645686][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.652846][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.679024][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.690836][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.700595][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.708546][ T4283] device bridge_slave_0 entered promiscuous mode [ 78.717586][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.731572][ T4285] team0: Port device team_slave_1 added [ 78.751175][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.758219][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.784968][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.796523][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.803610][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.811921][ T4283] device bridge_slave_1 entered promiscuous mode [ 78.820242][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.831593][ T4273] team0: Port device team_slave_0 added [ 78.845740][ T4273] team0: Port device team_slave_1 added [ 78.871254][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.878308][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.904231][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.916926][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.923874][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.949881][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.974409][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.003471][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.015859][ T4272] team0: Port device team_slave_0 added [ 79.022315][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.029535][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.055693][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.093201][ T4272] team0: Port device team_slave_1 added [ 79.104439][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.111479][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.137523][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.152795][ T4274] device hsr_slave_0 entered promiscuous mode [ 79.159562][ T4274] device hsr_slave_1 entered promiscuous mode [ 79.200061][ T4285] device hsr_slave_0 entered promiscuous mode [ 79.206942][ T4285] device hsr_slave_1 entered promiscuous mode [ 79.213412][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.221480][ T4285] Cannot create hsr debugfs directory [ 79.227967][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.234914][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.260967][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.274137][ T4283] team0: Port device team_slave_0 added [ 79.310011][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.317187][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.343312][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.356128][ T4283] team0: Port device team_slave_1 added [ 79.376317][ T4273] device hsr_slave_0 entered promiscuous mode [ 79.382942][ T4273] device hsr_slave_1 entered promiscuous mode [ 79.390463][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.398075][ T4273] Cannot create hsr debugfs directory [ 79.433488][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.440702][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.466773][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.504211][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.511334][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.540040][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.567205][ T4272] device hsr_slave_0 entered promiscuous mode [ 79.573778][ T4272] device hsr_slave_1 entered promiscuous mode [ 79.580373][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.588030][ T4272] Cannot create hsr debugfs directory [ 79.626720][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 79.632957][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 79.659390][ T4283] device hsr_slave_0 entered promiscuous mode [ 79.666207][ T4283] device hsr_slave_1 entered promiscuous mode [ 79.672737][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.681063][ T4283] Cannot create hsr debugfs directory [ 79.706071][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 79.706085][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 79.706264][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 79.930754][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.948166][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.958053][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.966917][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.989397][ T4285] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.998744][ T4285] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.022111][ T4285] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.048315][ T4285] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.090312][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.118627][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.143750][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.153497][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.188563][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.244344][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.254851][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.267198][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.275584][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.298197][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.305026][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.318400][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.329895][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.337216][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.350825][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.359737][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.388579][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.397711][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.409192][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.417857][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.425073][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.433614][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.442585][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.459248][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.470553][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.478698][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.513598][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.521725][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.532560][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.541501][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.558997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.569443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.578475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.586963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.614063][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.624412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.636458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.644736][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.651808][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.660812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.669952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.680332][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.687408][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.694980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.703795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.712291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.725802][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.737919][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.748447][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.758853][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.783254][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.795309][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.813015][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.824929][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.834449][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.845592][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.889901][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.901110][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.912839][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.921330][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.929804][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.944786][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.983903][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.013478][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.042580][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.058416][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.074419][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.108327][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.124402][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.134618][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.141780][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.163731][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.173473][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.182040][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.191020][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.200491][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.207616][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.216495][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.225460][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.260861][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.271180][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.284609][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.291776][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.301321][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.310331][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.319428][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.328956][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.348839][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.378656][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.385750][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.402360][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.410771][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.420932][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.430542][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.437660][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.445401][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.454553][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.464669][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.472678][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.480824][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.488869][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.504587][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.513754][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.522682][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.532840][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.541547][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.552285][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.569730][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.581860][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.593076][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.605183][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.626615][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.634698][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.644757][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.663472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.673141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.682321][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.689493][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.704252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.713815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.722016][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 81.722099][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 81.746767][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.753864][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.783077][ T4283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.786561][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 81.794162][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 81.799487][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 81.811764][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.843702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.855438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.872964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.885563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.898102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.911896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.920819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.933138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.943345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.953722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.963182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.994443][ T4274] device veth0_vlan entered promiscuous mode [ 82.004954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.021978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.032831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.042025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.052067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.061981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.070710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.082349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.092937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.103049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.112071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.130954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.144037][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.161520][ T4274] device veth1_vlan entered promiscuous mode [ 82.178183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.197716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.231388][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.260920][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.275574][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.295329][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.318787][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.330813][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.364591][ T4274] device veth0_macvtap entered promiscuous mode [ 82.385974][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.394406][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.412491][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.421869][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.439502][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.451623][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.463680][ T4285] device veth0_vlan entered promiscuous mode [ 82.482554][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.490562][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.498788][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.510013][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.522638][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.532150][ T4274] device veth1_macvtap entered promiscuous mode [ 82.544605][ T4285] device veth1_vlan entered promiscuous mode [ 82.558465][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.577394][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.585421][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.595038][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.607379][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.625463][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.660016][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.677608][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.686791][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.694760][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.704136][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.729820][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.750168][ T4285] device veth0_macvtap entered promiscuous mode [ 82.774500][ T4272] device veth0_vlan entered promiscuous mode [ 82.782408][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.791432][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.802710][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.812053][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.820726][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.833409][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.843489][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.852547][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.861524][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.881284][ T4285] device veth1_macvtap entered promiscuous mode [ 82.893894][ T4272] device veth1_vlan entered promiscuous mode [ 82.926582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.942110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.950451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.958850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.972301][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.068018][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.082551][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.094710][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.108456][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.123468][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.133390][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.169423][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.180271][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.198265][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.208395][ T4272] device veth0_macvtap entered promiscuous mode [ 83.216902][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.225427][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.242011][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.251643][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.260729][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.269707][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.279038][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.308191][ T4272] device veth1_macvtap entered promiscuous mode [ 83.324389][ T4285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.334639][ T4285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.343997][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.353472][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.379318][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.388739][ T4273] device veth0_vlan entered promiscuous mode [ 83.395087][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.420022][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.428459][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.436479][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.445587][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.455114][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.463950][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.475618][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.486886][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.497254][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.508251][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.521201][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.531595][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.542422][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.553603][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.564228][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.576520][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.601507][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.610491][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.638704][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.647146][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.655068][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.663732][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.672853][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.681930][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.691451][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.701715][ T4273] device veth1_vlan entered promiscuous mode [ 83.712173][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.721638][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.731403][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.742007][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.750410][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.774659][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.785334][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.795390][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 83.804593][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 83.811354][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.822417][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.852321][ T4283] device veth0_vlan entered promiscuous mode [ 83.866905][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 83.872961][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 83.879185][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 83.888822][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.897983][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.906978][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.916333][ T4273] device veth0_macvtap entered promiscuous mode [ 83.958115][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.976059][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.989288][ T4273] device veth1_macvtap entered promiscuous mode [ 83.998563][ T4283] device veth1_vlan entered promiscuous mode [ 84.033225][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.043775][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.052766][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.061043][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.099283][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.116515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.132068][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.144586][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.157286][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.168844][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.179874][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.190370][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.205783][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.219179][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.234080][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.246588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.259964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.276695][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.287109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.296209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.316809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.331348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.343031][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.362276][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.373179][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.390254][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.401175][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.415391][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.433835][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.455852][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.464871][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.481376][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.491543][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.522064][ T4283] device veth0_macvtap entered promiscuous mode [ 84.569430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.580399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.590218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.618818][ T4283] device veth1_macvtap entered promiscuous mode [ 85.187566][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.199450][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.244693][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.265423][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.285813][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.332732][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.359060][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.410450][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.421576][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.433133][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.443765][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.455559][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.472962][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.496745][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.505451][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.541436][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.574077][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.584780][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.595379][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.605634][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.616333][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.627225][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.637931][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.660414][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.688396][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.724919][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.767957][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.786647][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.833051][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.857087][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.866232][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 85.872309][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 85.910298][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.946524][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 85.952635][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 85.959568][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 85.976115][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.984204][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.992784][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.000951][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.079364][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.805337][ T4387] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 86.816613][ T4387] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 88.004426][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.196847][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.429958][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.977486][ T4408] netlink: 'syz.3.14': attribute type 2 has an invalid length. [ 89.161675][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.205597][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.306862][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.355919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 90.785897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 91.786361][ T4450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.235898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 94.274303][ T4475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.355903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.365899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 94.375898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 94.867327][ T4486] loop1: detected capacity change from 0 to 512 [ 94.915157][ T4489] input: syz1 as /devices/virtual/input/input5 [ 94.993945][ T127] cfg80211: failed to load regulatory.db [ 95.034165][ T4486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.084639][ T4486] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.214365][ T4495] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.262661][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 95.531775][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 95.556098][ T127] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.727573][ T4505] device hsr_slave_1 left promiscuous mode [ 95.766122][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 95.788738][ T127] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.803300][ T127] usb 3-1: config 254 has an invalid interface number: 103 but max is 0 [ 95.828981][ T127] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 95.840725][ T127] usb 3-1: config 254 has no interface number 0 [ 96.000112][ T127] usb 3-1: config 254 interface 103 has no altsetting 0 [ 96.135922][ T127] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 96.244529][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.261047][ T127] usb 3-1: Product: syz [ 96.280138][ T127] usb 3-1: Manufacturer: syz [ 96.284838][ T127] usb 3-1: SerialNumber: syz [ 96.364559][ T4519] device syzkaller0 entered promiscuous mode [ 96.466978][ T27] audit: type=1326 audit(1789495897.539:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67fd79e159 code=0x0 [ 96.526634][ T127] usbserial_generic 3-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 96.557810][ T127] usbserial_generic 3-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 96.656243][ T127] usbserial_generic 3-1:254.103: device has no bulk endpoints [ 96.696221][ T4525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 96.735434][ T127] usb 3-1: USB disconnect, device number 2 [ 97.891972][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 97.980119][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.988596][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.242624][ T4548] mmap: syz.2.53 (4548) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.183246][ T4553] sctp: failed to load transform for md5: -2 [ 99.658932][ T4575] loop1: detected capacity change from 0 to 256 [ 99.719945][ T4575] ======================================================= [ 99.719945][ T4575] WARNING: The mand mount option has been deprecated and [ 99.719945][ T4575] and is ignored by this kernel. Remove the mand [ 99.719945][ T4575] option from the mount to silence this warning. [ 99.719945][ T4575] ======================================================= [ 99.844834][ T4575] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 100.097927][ T4580] process 'syz.2.57' launched './file0' with NULL argv: empty string added [ 100.518282][ T4586] device syzkaller0 entered promiscuous mode [ 102.620733][ T4613] netlink: 'syz.2.67': attribute type 3 has an invalid length. [ 102.628438][ T4613] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.67'. [ 103.488358][ T4623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.538857][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 103.678196][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 104.055240][ T4638] kvm [4637]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 104.074864][ T4640] loop2: detected capacity change from 0 to 2048 [ 104.152796][ T4644] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 104.216762][ T4640] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.235470][ T4640] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.283276][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 104.927208][ T4659] loop0: detected capacity change from 0 to 512 [ 104.984200][ T4659] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.014727][ T4659] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.044566][ T4659] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.81: invalid indirect mapped block 9 (level 0) [ 105.066170][ T4659] EXT4-fs (loop0): 1 truncate cleaned up [ 105.072206][ T4659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.268166][ T4666] loop1: detected capacity change from 0 to 128 [ 105.353804][ T4666] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 105.399375][ T4666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.965939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.975932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 105.985911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 105.995905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 106.123227][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 106.346099][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.452599][ T4679] loop0: detected capacity change from 0 to 256 [ 106.495336][ T4679] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.550039][ T24] usb 3-1: config 0 has no interfaces? [ 106.575473][ T27] audit: type=1800 audit(1789495907.639:3): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.88" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 106.598409][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 106.680635][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.774183][ T24] usb 3-1: config 0 descriptor?? [ 106.946202][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 107.129895][ T4277] usb 3-1: USB disconnect, device number 3 [ 107.186969][ T4683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 107.206208][ T4683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 107.220037][ T4683] device ip6gretap0 entered promiscuous mode [ 107.241348][ T4683] device syz_tun entered promiscuous mode [ 107.257751][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 107.330761][ T4688] loop0: detected capacity change from 0 to 128 [ 107.354271][ T4688] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.364768][ T4688] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.968744][ T4697] fuse: Bad value for 'fd' [ 108.455855][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 110.098061][ T4718] overlayfs: failed to resolve './file1/file0': -2 [ 111.847408][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.826782][ T4779] loop2: detected capacity change from 0 to 512 [ 113.912488][ T4779] EXT4-fs: Mount option(s) incompatible with ext2 [ 114.131284][ T4788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.176735][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.184371][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.195947][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.204277][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.212003][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.219521][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.227181][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.234649][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.243234][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.252148][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.269580][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.280294][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 114.387319][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 114.526327][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.732330][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.748230][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.767772][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.780913][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.824516][ T4316] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 114.861816][ T4316] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 114.971853][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.017480][ T4790] bond1: (slave bond0): making interface the new active one [ 115.062229][ T4790] bond1: (slave bond0): Enslaving as an active interface with an up link [ 115.088035][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 115.143499][ T4790] syz.4.114 (4790) used greatest stack depth: 20624 bytes left [ 115.205465][ T4804] netlink: 'syz.4.116': attribute type 8 has an invalid length. [ 115.306066][ T3655] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.497835][ T3655] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 115.519918][ T3655] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 115.559780][ T3655] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 115.587715][ T3655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.603471][ T3655] usb 1-1: Product: syz [ 115.613237][ T3655] usb 1-1: Manufacturer: syz [ 115.622372][ T3655] usb 1-1: SerialNumber: syz [ 115.793522][ T4811] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 115.815404][ T27] audit: type=1800 audit(1789495916.879:4): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.118" name="dev" dev="configfs" ino=35335 res=0 errno=0 [ 115.930845][ T3655] usb 1-1: Can't get UAC3 power state for id 10 [ 115.954935][ T3655] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 115.972818][ T3655] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 116.089726][ T3655] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 116.157160][ T3655] usb 1-1: USB disconnect, device number 2 [ 116.404342][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.665544][ T4836] tipc: Started in network mode [ 116.681777][ T4836] tipc: Node identity 4, cluster identity 4711 [ 116.709520][ T4836] tipc: Node number set to 4 [ 116.877610][ T4838] device syzkaller0 entered promiscuous mode [ 117.239517][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.287406][ T4844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.917216][ T4861] loop0: detected capacity change from 0 to 4096 [ 119.943742][ T4861] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 120.246568][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 121.150860][ T4882] ntfs3: loop0: ino=23, "memory.events.local" mmap(write) compressed not supported [ 121.624902][ T4272] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 121.700798][ T4886] loop4: detected capacity change from 0 to 40427 [ 121.718292][ T4886] F2FS-fs (loop4): invalid crc value [ 121.724747][ T4886] F2FS-fs (loop4): Found nat_bits in checkpoint [ 121.758645][ T4886] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.322001][ T4283] syz-executor: attempt to access beyond end of device [ 122.322001][ T4283] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.020142][ T4908] netlink: 'syz.0.142': attribute type 4 has an invalid length. [ 123.036541][ T4908] netlink: 'syz.0.142': attribute type 7 has an invalid length. [ 124.729587][ T4929] xt_TCPMSS: Only works on TCP SYN packets [ 125.545874][ C0] sched: RT throttling activated [ 128.854723][ T4966] loop4: detected capacity change from 0 to 512 [ 128.969087][ T4961] device lo entered promiscuous mode [ 129.048704][ T4972] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 129.070206][ T4961] device tunl0 entered promiscuous mode [ 129.086035][ T4972] FAT-fs (loop4): Filesystem has been set read-only [ 129.097451][ T4961] device gre0 entered promiscuous mode [ 129.109689][ T4972] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 129.245608][ T4961] device gretap0 entered promiscuous mode [ 129.273108][ T4961] device erspan0 entered promiscuous mode [ 129.299129][ T4961] device ip_vti0 entered promiscuous mode [ 129.322591][ T4961] device ip6_vti0 entered promiscuous mode [ 129.352774][ T4961] device sit0 entered promiscuous mode [ 129.406044][ T3655] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.429743][ T4961] device ip6tnl0 entered promiscuous mode [ 129.464215][ T4961] device ip6gre0 entered promiscuous mode [ 129.493350][ T4961] device syz_tun entered promiscuous mode [ 129.521019][ T4961] device ip6gretap0 entered promiscuous mode [ 129.533632][ T4961] device bridge0 entered promiscuous mode [ 129.551685][ T4961] device vcan0 entered promiscuous mode [ 129.564720][ T4961] device bond0 entered promiscuous mode [ 129.570719][ T4961] device bond_slave_0 entered promiscuous mode [ 129.577524][ T4961] device bond_slave_1 entered promiscuous mode [ 129.588936][ T3655] usb 5-1: Using ep0 maxpacket: 16 [ 129.597311][ T3655] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 129.607402][ T3655] usb 5-1: config 1 has no interface number 0 [ 129.613613][ T3655] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 129.624316][ T3655] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 24896, setting to 1024 [ 129.636206][ T3655] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 129.646756][ T3655] usb 5-1: config 1 interface 105 has no altsetting 0 [ 129.665923][ T4961] device team0 entered promiscuous mode [ 129.671526][ T4961] device team_slave_0 entered promiscuous mode [ 129.679596][ T3655] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 129.688939][ T4961] device team_slave_1 entered promiscuous mode [ 129.695203][ T3655] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 129.707464][ T3655] usb 5-1: Product: syz [ 129.711739][ T3655] usb 5-1: Manufacturer: syz [ 129.716714][ T3655] usb 5-1: SerialNumber: syz [ 129.744628][ T4972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.756864][ T4972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.776745][ T4961] device dummy0 entered promiscuous mode [ 129.802889][ T4961] device nlmon0 entered promiscuous mode [ 129.814380][ T4961] device caif0 entered promiscuous mode [ 129.829926][ T4961] device batadv0 entered promiscuous mode [ 129.858875][ T4961] device vxcan0 entered promiscuous mode [ 129.872459][ T4961] device vxcan1 entered promiscuous mode [ 129.886347][ T4961] device veth0 entered promiscuous mode [ 129.912563][ T4961] device veth1 entered promiscuous mode [ 129.943388][ T4961] device wg0 entered promiscuous mode [ 129.967817][ T4961] device wg1 entered promiscuous mode [ 129.998359][ T4961] device wg2 entered promiscuous mode [ 130.017820][ T4961] device veth0_to_bridge entered promiscuous mode [ 130.056328][ T4961] device veth1_to_bridge entered promiscuous mode [ 130.107648][ T4961] device veth0_to_bond entered promiscuous mode [ 130.140918][ T4961] device veth1_to_bond entered promiscuous mode [ 130.174148][ T4961] device veth0_to_team entered promiscuous mode [ 130.182161][ T4972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.196049][ T4972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.265131][ T4961] device veth1_to_team entered promiscuous mode [ 130.306249][ T4961] device veth0_to_batadv entered promiscuous mode [ 130.327608][ T4961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.344482][ T4961] device batadv_slave_0 entered promiscuous mode [ 130.371597][ T4961] device veth1_to_batadv entered promiscuous mode [ 130.387980][ T4961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.407334][ T4961] device batadv_slave_1 entered promiscuous mode [ 130.435629][ T4961] device xfrm0 entered promiscuous mode [ 130.460303][ T4961] device veth0_to_hsr entered promiscuous mode [ 130.498836][ T4961] device veth1_to_hsr entered promiscuous mode [ 130.541428][ T4961] device hsr0 entered promiscuous mode [ 130.566738][ T4961] device veth1_virt_wifi entered promiscuous mode [ 130.592240][ T4961] device veth0_virt_wifi entered promiscuous mode [ 130.601448][ T4961] device virt_wifi0 entered promiscuous mode [ 130.673305][ T4961] device vlan0 entered promiscuous mode [ 130.686958][ T4961] device vlan1 entered promiscuous mode [ 130.733131][ T4961] device macvlan0 entered promiscuous mode [ 130.761177][ T4961] device macvlan1 entered promiscuous mode [ 130.773575][ T4961] device ipvlan0 entered promiscuous mode [ 130.787349][ T4961] device ipvlan1 entered promiscuous mode [ 131.024713][ T4961] device macvtap0 entered promiscuous mode [ 131.051827][ T4961] device macsec0 entered promiscuous mode [ 131.079854][ T4961] device geneve0 entered promiscuous mode [ 131.104444][ T4961] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.120160][ T4961] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.129866][ T4961] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.139606][ T4961] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.148951][ T4961] device geneve1 entered promiscuous mode [ 131.181246][ T4961] device netdevsim0 entered promiscuous mode [ 131.238460][ T4961] device netdevsim1 entered promiscuous mode [ 131.265523][ T4961] device netdevsim2 entered promiscuous mode [ 131.298683][ T4961] device netdevsim3 entered promiscuous mode [ 131.353113][ T4961] device wlan0 entered promiscuous mode [ 131.378744][ T4961] device wlan1 entered promiscuous mode [ 131.397511][ T4961] device ipip0 entered promiscuous mode [ 131.410401][ T4966] netlink: 96 bytes leftover after parsing attributes in process `syz.4.157'. [ 131.410550][ T4975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 131.414224][ T3655] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 131.414563][ T3655] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 131.414870][ T3655] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 131.442775][ T4982] lo: Caught tx_queue_len zero misconfig [ 131.526617][ T3655] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3a:f5:ed:b0:da:26 [ 131.531278][ T3655] usb 5-1: USB disconnect, device number 2 [ 131.532144][ T3655] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 131.617034][ T3655] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 131.617111][ T3655] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 131.617179][ T3655] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 133.286573][ T4277] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.471196][ T4277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.471332][ T4277] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.471380][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.495606][ T4277] usb 1-1: config 0 descriptor?? [ 133.572637][ T4277] pwc: Askey VC010 type 2 USB webcam detected. [ 133.950965][ T4277] pwc: recv_control_msg error -32 req 02 val 2b00 [ 133.959958][ T4277] pwc: recv_control_msg error -32 req 02 val 2700 [ 133.961899][ T4277] pwc: recv_control_msg error -32 req 02 val 2c00 [ 133.964095][ T4277] pwc: recv_control_msg error -32 req 04 val 1000 [ 133.967601][ T4277] pwc: recv_control_msg error -32 req 04 val 1300 [ 133.969469][ T4277] pwc: recv_control_msg error -32 req 04 val 1400 [ 133.970963][ T4277] pwc: recv_control_msg error -32 req 02 val 2000 [ 133.972599][ T4277] pwc: recv_control_msg error -32 req 02 val 2100 [ 133.975405][ T4277] pwc: recv_control_msg error -32 req 04 val 1500 [ 133.979498][ T4277] pwc: recv_control_msg error -32 req 02 val 2500 [ 134.184648][ T4277] pwc: recv_control_msg error -71 req 02 val 2600 [ 134.185354][ T4277] pwc: recv_control_msg error -71 req 02 val 2900 [ 134.185674][ T4277] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.191330][ T4277] pwc: recv_control_msg error -71 req 04 val 1100 [ 134.191580][ T4277] pwc: recv_control_msg error -71 req 04 val 1200 [ 134.195146][ T4277] pwc: Registered as video103. [ 134.199360][ T4277] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 134.246116][ T4277] usb 1-1: USB disconnect, device number 3 [ 136.050044][ T5048] xt_CONNSECMARK: invalid mode: 0 [ 136.726316][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.726406][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.097492][ T5057] loop4: detected capacity change from 0 to 512 [ 137.126975][ T5057] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.127023][ T5057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.127131][ T5057] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 140.354075][ T5086] device geneve2 entered promiscuous mode [ 140.543082][ T5083] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 141.046540][ T5087] bond1: (slave veth0_to_bond): making interface the new active one [ 141.118884][ T5087] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 141.479734][ T5094] loop4: detected capacity change from 0 to 512 [ 141.528840][ T5094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.778844][ T5094] EXT4-fs (loop4): 1 truncate cleaned up [ 141.791646][ T5094] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.533544][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 142.554671][ T5106] loop3: detected capacity change from 0 to 512 [ 142.901267][ T5118] loop0: detected capacity change from 0 to 8 [ 143.149282][ T5119] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 143.265633][ T5118] SQUASHFS error: lzo decompression failed, data probably corrupt [ 143.274132][ T5118] SQUASHFS error: Failed to read block 0x91: -5 [ 143.280558][ T5118] SQUASHFS error: Unable to read metadata cache entry [8f] [ 143.287925][ T5118] SQUASHFS error: Unable to read inode 0x7 [ 143.426904][ T5106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 143.825441][ T5129] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 144.283304][ T5129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.307897][ T5132] bond2: (slave geneve2): making interface the new active one [ 144.320244][ T5132] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 144.329077][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 144.354278][ T5132] syz.1.202 (5132) used greatest stack depth: 19792 bytes left [ 144.652248][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 144.703488][ T5141] device bond1 entered promiscuous mode [ 144.714960][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 145.146427][ T5150] capability: warning: `syz.0.208' uses deprecated v2 capabilities in a way that may be insecure [ 145.689942][ T5161] loop4: detected capacity change from 0 to 16 [ 145.721041][ T5161] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 145.937947][ T5166] sctp: [Deprecated]: syz.4.213 (pid 5166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.937947][ T5166] Use struct sctp_sack_info instead [ 146.048821][ T5168] netlink: 'syz.4.214': attribute type 2 has an invalid length. [ 146.063915][ T5171] loop0: detected capacity change from 0 to 512 [ 146.086974][ T5172] netlink: 'syz.1.216': attribute type 30 has an invalid length. [ 146.095451][ T5171] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.096783][ T5172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'. [ 146.132693][ T5171] EXT4-fs (loop0): 1 truncate cleaned up [ 146.155962][ T5171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 147.082628][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 148.391040][ T5177] loop3: detected capacity change from 0 to 512 [ 148.459670][ T5177] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.468555][ T5177] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 148.552382][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.553748][ T5208] loop0: detected capacity change from 0 to 4096 [ 149.687661][ T5211] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.819601][ T5221] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.828934][ T5221] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.837697][ T5221] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.846497][ T5221] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.928605][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.937591][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.945366][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.953744][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.961310][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.968714][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.159750][ T5226] loop3: detected capacity change from 0 to 2048 [ 151.264760][ T5226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.350328][ T27] audit: type=1804 audit(1789495952.419:5): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.227" name="/newroot/20/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 151.562503][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 151.743472][ T5226] netlink: 104 bytes leftover after parsing attributes in process `syz.3.227'. [ 151.765001][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.774862][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.789568][ T5224] device bridge_slave_0 entered promiscuous mode [ 151.798335][ T5242] xt_socket: unknown flags 0x40 [ 151.805796][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.820370][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.830802][ T5224] device bridge_slave_1 entered promiscuous mode [ 151.882206][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.923107][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.034813][ T5224] team0: Port device team_slave_0 added [ 152.049411][ T5224] team0: Port device team_slave_1 added [ 152.064298][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.074893][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.114249][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.163094][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.170847][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.205427][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.370420][ T5224] device hsr_slave_0 entered promiscuous mode [ 152.395191][ T5224] device hsr_slave_1 entered promiscuous mode [ 152.435228][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.452654][ T5224] Cannot create hsr debugfs directory [ 153.067263][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 153.561704][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 153.569599][ T5224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.635546][ T5224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.685164][ T5224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.726005][ T5224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.809237][ T5269] loop4: detected capacity change from 0 to 512 [ 153.823777][ T5269] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.860603][ T5269] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 153.893535][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.914197][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.929241][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.944362][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.961798][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.973954][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.998535][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.005638][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.016028][ T3655] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.055600][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.070884][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.085838][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.101375][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.108513][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.118014][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.144363][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.164527][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.191619][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.200632][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.211165][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.215926][ T3655] usb 4-1: Using ep0 maxpacket: 8 [ 154.220009][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.238955][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.256202][ T3655] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 154.299691][ T3655] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 154.316898][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.334187][ T5224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.346005][ T3655] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.380590][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.394107][ T3655] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.421340][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.434599][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.458498][ T3655] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.366133][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 155.372960][ T3655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.157473][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.166326][ T3655] usb 4-1: GET_CAPABILITIES returned 0 [ 156.172267][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.172390][ T3655] usbtmc 4-1:16.0: can't read capabilities [ 156.192592][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.196990][ T4321] usb 4-1: USB disconnect, device number 2 [ 157.386150][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 159.466066][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 159.549823][ T5224] device veth0_vlan entered promiscuous mode [ 159.772154][ T5224] device veth1_vlan entered promiscuous mode [ 159.866129][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.885175][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.896919][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.016790][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.051785][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.100951][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.154027][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.189279][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.279541][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.298183][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.327784][ T5224] device veth0_macvtap entered promiscuous mode [ 161.365408][ T5224] device veth1_macvtap entered promiscuous mode [ 161.395148][ T5344] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 161.452007][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.498003][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.550169][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.592169][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.634692][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.655455][ T27] audit: type=1326 audit(1789495962.719:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.1.262" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67fd79e159 code=0x0 [ 161.706258][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.725886][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.752994][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.805237][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.839071][ T5355] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 161.907691][ T5355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.921690][ T5358] bond2: (slave veth0_to_bond): making interface the new active one [ 161.983243][ T5358] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 162.018401][ T5360] device bond2 entered promiscuous mode [ 162.034246][ T5360] device veth0_to_bond entered promiscuous mode [ 162.054120][ T5362] device macvlan2 entered promiscuous mode [ 162.067226][ T5362] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.087640][ T5362] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 162.157913][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.175623][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.194747][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.253057][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.275493][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.296376][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.326264][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.345881][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.376043][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.395907][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.405770][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.437179][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.469724][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.494088][ T5224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.516692][ T5224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.525429][ T5224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.565997][ T5224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.604526][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.623841][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.390315][ T4473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.413686][ T4473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.430828][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.555351][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.579983][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.607824][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.354823][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.362412][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.905947][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 168.555076][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.637559][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.701707][ T5433] loop5: detected capacity change from 0 to 256 [ 168.743494][ T5433] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.822381][ T5433] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 168.863221][ T5433] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 168.885490][ T5433] exFAT-fs (loop5): failed to load alloc-bitmap [ 168.926056][ T5433] exFAT-fs (loop5): failed to recognize exfat type [ 170.558250][ T5394] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.578121][ T5394] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.605580][ T5394] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.630686][ T5394] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.687312][ T5394] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.696518][ T5394] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.705411][ T5394] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.714636][ T5394] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.741583][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 171.182600][ T5456] loop5: detected capacity change from 0 to 1024 [ 171.190112][ T5456] ext4: Unknown parameter 'nouser_xattr' [ 171.245890][ T4265] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.939432][ T5476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'. [ 174.069655][ T5497] fuse: Bad value for 'fd' [ 177.036267][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 177.600229][ T5513] fuse: Unknown parameter 'group_i' [ 177.887000][ T5526] loop4: detected capacity change from 0 to 64 [ 177.953711][ T5528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.265598][ T5536] trusted_key: encrypted_key: insufficient parameters specified [ 178.334327][ T5539] loop0: detected capacity change from 0 to 256 [ 178.410652][ T5539] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 178.972766][ T5539] syz.0.311: attempt to access beyond end of device [ 178.972766][ T5539] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 179.304102][ T5539] syz.0.311: attempt to access beyond end of device [ 179.304102][ T5539] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 179.426936][ T27] audit: type=1800 audit(1789495980.499:7): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.311" name="file1" dev="loop0" ino=1048618 res=0 errno=0 [ 180.012485][ T5579] loop5: detected capacity change from 0 to 512 [ 180.142615][ T5579] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 180.156233][ T5579] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.994053][ T5224] EXT4-fs (loop5): unmounting filesystem. [ 181.188820][ T5593] loop5: detected capacity change from 0 to 512 [ 181.327718][ T5593] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.657033][ T5593] EXT4-fs (loop5): 1 truncate cleaned up [ 181.795781][ T5593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 182.659255][ T5604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 182.758793][ T5604] bridge1: port 1(veth3) entered blocking state [ 182.795416][ T5604] bridge1: port 1(veth3) entered disabled state [ 182.827708][ T5604] device veth3 entered promiscuous mode [ 182.851923][ T5224] EXT4-fs (loop5): unmounting filesystem. [ 182.895058][ T5608] bond1: (slave veth0_to_bond): Releasing active interface [ 183.071024][ T5608] bridge1: port 2(veth0_to_bond) entered blocking state [ 183.249095][ T5608] bridge1: port 2(veth0_to_bond) entered disabled state [ 183.510026][ T5608] device veth0_to_bond entered promiscuous mode [ 183.592985][ T5609] bridge1: port 3(veth5) entered blocking state [ 183.615996][ T5609] bridge1: port 3(veth5) entered disabled state [ 183.623398][ T5609] device veth5 entered promiscuous mode [ 183.644607][ T5609] Zero length message leads to an empty skb [ 184.059889][ T5623] loop5: detected capacity change from 0 to 256 [ 184.077900][ T3655] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 184.100210][ T5623] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 184.291219][ T3655] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.509853][ T3655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.621675][ T5623] syz.5.329: attempt to access beyond end of device [ 184.621675][ T5623] loop5: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 184.690387][ T5623] syz.5.329: attempt to access beyond end of device [ 184.690387][ T5623] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 184.735770][ T3655] usb 1-1: Product: syz [ 184.759425][ T3655] usb 1-1: Manufacturer: syz [ 184.764392][ T3655] usb 1-1: SerialNumber: syz [ 184.796702][ T27] audit: type=1800 audit(1789495985.849:8): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.329" name="file1" dev="loop5" ino=1048621 res=0 errno=0 [ 185.132456][ T3655] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 185.164165][ T3655] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 185.194217][ T3655] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 185.222290][ T3655] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 185.244156][ T3655] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 185.390919][ T3655] lan78xx: probe of 1-1:1.0 failed with error -71 [ 185.429324][ T3655] usb 1-1: USB disconnect, device number 4 [ 185.941652][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.949175][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.210226][ T5637] loop3: detected capacity change from 0 to 2048 [ 187.529541][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.600275][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.113911][ T5629] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.129415][ T5629] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.140530][ T5629] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.153508][ T5629] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.170118][ T5677] loop0: detected capacity change from 0 to 512 [ 189.212079][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 189.229597][ T5677] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.294870][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 189.376092][ T5676] device syz_tun left promiscuous mode [ 189.431647][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.342'. [ 189.455418][ T5681] device batadv0 entered promiscuous mode [ 189.463994][ T5681] device macvtap1 entered promiscuous mode [ 189.475523][ T5681] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 189.486584][ T5681] device batadv0 left promiscuous mode [ 189.498057][ T5390] syz.1.267 (5390) used greatest stack depth: 18320 bytes left [ 189.534220][ T5683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.341'. [ 190.446101][ T5693] xt_CT: No such helper "pptp" [ 191.601701][ T5712] loop0: detected capacity change from 0 to 1024 [ 191.627853][ T5712] hfsplus: unable to parse mount options [ 192.524345][ T5702] PKCS8: Unsupported PKCS#8 version [ 193.813329][ T5742] loop0: detected capacity change from 0 to 2048 [ 193.868645][ T5742] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 193.897221][ T27] audit: type=1804 audit(1789495994.969:9): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.361" name="/newroot/93/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 194.063365][ T5748] netlink: 104 bytes leftover after parsing attributes in process `syz.0.361'. [ 194.110879][ T5748] xt_socket: unknown flags 0x40 [ 195.628132][ T4279] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 195.637165][ T4279] Bluetooth: hci0: Injecting HCI hardware error event [ 195.646496][ T4275] Bluetooth: hci0: hardware error 0x00 [ 195.953115][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 197.123849][ T4282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.160189][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.168193][ T4282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.178344][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.187614][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 197.194936][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.393355][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.400278][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.706008][ T4275] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 198.948303][ T5795] device syzkaller0 entered promiscuous mode [ 199.161333][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 199.226364][ T4275] Bluetooth: hci6: command 0x0409 tx timeout [ 199.339649][ T5808] loop0: detected capacity change from 0 to 2048 [ 199.372490][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.408139][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.422143][ T5779] device bridge_slave_0 entered promiscuous mode [ 199.431305][ T5810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.445298][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.461189][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.474116][ T5779] device bridge_slave_1 entered promiscuous mode [ 199.483054][ T27] audit: type=1800 audit(1789496000.549:10): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.377" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 199.645088][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.644888][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.785377][ T5779] team0: Port device team_slave_0 added [ 201.307273][ T4275] Bluetooth: hci6: command 0x041b tx timeout [ 201.510092][ T5779] team0: Port device team_slave_1 added [ 201.530547][ T27] audit: type=1804 audit(1789496002.589:11): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.377" name="/newroot/97/file2/file1" dev="loop0" ino=15 res=1 errno=0 [ 201.837812][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.854980][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.963614][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.037191][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.044170][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.089237][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.392247][ T5779] device hsr_slave_0 entered promiscuous mode [ 202.441817][ T5779] device hsr_slave_1 entered promiscuous mode [ 202.479732][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.661640][ T5779] Cannot create hsr debugfs directory [ 203.271432][ T5779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.374210][ T5779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.385916][ T4279] Bluetooth: hci6: command 0x040f tx timeout [ 203.406428][ T5779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.470723][ T5849] netlink: 'syz.1.385': attribute type 11 has an invalid length. [ 203.718464][ T5779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.239347][ T5855] loop5: detected capacity change from 0 to 512 [ 205.288263][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 205.294317][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 205.295387][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 205.300358][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 205.371225][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.398354][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.414968][ T4282] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 205.417102][ T5855] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.386: iget: bad i_size value: 38620345925642 [ 205.466225][ T4282] Bluetooth: hci6: command 0x0419 tx timeout [ 205.473327][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.485026][ T5855] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.386: couldn't read orphan inode 15 (err -117) [ 205.494352][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.497662][ T5855] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 205.594628][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.616238][ T5863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 205.618407][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.674002][ T5855] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 828 with error 28 [ 205.780025][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.787893][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.811886][ T5855] EXT4-fs (loop5): This should not happen!! Data will be lost [ 205.811886][ T5855] [ 205.837530][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.911723][ T5855] EXT4-fs (loop5): Total free blocks count 0 [ 205.943394][ T5855] EXT4-fs (loop5): Free/Dirty block details [ 205.991849][ T5855] EXT4-fs (loop5): free_blocks=0 [ 206.009948][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.032137][ T5855] EXT4-fs (loop5): dirty_blocks=832 [ 206.061813][ T5855] EXT4-fs (loop5): Block reservation details [ 206.083221][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.106241][ T5855] EXT4-fs (loop5): i_reserved_data_blocks=832 [ 206.146906][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.167458][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.226554][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.233677][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.276181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.308001][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.341519][ T5224] EXT4-fs (loop5): unmounting filesystem. [ 206.354889][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.393126][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.456841][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.477575][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.508431][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.649685][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.693243][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.733619][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.753291][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.776367][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.926697][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 208.312774][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.358445][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.409509][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.805301][ T5905] xt_nat: multiple ranges no longer supported [ 210.849798][ T5915] loop5: detected capacity change from 0 to 128 [ 210.923772][ T5915] EXT4-fs (loop5): Test dummy encryption mode enabled [ 210.974263][ T5915] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 210.994192][ T5915] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.039706][ T5224] EXT4-fs (loop5): unmounting filesystem. [ 212.080150][ T5935] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 212.199550][ T5935] CIFS: Attempting to mount \\127.0.0.1\share [ 212.219266][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.240224][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.286771][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.301371][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.327712][ T5779] device veth0_vlan entered promiscuous mode [ 212.341363][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.356357][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.385796][ T5779] device veth1_vlan entered promiscuous mode [ 212.481683][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.509950][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.543177][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.579112][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.621538][ T5779] device veth0_macvtap entered promiscuous mode [ 212.651260][ T5779] device veth1_macvtap entered promiscuous mode [ 212.692966][ T5945] loop0: detected capacity change from 0 to 128 [ 212.744299][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.842076][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.902464][ T5935] CIFS: VFS: Error connecting to socket. Aborting operation. [ 212.913904][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.927942][ T5935] CIFS: VFS: cifs_mount failed w/return code = -4 [ 212.991296][ T5948] syz.0.400 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 213.234685][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.532772][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.543316][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.601601][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.645245][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.683279][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.691850][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.707057][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.728084][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.761890][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.805883][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.855912][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.908534][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.922709][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.933967][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.086875][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.204134][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.424111][ T5779] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.568551][ T5779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.666525][ T5779] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.735883][ T5779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.150258][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.174812][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.196855][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.214180][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.242193][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.268356][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.584099][ T5978] loop6: detected capacity change from 0 to 512 [ 215.662488][ T5978] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 216.515470][ T5978] EXT4-fs (loop6): 1 truncate cleaned up [ 216.525326][ T5978] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 217.686016][ T5991] comedi comedi0: aio_aio12_8: I/O port conflict (0x59,32) [ 218.352677][ T5779] EXT4-fs (loop6): unmounting filesystem. [ 218.526495][ T5996] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0 [ 219.600269][ T6021] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 221.832023][ T6033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.841967][ T6032] loop6: detected capacity change from 0 to 1024 [ 221.882458][ T6032] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 221.925920][ T6032] EXT4-fs (loop6): group descriptors corrupted! [ 222.302403][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.6.431'. [ 222.812059][ T6049] sg_write: data in/out 287744/136 bytes for SCSI command 0x0-- guessing data in; [ 222.812059][ T6049] program syz.0.430 not setting count and/or reply_len properly [ 223.873504][ T6057] FAULT_INJECTION: forcing a failure. [ 223.873504][ T6057] name failslab, interval 1, probability 0, space 0, times 1 [ 223.886602][ T6057] CPU: 1 PID: 6057 Comm: syz.5.426 Not tainted syzkaller #0 [ 223.893909][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.903988][ T6057] Call Trace: [ 223.907281][ T6057] [ 223.910239][ T6057] dump_stack_lvl+0x188/0x24e [ 223.914957][ T6057] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 223.920616][ T6057] ? show_regs_print_info+0x12/0x12 [ 223.925830][ T6057] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 223.931493][ T6057] should_fail_ex+0x390/0x4c0 [ 223.936199][ T6057] should_failslab+0x5/0x20 [ 223.940721][ T6057] slab_pre_alloc_hook+0x59/0x300 [ 223.945764][ T6057] kmem_cache_alloc+0x56/0x2f0 [ 223.950540][ T6057] ? zswap_frontswap_store+0x414/0x1680 [ 223.956103][ T6057] zswap_frontswap_store+0x414/0x1680 [ 223.961500][ T6057] ? zswap_frontswap_init+0x100/0x100 [ 223.966891][ T6057] ? __lock_acquire+0x7c40/0x7c40 [ 223.971937][ T6057] ? do_raw_spin_lock+0x128/0x2f0 [ 223.976974][ T6057] ? __rwlock_init+0x140/0x140 [ 223.981750][ T6057] ? do_raw_spin_unlock+0x11d/0x230 [ 223.986961][ T6057] __frontswap_store+0x2d9/0x5b0 [ 223.991928][ T6057] swap_writepage+0xc8/0x1a0 [ 223.996535][ T6057] shrink_folio_list+0x2f81/0x8050 [ 224.001690][ T6057] ? reclaim_clean_pages_from_list+0xb80/0xb80 [ 224.007872][ T6057] ? mark_lock+0x94/0x320 [ 224.012230][ T6057] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 224.018235][ T6057] ? finish_task_switch+0x262/0x8e0 [ 224.023448][ T6057] ? lockdep_hardirqs_on+0x94/0x140 [ 224.028663][ T6057] ? finish_task_switch+0x262/0x8e0 [ 224.033889][ T6057] ? __schedule+0x1087/0x4030 [ 224.038591][ T6057] reclaim_folio_list+0x85/0x2e0 [ 224.043583][ T6057] reclaim_pages+0x575/0x690 [ 224.048193][ T6057] ? folio_isolate_lru+0xf10/0xf10 [ 224.053325][ T6057] ? preempt_schedule_thunk+0x16/0x18 [ 224.058725][ T6057] madvise_cold_or_pageout_pte_range+0x1936/0x1f30 [ 224.065256][ T6057] ? folio_put+0xd0/0xd0 [ 224.069520][ T6057] walk_pgd_range+0xb28/0x1370 [ 224.074320][ T6057] __walk_page_range+0x136/0x590 [ 224.079280][ T6057] walk_page_range+0x3b9/0x590 [ 224.084092][ T6057] ? page_mapped_in_vma+0x800/0x800 [ 224.089331][ T6057] ? mlock_page_drain_local+0x75/0x490 [ 224.094801][ T6057] ? mlock_page_drain_local+0x75/0x490 [ 224.100281][ T6057] do_madvise+0x1cb1/0x3520 [ 224.104807][ T6057] ? plist_add+0x3d7/0x490 [ 224.109242][ T6057] ? madvise_set_anon_name+0x420/0x420 [ 224.114716][ T6057] ? schedule+0xd0/0x180 [ 224.118972][ T6057] ? futex_wait_queue+0x23/0x1b0 [ 224.123927][ T6057] ? futex_wait_queue+0x134/0x1b0 [ 224.128960][ T6057] ? futex_unqueue+0xc7/0xf0 [ 224.133562][ T6057] ? futex_wait+0x4a3/0x5c0 [ 224.138089][ T6057] ? futex_wait_setup+0x270/0x270 [ 224.143145][ T6057] ? finish_task_switch+0x262/0x8e0 [ 224.148364][ T6057] ? do_futex+0x310/0x320 [ 224.152709][ T6057] ? __ia32_sys_get_robust_list+0x100/0x100 [ 224.158627][ T6057] ? lock_chain_count+0x20/0x20 [ 224.163502][ T6057] __x64_sys_madvise+0xa2/0xb0 [ 224.168285][ T6057] do_syscall_64+0x4c/0xa0 [ 224.172714][ T6057] ? clear_bhb_loop+0x60/0xb0 [ 224.177400][ T6057] ? clear_bhb_loop+0x60/0xb0 [ 224.182087][ T6057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.187998][ T6057] RIP: 0033:0x7f4d1c99e159 [ 224.192450][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.212077][ T6057] RSP: 002b:00007f4d1abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 224.220506][ T6057] RAX: ffffffffffffffda RBX: 00007f4d1cc26090 RCX: 00007f4d1c99e159 [ 224.228488][ T6057] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 224.236467][ T6057] RBP: 00007f4d1ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 224.244443][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.252421][ T6057] R13: 00007f4d1cc26128 R14: 00007f4d1cc26090 R15: 00007ffe98d87068 [ 224.260413][ T6057] [ 226.374722][ T27] audit: type=1800 audit(1789496027.439:12): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="memory_backed" dev="configfs" ino=40637 res=0 errno=0 [ 226.445213][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.440'. [ 227.096785][ T27] audit: type=1800 audit(1789496028.169:13): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="zone_nr_conv" dev="configfs" ino=40639 res=0 errno=0 [ 227.134946][ T27] audit: type=1800 audit(1789496028.189:14): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="power" dev="configfs" ino=40640 res=0 errno=0 [ 227.286660][ T6077] null_blk: disk nullb1 created [ 227.865940][ T6098] binder: 6097:6098 ioctl c0306201 0 returned -14 [ 227.924286][ T6098] binder: 6097:6098 ioctl c0306201 0 returned -14 [ 232.599386][ T6121] CIFS: Attempting to mount \\127.0.0.1\share [ 234.171246][ T6121] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 234.207927][ T6121] CIFS: VFS: cifs_mount failed w/return code = -512 [ 234.810018][ T6140] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 235.787277][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 235.906299][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.962652][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 236.108655][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 236.125953][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 236.142257][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.255036][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.274032][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 236.340870][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 236.359859][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 236.380500][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.393810][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 236.408383][ T7] usb 6-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 236.451985][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.505683][ T7] usb 6-1: config 0 descriptor?? [ 236.722416][ T6156] loop0: detected capacity change from 0 to 2048 [ 236.937243][ T6156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.093545][ T7] chicony 0003:04F2:1123.0002: unknown main item tag 0x0 [ 237.248527][ T7] chicony 0003:04F2:1123.0002: unknown main item tag 0x0 [ 237.425484][ T7] chicony 0003:04F2:1123.0002: unknown main item tag 0x0 [ 237.507648][ T7] chicony 0003:04F2:1123.0002: unknown main item tag 0x0 [ 237.514812][ T7] chicony 0003:04F2:1123.0002: unknown main item tag 0x0 [ 237.522407][ T7] chicony 0003:04F2:1123.0002: unknown main item tag 0x0 [ 237.531892][ T7] chicony 0003:04F2:1123.0002: unbalanced collection at end of report description [ 237.586629][ T7] chicony 0003:04F2:1123.0002: Chicony hid parse failed: -22 [ 237.594089][ T7] chicony: probe of 0003:04F2:1123.0002 failed with error -22 [ 237.626498][ T6156] EXT4-fs (loop0): shut down requested (0) [ 237.646739][ T7] usb 6-1: USB disconnect, device number 2 [ 237.802381][ T6175] netlink: 'syz.6.463': attribute type 21 has an invalid length. [ 237.863654][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 237.874614][ T6173] Cannot find set identified by id 0 to match [ 238.035679][ T6181] loop5: detected capacity change from 0 to 512 [ 238.060546][ T6181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.086920][ T6179] device bond0 entered promiscuous mode [ 238.124419][ T6179] device bond_slave_0 entered promiscuous mode [ 238.143679][ T6181] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 238.163870][ T6179] device bond_slave_1 entered promiscuous mode [ 238.196178][ T6187] syz.3.465 uses obsolete (PF_INET,SOCK_PACKET) [ 238.224782][ T6179] device batadv0 entered promiscuous mode [ 238.237043][ T6179] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 238.251686][ T6181] EXT4-fs (loop5): 1 truncate cleaned up [ 238.263461][ T6179] Cannot create hsr debugfs directory [ 238.274156][ T6181] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 238.291001][ T6179] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 238.301093][ T6179] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 238.311847][ T6179] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 239.001913][ T6184] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 239.022372][ T6184] device wlan1 entered promiscuous mode [ 239.030880][ T6184] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 239.050947][ T5224] EXT4-fs (loop5): unmounting filesystem. [ 240.097865][ T6200] device syzkaller0 entered promiscuous mode [ 240.196074][ T6206] loop6: detected capacity change from 0 to 2048 [ 240.688508][ T6206] loop6: p4 < > [ 241.175268][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 241.334914][ T6222] device syzkaller0 entered promiscuous mode [ 241.929018][ T6231] Bluetooth: MGMT ver 1.22 [ 244.948355][ T6260] netlink: 'syz.6.489': attribute type 10 has an invalid length. [ 244.979656][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.987123][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.031037][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.039261][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.046753][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.053865][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.093272][ T6260] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 245.112661][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.489'. [ 245.125716][ T6261] device bridge_slave_1 left promiscuous mode [ 245.132242][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.142921][ T6261] device bridge_slave_0 left promiscuous mode [ 245.149315][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.225435][ T6261] bond0: (slave bridge0): Releasing backup interface [ 245.417603][ T6269] device syzkaller0 entered promiscuous mode [ 245.639937][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 245.663101][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 245.695682][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 245.751685][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 245.975204][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 246.625191][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 246.690002][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 246.989855][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 247.817246][ T6314] loop0: detected capacity change from 0 to 512 [ 248.574742][ T6314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.602438][ T6314] EXT4-fs error (device loop0): ext4_init_orphan_info:623: comm syz.0.510: orphan file block 0: bad magic [ 248.619155][ T6314] EXT4-fs (loop0): mount failed [ 249.494834][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 254.712118][ T6385] loop6: detected capacity change from 0 to 1024 [ 254.736717][ T6385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.842384][ T6385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102] [ 254.845009][ T6391] device bridge_slave_0 left promiscuous mode [ 254.857069][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.861009][ T6385] System zones: 0-1, 3-12 [ 254.873868][ T6391] device bridge_slave_1 left promiscuous mode [ 254.873928][ T6385] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 254.880591][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.899124][ T6391] device veth0_to_bond left promiscuous mode [ 254.905231][ T6391] bridge1: port 2(veth0_to_bond) entered disabled state [ 254.914953][ T6391] bond0: (slave bond_slave_0): Releasing backup interface [ 254.922627][ T6391] device bond_slave_0 left promiscuous mode [ 254.930002][ T6391] bond0: (slave bond_slave_1): Releasing backup interface [ 254.938052][ T6391] device bond_slave_1 left promiscuous mode [ 254.949645][ T6391] team0: Port device team_slave_0 removed [ 254.956818][ T6391] team0: Port device team_slave_1 removed [ 254.962810][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.971705][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.981617][ T6391] bond0: (slave wlan1): Releasing backup interface [ 254.991706][ T6391] device wlan1 left promiscuous mode [ 255.023028][ T6391] bond2: (slave geneve2): Releasing active interface [ 255.034969][ T6391] device veth3 left promiscuous mode [ 255.040921][ T6391] bridge1: port 1(veth3) entered disabled state [ 255.055265][ T6391] device veth5 left promiscuous mode [ 255.060747][ T6391] bridge1: port 3(veth5) entered disabled state [ 255.184403][ T6385] EXT4-fs error (device loop6): ext4_discard_preallocations:5124: comm syz.6.516: Error -117 loading buddy information for 4294961127 [ 255.245712][ T6385] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.516: Invalid inode table block 5 in block_group 0 [ 255.362490][ T6385] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 255.387449][ T6385] EXT4-fs error (device loop6): ext4_ext_truncate:4475: inode #18: comm syz.6.516: mark_inode_dirty error [ 255.437666][ T6385] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.516: Invalid inode table block 5 in block_group 0 [ 255.465496][ T6385] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 255.498379][ T6385] EXT4-fs error (device loop6): ext4_truncate:4325: inode #18: comm syz.6.516: mark_inode_dirty error [ 255.514682][ T6385] EXT4-fs error (device loop6) in ext4_setattr:5695: Corrupt filesystem [ 255.922173][ T5779] EXT4-fs (loop6): unmounting filesystem. [ 256.415069][ T6410] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 257.251186][ T6415] loop0: detected capacity change from 0 to 32768 [ 257.515056][ T6421] block device autoloading is deprecated and will be removed. [ 257.665583][ T6431] netlink: 'syz.6.528': attribute type 1 has an invalid length. [ 257.717431][ T6431] device bond1 entered promiscuous mode [ 257.762811][ T6431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.789277][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.6.528'. [ 257.863529][ T6431] bond1: (slave bridge0): making interface the new active one [ 257.880190][ T6431] device bridge0 entered promiscuous mode [ 257.905628][ T6431] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 257.918229][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 258.089951][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 258.122295][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 258.146497][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 258.170125][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 258.210077][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 258.308623][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 258.370026][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 258.838275][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.844609][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.008044][ T6530] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 261.969446][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 263.833546][ T6548] bridge1: port 1(erspan0) entered blocking state [ 263.842772][ T6548] bridge1: port 1(erspan0) entered disabled state [ 263.881438][ T6548] device erspan0 entered promiscuous mode [ 264.012499][ T6548] bridge1: port 1(erspan0) entered blocking state [ 264.019093][ T6548] bridge1: port 1(erspan0) entered forwarding state [ 264.186618][ T4317] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 264.785128][ T4317] usb 7-1: unable to get BOS descriptor or descriptor too short [ 264.896439][ T4317] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.906775][ T4317] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.918170][ T4317] usb 7-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 264.933914][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.943023][ T4317] usb 7-1: Product: syz [ 264.947707][ T4317] usb 7-1: Manufacturer: syz [ 264.952316][ T4317] usb 7-1: SerialNumber: syz [ 265.186555][ T4317] usb 7-1: cannot find UAC_HEADER [ 265.223568][ T4317] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 265.276585][ T4317] usb 7-1: USB disconnect, device number 2 [ 265.339303][ T6584] loop5: detected capacity change from 0 to 2048 [ 265.399216][ T6584] loop5: p4 < > [ 265.516480][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.134039][ T6601] loop6: detected capacity change from 0 to 512 [ 268.755073][ T6601] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 268.794765][ T6601] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.326012][ T5779] EXT4-fs (loop6): unmounting filesystem. [ 270.566971][ T22] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 270.585928][ T4317] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 270.775904][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 270.782895][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.798903][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.820980][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.040843][ T4317] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 271.056599][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.337985][ T4317] usb 1-1: config 0 descriptor?? [ 271.343098][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.486667][ T22] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.503300][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.513100][ T22] usb 7-1: Product: syz [ 271.527806][ T22] usb 7-1: Manufacturer: syz [ 271.541757][ T22] usb 7-1: SerialNumber: syz [ 271.763889][ T22] usb 7-1: 0:2 : does not exist [ 271.793145][ T22] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 271.814880][ T4317] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 271.949581][ T22] usb 7-1: USB disconnect, device number 3 [ 272.338244][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.275897][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 276.907564][ T4317] isku 0003:1E7D:319C.0003: couldn't init struct isku_device [ 276.929291][ T4317] isku 0003:1E7D:319C.0003: couldn't install keyboard [ 277.111860][ T4317] isku: probe of 0003:1E7D:319C.0003 failed with error -110 [ 278.670233][ T28] INFO: task syz.2.175:5029 blocked for more than 143 seconds. [ 278.678176][ T28] Not tainted syzkaller #0 [ 278.683121][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.691873][ T28] task:syz.2.175 state:D stack:27088 pid:5029 ppid:4274 flags:0x00004004 [ 278.701484][ T28] Call Trace: [ 278.704780][ T28] [ 278.707778][ T28] __schedule+0x107f/0x4030 [ 278.712319][ T28] ? release_firmware_map_entry+0x187/0x187 [ 278.718277][ T28] ? __mutex_trylock_common+0x86/0x260 [ 278.723754][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 278.729998][ T28] schedule+0xb9/0x180 [ 278.734077][ T28] schedule_preempt_disabled+0xf/0x20 [ 278.739505][ T28] __mutex_lock+0x548/0xae0 [ 278.744028][ T28] ? __mutex_lock+0x3ba/0xae0 [ 278.749128][ T28] ? nfsd_svc+0x61/0xab0 [ 278.753414][ T28] ? mutex_lock_nested+0x10/0x10 [ 278.758416][ T28] ? net_generic+0x1e/0x240 [ 278.762952][ T28] ? net_generic+0x1e/0x240 [ 278.767519][ T28] nfsd_svc+0x61/0xab0 [ 278.771603][ T28] ? qword_get+0x5a5/0x640 [ 278.776082][ T28] write_threads+0x2ea/0x350 [ 278.780693][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 278.785642][ T28] ? __might_fault+0xc2/0x120 [ 278.790369][ T28] ? _copy_from_user+0x10b/0x170 [ 278.795712][ T28] ? simple_transaction_get+0x119/0x140 [ 278.801329][ T28] nfsctl_transaction_write+0x105/0x150 [ 278.806949][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 278.812595][ T28] vfs_write+0x2dc/0x9a0 [ 278.816896][ T28] ? file_end_write+0x250/0x250 [ 278.821765][ T28] ? __fget_files+0x28/0x460 [ 278.826414][ T28] ? __fget_files+0x3fc/0x460 [ 278.831107][ T28] ? __fdget_pos+0x2ae/0x360 [ 278.835688][ T28] ? ksys_write+0x70/0x260 [ 278.840185][ T28] ksys_write+0x14d/0x260 [ 278.844528][ T28] ? __ia32_sys_read+0x80/0x80 [ 278.849364][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 278.854578][ T28] do_syscall_64+0x4c/0xa0 [ 278.859197][ T28] ? clear_bhb_loop+0x60/0xb0 [ 278.863974][ T28] ? clear_bhb_loop+0x60/0xb0 [ 278.868719][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.874630][ T28] RIP: 0033:0x7f6cc7f9e159 [ 278.879098][ T28] RSP: 002b:00007f6cc8e05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.887582][ T28] RAX: ffffffffffffffda RBX: 00007f6cc8226090 RCX: 00007f6cc7f9e159 [ 278.895564][ T28] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 278.903912][ T28] RBP: 00007f6cc803506b R08: 0000000000000000 R09: 0000000000000000 [ 278.912155][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.920298][ T28] R13: 00007f6cc8226128 R14: 00007f6cc8226090 R15: 00007ffc996b1f18 [ 278.928370][ T28] [ 278.931516][ T28] [ 278.931516][ T28] Showing all locks held in the system: [ 278.940750][ T28] 1 lock held by rcu_tasks_kthre/12: [ 278.946275][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 278.956790][ T28] 1 lock held by rcu_tasks_trace/13: [ 278.962080][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 278.973232][ T28] 1 lock held by khungtaskd/28: [ 278.978236][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 278.988364][ T28] 2 locks held by kworker/0:2/955: [ 278.993475][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 279.004210][ T28] #1: ffffc900049c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 279.015764][ T28] 2 locks held by getty/4028: [ 279.020468][ T28] #0: ffff88814d318098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 279.030266][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 279.040478][ T28] 3 locks held by syz.2.175/5028: [ 279.045529][ T28] #0: ffff88807cdce0e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 279.054833][ T28] #1: ffff88805447e460 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 279.063849][ T28] #2: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 279.072717][ T28] 3 locks held by syz.2.175/5029: [ 279.077869][ T28] #0: ffff8880260bf4e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 279.087154][ T28] #1: ffff88805447e460 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 279.096164][ T28] #2: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 279.104938][ T28] 2 locks held by syz.4.317/5570: [ 279.110046][ T28] #0: ffff8880562da0e0 (&type->s_umount_key#82){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 279.120292][ T28] #1: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4f/0x1a0 [ 279.130016][ T28] 3 locks held by kworker/u4:22/6490: [ 279.135400][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 279.146604][ T28] #1: ffffc9001b92fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 279.157018][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 279.166066][ T28] 5 locks held by kworker/u4:24/6495: [ 279.171441][ T28] 3 locks held by kworker/u4:25/6497: [ 279.176857][ T28] #0: ffff888144e8a938 ((wq_completion)tc_filter_workqueue){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 279.188467][ T28] #1: ffffc9001b97fd00 ((work_completion)(&(rwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 279.199906][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: mall_destroy_work+0x12/0x20 [ 279.209465][ T28] 2 locks held by syz.6.559/6615: [ 279.214489][ T28] #0: ffff888056cb5010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 279.224685][ T28] #1: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1dc/0x920 [ 279.233834][ T28] 3 locks held by syz.0.561/6620: [ 279.238899][ T28] #0: ffffffff8ddb5b90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 279.247143][ T28] #1: ffffffff8ddb59a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790 [ 279.256175][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: wg_set_device+0xf4/0x1fb0 [ 279.265258][ T28] 2 locks held by syz.3.564/6632: [ 279.270328][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 279.279362][ T28] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 279.290283][ T28] 1 lock held by syz.1.574/6666: [ 279.295218][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 279.304896][ T28] 1 lock held by syz.1.574/6672: [ 279.312063][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 279.322533][ T28] 1 lock held by syz.5.575/6675: [ 279.328325][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 279.337730][ T28] 1 lock held by syz.5.575/6680: [ 279.342832][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 279.352295][ T28] 1 lock held by syz.5.575/6682: [ 279.357269][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 279.366852][ T28] 1 lock held by syz.5.575/6684: [ 279.371797][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 279.388992][ T28] [ 279.391485][ T28] ============================================= [ 279.391485][ T28] [ 279.400002][ T28] NMI backtrace for cpu 0 [ 279.404341][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 279.411543][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.421618][ T28] Call Trace: [ 279.424886][ T28] [ 279.427812][ T28] dump_stack_lvl+0x188/0x24e [ 279.432499][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 279.437902][ T28] ? show_regs_print_info+0x12/0x12 [ 279.443085][ T28] ? load_image+0x410/0x410 [ 279.447582][ T28] ? vprintk_emit+0x59f/0x6a0 [ 279.452277][ T28] ? printk_sprint+0x460/0x460 [ 279.457048][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 279.461996][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 279.468140][ T28] ? _printk+0xda/0x130 [ 279.472303][ T28] ? load_image+0x410/0x410 [ 279.476800][ T28] ? load_image+0x410/0x410 [ 279.481290][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 279.487355][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 279.493435][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 279.499430][ T28] watchdog+0xf0e/0xf50 [ 279.503577][ T28] ? watchdog+0x1ed/0xf50 [ 279.507904][ T28] kthread+0x29d/0x330 [ 279.511977][ T28] ? hungtask_pm_notify+0x40/0x40 [ 279.517004][ T28] ? kthread_blkcg+0xd0/0xd0 [ 279.521578][ T28] ret_from_fork+0x1f/0x30 [ 279.526001][ T28] [ 279.529891][ T28] Sending NMI from CPU 0 to CPUs 1: [ 279.535285][ C1] NMI backtrace for cpu 1 [ 279.535294][ C1] CPU: 1 PID: 3621 Comm: syslogd Not tainted syzkaller #0 [ 279.535307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.535315][ C1] RIP: 0010:entry_SYSCALL_64_after_hwframe+0x59/0xd2 [ 279.535350][ C1] Code: 45 31 e4 45 31 ed 45 31 f6 45 31 ff 48 89 e7 48 63 f0 66 90 b9 48 00 00 00 65 48 8b 14 25 68 6f 02 00 89 d0 48 c1 ea 20 0f 30 <0f> 1f 44 00 00 e8 f9 12 00 00 e8 e4 46 f2 ff 0f 1f 44 00 00 48 8b [ 279.535362][ C1] RSP: 0018:ffffc900032a7f58 EFLAGS: 00000046 [ 279.535374][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000048 [ 279.535383][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900032a7f58 [ 279.535391][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.535399][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 279.535406][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.535418][ C1] FS: 00007f145cfe1c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 279.535431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.535440][ C1] CR2: 00007f31ccc4ae9c CR3: 000000007e7c6000 CR4: 00000000003506e0 [ 279.535452][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.535460][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.535468][ C1] Call Trace: [ 279.535472][ C1] [ 279.535476][ C1] RIP: 0033:0x7f145d131407 [ 279.535487][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 279.535497][ C1] RSP: 002b:00007ffe8c40fe30 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 279.535510][ C1] RAX: ffffffffffffffda RBX: 00007f145cfe1c80 RCX: 00007f145d131407 [ 279.535520][ C1] RDX: 00000000000000ff RSI: 0000561d883b9950 RDI: 0000000000000000 [ 279.535528][ C1] RBP: 0000561d883b9910 R08: 0000000000000000 R09: 0000000000000000 [ 279.535536][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561d883b998d [ 279.535544][ C1] R13: 0000000000000000 R14: 0000561d883b9950 R15: 0000561d591dcd98 [ 279.535560][ C1] [ 279.537471][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 279.537481][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 279.537496][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.537505][ T28] Call Trace: [ 279.537511][ T28] [ 279.537517][ T28] dump_stack_lvl+0x188/0x24e [ 279.537536][ T28] ? memcpy+0x3c/0x60 [ 279.537553][ T28] ? show_regs_print_info+0x12/0x12 [ 279.537569][ T28] ? load_image+0x410/0x410 [ 279.537598][ T28] panic+0x2d3/0x710 [ 279.537615][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 279.537635][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 279.537653][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 279.537679][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 279.537697][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 279.537715][ T28] watchdog+0xf4d/0xf50 [ 279.537735][ T28] ? watchdog+0x1ed/0xf50 [ 279.537756][ T28] kthread+0x29d/0x330 [ 279.537769][ T28] ? hungtask_pm_notify+0x40/0x40 [ 279.537786][ T28] ? kthread_blkcg+0xd0/0xd0 [ 279.537801][ T28] ret_from_fork+0x1f/0x30 [ 279.537830][ T28] [ 279.540464][ T28] Kernel Offset: disabled [ 279.863870][ T28] Rebooting in 86400 seconds..