last executing test programs: 4m4.720489647s ago: executing program 1 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 4m3.52504845s ago: executing program 1 (id=144): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000140)={{[0x1, 0x3ff, 0x6, 0x6]}, 0x0, 0x1, 0x9, 0x0, &(0x7f0000000100)=[{{@align=0x5, {0x27, 0xe7, 0x3bc4, 0x3}}, 0x4685, 0x0, '\\*/\x00'}]}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001a010000"], 0x28}, 0x0) 4m3.414696036s ago: executing program 1 (id=146): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x3, 0x87) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x17}) 4m1.687723407s ago: executing program 1 (id=152): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000bc0)={[{@nouid32}, {@orlov}, {@noblock_validity}, {@norecovery}, {@auto_da_alloc}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}, {@nodiscard}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xff, 0x56d, &(0x7f0000002380)="$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") sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000002ac0)=""/4112, 0x1010}, {0x0}], 0x2, 0x3ffff, 0x9, 0x1b) 4m0.121537318s ago: executing program 1 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x8, 0xb}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x7ff, 0x6}}}}]}, 0x48}}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x4}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x10) 3m57.289783067s ago: executing program 1 (id=164): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)={0x109142, 0x42, 0x2}, 0x18) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 3m57.109011887s ago: executing program 32 (id=164): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)={0x109142, 0x42, 0x2}, 0x18) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1m27.155091316s ago: executing program 4 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 1m25.203163739s ago: executing program 4 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 1m23.792303003s ago: executing program 4 (id=751): syz_usb_connect$uac3(0x3, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x0, 0x63}) close_range(r1, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0xfffffffe, 0x1}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r2) syz_usb_disconnect(r0) 1m21.902062812s ago: executing program 4 (id=755): r0 = userfaultfd(0x80801) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)='\x00', 0x1, 0x20000040, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000048c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1b", 0x1}], 0x1, 0x0, 0x0, 0x400c0}], 0x1, 0x4004000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x10, 0xffffffff}, 0x10) sendto(r2, &(0x7f0000000000)='N', 0x1, 0x20000800, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.701273963s ago: executing program 4 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) 1m21.034184898s ago: executing program 4 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@length={{0x28}, {0x2, 0x0, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) sendmsg$inet6(r4, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e22, 0x4, @mcast1, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000280)="aa88ef549f8ff4590ce5b31d1ce2f6ef387412eae67bf7611f169ffab0ee56bde1eb63f6dbc42fb3af4071ab44713a656b793ec336fbabc480c36b54f0cedb5b0e5748e19b81264dce5f4e45da39a06e7c31821d03cbda1d6508d5e36ce672b0cc14bd558a7e5d77280b4d98698d25c284c17e9cc1119b0f6a6b3da392a51e0e06158b035ba9f086a4faf9ac6d60ef683715886ad384ce6a217967f8abd7a68913693514c14181e5fe507191587c340c06377a95aeb1f7509276bb16d6774a9ddcaf24ddd71f53ee54a3926da9745673204c0bf53291d676e521672ecea17566e14a1bc1e893a028", 0xe8}, {&(0x7f0000000380)="c4315efa25eb79e9b7e81b941f045fa38e634ed86eb43ffca0bdd42ca9da38bd3079ac31459053eaf1c01223b060074cbc5079795a9995eeda72e624993e17333108ab47ba8ea7ab10e23dcaef49e92f4a9fb80a69dc64272f8669067948b681a0ce3be05d6d0ebe7241405e4ff9ef56beaa0532d52939056b1ebf9ad6aa248c180ff6de885e5d0e2e99523f9911eee1eb6861b9a2a053e9b18b659875b1fb080350fdd5024dcc9967474c37c4497e0d7f7e54572ddd4f6e244939cd57c7a430e048617a9259ab12867d68236e1bd51038b674", 0xd3}, {&(0x7f0000000480)="6e81bcc50f0262b4e51e4587418d5a066a1dc3a0b53ee41cf1790ed4ae2c20f3aa62b8374bedca948c22fa31404f4b7dd9c4cb6dfb7c9ec509714da2c54c2360cd9709a2dd6e059bf338c2edd32d1f58f5fa4557b5dce9c075e3e5272b35dffd7be3ef5a8574d99e1cb3fe8c81ad4200bf5d8a3430a4b9465761e640b14f126f4568c7086e0a4ba98ed9beb4a6398c248ae55d625d0136996b34ad0c72a0a0f46b493c24", 0xa4}], 0x3}, 0x4008000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xea, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 1m4.656159847s ago: executing program 33 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@length={{0x28}, {0x2, 0x0, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) sendmsg$inet6(r4, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e22, 0x4, @mcast1, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000280)="aa88ef549f8ff4590ce5b31d1ce2f6ef387412eae67bf7611f169ffab0ee56bde1eb63f6dbc42fb3af4071ab44713a656b793ec336fbabc480c36b54f0cedb5b0e5748e19b81264dce5f4e45da39a06e7c31821d03cbda1d6508d5e36ce672b0cc14bd558a7e5d77280b4d98698d25c284c17e9cc1119b0f6a6b3da392a51e0e06158b035ba9f086a4faf9ac6d60ef683715886ad384ce6a217967f8abd7a68913693514c14181e5fe507191587c340c06377a95aeb1f7509276bb16d6774a9ddcaf24ddd71f53ee54a3926da9745673204c0bf53291d676e521672ecea17566e14a1bc1e893a028", 0xe8}, {&(0x7f0000000380)="c4315efa25eb79e9b7e81b941f045fa38e634ed86eb43ffca0bdd42ca9da38bd3079ac31459053eaf1c01223b060074cbc5079795a9995eeda72e624993e17333108ab47ba8ea7ab10e23dcaef49e92f4a9fb80a69dc64272f8669067948b681a0ce3be05d6d0ebe7241405e4ff9ef56beaa0532d52939056b1ebf9ad6aa248c180ff6de885e5d0e2e99523f9911eee1eb6861b9a2a053e9b18b659875b1fb080350fdd5024dcc9967474c37c4497e0d7f7e54572ddd4f6e244939cd57c7a430e048617a9259ab12867d68236e1bd51038b674", 0xd3}, {&(0x7f0000000480)="6e81bcc50f0262b4e51e4587418d5a066a1dc3a0b53ee41cf1790ed4ae2c20f3aa62b8374bedca948c22fa31404f4b7dd9c4cb6dfb7c9ec509714da2c54c2360cd9709a2dd6e059bf338c2edd32d1f58f5fa4557b5dce9c075e3e5272b35dffd7be3ef5a8574d99e1cb3fe8c81ad4200bf5d8a3430a4b9465761e640b14f126f4568c7086e0a4ba98ed9beb4a6398c248ae55d625d0136996b34ad0c72a0a0f46b493c24", 0xa4}], 0x3}, 0x4008000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xea, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 13.812493515s ago: executing program 2 (id=990): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000001c850000001f000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x653988b496406357, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c18601aa1d1ad5fe150396000000", 0x0, 0x778e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.931597137s ago: executing program 2 (id=1000): r0 = fanotify_init(0x0, 0x401) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40000029, r2, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000018c0)=[{&(0x7f0000001500)='\v', 0x1}], 0x1, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x25a5, 0x8) 10.698587579s ago: executing program 2 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000004800)={'veth0_vlan\x00', 0x133}) 10.661809971s ago: executing program 5 (id=1006): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000480)="b9f0812e4e06f000009e0fa208001fffffe10100000040000000803544b3007fb87a", 0x0, 0x20000102, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.609994269s ago: executing program 5 (id=1007): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x10008001, 0x0, 0x3, 0xfffffffffffffffd, 0xaa, 0xfa11, 0xfffffffe}, 0x0) fsetxattr(r1, &(0x7f0000000540)=@known='trusted.overlay.origin\x00', &(0x7f00000002c0)='@\\)]&^\xc0\x818%\xdf\xb8\xa9\xd84&g\xf8\xb4\xec\xff\xd3\x8d\xd7\xca\xa7\xef\xf0aE\xc8\x0e\xb7R\xc1\xca\xebi\x11\xc1y,\x01v\x99\x852\xd5p\xc6:\x84\bz@\xc6\x1b\x04\x81;^N\xbc=:\x7f\"\x9cOX\xaeJ\xf8T\xf2Y\xaf\xd6c\xdd', 0x50, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000140)={0xb, 0x2, 0x1402, 0x105}) 8.59426617s ago: executing program 2 (id=1010): syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() rt_sigprocmask(0x2, &(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r2 = gettid() r3 = socket(0xa, 0x3, 0xff) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x4020, 0x0) tkill(r2, 0x12) tkill(r1, 0x16) 8.39414253s ago: executing program 3 (id=1011): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x208060, 0x1, 0xfffa, 0x10000, 0xfffffffc, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 8.326134834s ago: executing program 6 (id=1013): setitimer(0x0, &(0x7f0000000440)={{0x0, 0xea60}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 8.061451567s ago: executing program 6 (id=1014): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r0 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20060004}, 0x40080b4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000000800034000000001"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006f1}, 0x0) 7.177332224s ago: executing program 3 (id=1015): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xffffffffffffffff, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xffeffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.157310005s ago: executing program 5 (id=1016): bind$alg(0xffffffffffffffff, &(0x7f00000021c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) 7.115974067s ago: executing program 0 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 6.984035504s ago: executing program 2 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 6.800389944s ago: executing program 3 (id=1019): socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) 6.574101455s ago: executing program 6 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x2d, 0x0, &(0x7f0000000180)="8b3a21d8f2a2fc5fe0a1aff0dcc907eed9a0513246ca6ec13f8ddb9a79f474aec29a224b0e61c5e1e845578fff", 0x0, 0x5, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3}, 0x50) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000400851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4.467524306s ago: executing program 0 (id=1021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2fafb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000015) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x10000810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 4.466687806s ago: executing program 5 (id=1031): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 4.303642215s ago: executing program 3 (id=1022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004004, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.847277429s ago: executing program 0 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 3.599689782s ago: executing program 6 (id=1024): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000480)="b9f0812e4e06f000009e0fa208001fffffe10100000040000000803544b3007fb87a", 0x0, 0x20000102, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.862588593s ago: executing program 5 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.788490597s ago: executing program 0 (id=1036): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000"], 0xcc}}, 0x0) lseek(r0, 0x7fffd, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) 1.787191647s ago: executing program 3 (id=1037): r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x80000008) eventfd2(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0002000000060011004e22000008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 1.675347452s ago: executing program 6 (id=1026): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000002f40)=""/4079, 0x7c4) 1.551620349s ago: executing program 2 (id=1027): socketpair(0x20, 0x0, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000005, 0x2000000000000aa, 0x3, 0x5, {0x0, 0x180, 0x20fe, 0x2586, 0x87, 0xd615, 0x7, 0x80000003, 0xfffffffe, 0x4000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}}}, 0xa0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x12, 0xfffffffffffffffe, &(0x7f0000000040)=0x3a) fallocate(r2, 0x0, 0xfff, 0x9) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 1.524393731s ago: executing program 0 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1.436550475s ago: executing program 3 (id=1029): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 1.30883ms ago: executing program 6 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f00000006c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@dots}, {@nodots}, {@fat=@gid}, {@fat=@time_offset={'time_offset', 0x3d, 0x1e5}}, {@fat=@time_offset={'time_offset', 0x3d, 0xa8}}, {@fat=@sys_immutable}, {@fat=@showexec}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") 591.16µs ago: executing program 0 (id=1043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ve_1) entered disabled state [ 67.567139][ T4198] device bridge_slave_1 entered promiscuous mode [ 67.618427][ T4187] team0: Port device team_slave_0 added [ 67.627085][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.655240][ T4187] team0: Port device team_slave_1 added [ 67.662503][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.680575][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.691431][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.726705][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.737995][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.761051][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.768307][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.794259][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.808834][ T4192] team0: Port device team_slave_0 added [ 67.828175][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.835591][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.845114][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.853557][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.860566][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.887168][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.900373][ T4192] team0: Port device team_slave_1 added [ 67.920935][ T4198] team0: Port device team_slave_0 added [ 67.927532][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.935791][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.944942][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.970214][ T4198] team0: Port device team_slave_1 added [ 67.978370][ T4196] team0: Port device team_slave_0 added [ 67.991759][ T4196] team0: Port device team_slave_1 added [ 68.012811][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.019989][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.046028][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.082711][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.090131][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.117005][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.135700][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.142690][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.169205][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.192541][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.202421][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.210408][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.236500][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.252895][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.260081][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.267820][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.275498][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.301849][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.314999][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.321972][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.348868][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.362735][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.420406][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.427548][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.434732][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.442557][ T4192] Cannot create hsr debugfs directory [ 68.468697][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.475623][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.482669][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.490383][ T4196] Cannot create hsr debugfs directory [ 68.528065][ T4198] device hsr_slave_0 entered promiscuous mode [ 68.535120][ T4198] device hsr_slave_1 entered promiscuous mode [ 68.541957][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.549988][ T4198] Cannot create hsr debugfs directory [ 68.564577][ T4190] team0: Port device team_slave_0 added [ 68.601787][ T4190] team0: Port device team_slave_1 added [ 68.672015][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.679744][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.705860][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.724166][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 68.733092][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 68.734620][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 68.766974][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.774210][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.800372][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.803516][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 68.811769][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 68.936775][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.944043][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.951169][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.959412][ T4190] Cannot create hsr debugfs directory [ 69.051069][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.072566][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.101276][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.120967][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.172594][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.187750][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.206883][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.217533][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.260815][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.270457][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.282763][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.293742][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.391853][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.401238][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.429263][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.465503][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.490310][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.505585][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.525387][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.538834][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.548396][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.561505][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.574619][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.584416][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.594734][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.634182][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.642811][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.653586][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.661525][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.672467][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.690937][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.699997][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.727261][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.737131][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.747422][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.754737][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.764840][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.775462][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.784542][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.791744][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.799675][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.808933][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.817800][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.825198][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.835411][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.844338][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.852573][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.905416][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.918568][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.927782][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.934919][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.944032][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.952748][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.961879][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.969029][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.977138][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.986347][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.995326][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.005552][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.014804][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.023809][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.032717][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.039858][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.052895][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.062767][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.072131][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.081150][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.119997][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.131241][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.140699][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.150753][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.159915][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.176526][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.185619][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.195911][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.204749][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.214726][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.223663][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.233030][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.241718][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.251373][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.261651][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.269883][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.279142][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.287694][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.309480][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.318530][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.330842][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.340804][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.349928][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.367197][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.379540][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.394263][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.402121][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.410850][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.420519][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.429459][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.438321][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.448362][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.456718][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.466027][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.504989][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.512840][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.534616][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.562320][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.583701][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.590851][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.614431][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.635522][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.649466][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.656734][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.666996][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.691786][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.700842][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.710690][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.729528][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.745732][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.758142][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.784765][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.794058][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.801345][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.809437][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 70.816254][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 70.832056][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 70.840811][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.851698][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.860981][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.868116][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.883258][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 70.889474][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.904094][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 70.912094][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.950486][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.965149][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.980974][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.991473][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.005042][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.015580][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.024350][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.031812][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.054167][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.069505][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.081957][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.105415][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.114147][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.121625][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.129276][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.138540][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.149318][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.158126][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.168953][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.178059][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.186605][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.195307][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.205265][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.223182][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.240735][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.261188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.278684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.309717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.318443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.354865][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.367013][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.373605][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.399626][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.416258][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.433056][ T4192] device veth0_vlan entered promiscuous mode [ 71.469665][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.491584][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.518927][ T4192] device veth1_vlan entered promiscuous mode [ 71.543909][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.552514][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.583577][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.618989][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.633823][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.664790][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.703615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.712141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.744765][ T4192] device veth0_macvtap entered promiscuous mode [ 71.757917][ T4192] device veth1_macvtap entered promiscuous mode [ 71.767180][ T4196] device veth0_vlan entered promiscuous mode [ 71.775331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.783916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.791841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.800757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.810023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.818792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.827624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.835970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.848253][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.869549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.879447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.889852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.898951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.930732][ T4187] device veth0_vlan entered promiscuous mode [ 71.940279][ T4196] device veth1_vlan entered promiscuous mode [ 71.957051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.965758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.974860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.985336][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.992419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.001912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.012881][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.025823][ T4187] device veth1_vlan entered promiscuous mode [ 72.049212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.058965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.070093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.080357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.096226][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.135707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.144577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.154274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.164662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.175305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.184896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.193975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.202601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.211846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.226187][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.235375][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.253315][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.262048][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.282572][ T4198] device veth0_vlan entered promiscuous mode [ 72.292239][ T4187] device veth0_macvtap entered promiscuous mode [ 72.301124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.310264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.319270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.328941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.337947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.346058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.356548][ T4196] device veth0_macvtap entered promiscuous mode [ 72.371306][ T4196] device veth1_macvtap entered promiscuous mode [ 72.390962][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.401837][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.416558][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.425668][ T4187] device veth1_macvtap entered promiscuous mode [ 72.443720][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.454638][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.464125][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.472271][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.481793][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.491297][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.500651][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.524026][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.533419][ T4198] device veth1_vlan entered promiscuous mode [ 72.541064][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.551999][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.565059][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.575760][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.585536][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.594422][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.604611][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.621997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.630627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.639090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.649329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.667817][ T4190] device veth0_vlan entered promiscuous mode [ 72.698152][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.710851][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.721077][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.732751][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.744419][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.775856][ T4190] device veth1_vlan entered promiscuous mode [ 72.788562][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.798167][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.814119][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.830977][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.842216][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.853361][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.864278][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.875368][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.883781][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 72.893303][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 72.901320][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.909368][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 72.921318][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.930438][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.939580][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.949440][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.960390][ T4198] device veth0_macvtap entered promiscuous mode [ 72.967703][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 72.973888][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 72.978175][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.990104][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999091][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.007912][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.042471][ T4198] device veth1_macvtap entered promiscuous mode [ 73.067956][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.076628][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.131780][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.142416][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.150605][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.159656][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.170562][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.185420][ T4190] device veth0_macvtap entered promiscuous mode [ 73.208520][ T4190] device veth1_macvtap entered promiscuous mode [ 73.219571][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.231038][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.242502][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.253653][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.264070][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.275820][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.288451][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.305182][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.316020][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.332630][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.352135][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.362867][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.376063][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.386753][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.397476][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.407394][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.418078][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.429690][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.438407][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.445212][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.455564][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.464217][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.472456][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.481456][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.490524][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.500732][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.508764][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.517538][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.533845][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.545593][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.556814][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.567387][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.577625][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.589550][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.601747][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.616192][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.629560][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.639824][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.650843][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.660997][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.671732][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.682192][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.693832][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.705406][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.716361][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.726395][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.736585][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.745611][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.763740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.772564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.785257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.794882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.806360][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819750][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.829039][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845571][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.964251][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.972129][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.025584][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.097044][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.126647][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.149728][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.158639][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.201707][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.229742][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.237807][ T4274] binder: 4273:4274 ioctl c0306201 200000000080 returned -14 [ 74.257083][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.266670][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.311603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.333530][ T4274] binder: 4273:4274 ioctl c0306201 2000000003c0 returned -14 [ 74.355497][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.367714][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.392423][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.434414][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.443595][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.489438][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.540913][ T26] audit: type=1804 audit(1777045347.462:2): pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=32860 res=1 errno=0 [ 74.563738][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.598474][ T26] audit: type=1804 audit(1777045347.512:3): pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.8" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=32860 res=1 errno=0 [ 74.614968][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.645338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.792648][ T4285] kernel profiling enabled (shift: 9) [ 74.810027][ T4283] loop1: detected capacity change from 0 to 256 [ 74.903480][ T4290] loop4: detected capacity change from 0 to 256 [ 74.946192][ T4290] exfat: Deprecated parameter 'utf8' [ 74.989846][ T4290] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 75.087762][ T4283] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.579803][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 75.772011][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 75.778468][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 75.779243][ T26] audit: type=1800 audit(1777045348.692:4): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 75.784715][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 75.784789][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 75.875836][ T4296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.862384][ T4309] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.912555][ T4289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.017911][ T4294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.339882][ T26] audit: type=1800 audit(1777045350.262:5): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 77.408597][ T26] audit: type=1804 audit(1777045350.292:6): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.16" name="bus" dev="ramfs" ino=32925 res=1 errno=0 [ 77.467606][ T26] audit: type=1804 audit(1777045350.292:7): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.16" name="bus" dev="ramfs" ino=32925 res=1 errno=0 [ 77.492455][ T4322] tipc: Started in network mode [ 77.501305][ T26] audit: type=1800 audit(1777045350.302:8): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 77.511863][ T4322] tipc: Node identity 4, cluster identity 4711 [ 77.539056][ T4322] tipc: Node number set to 4 [ 77.754193][ T4328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.054518][ T4331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 79.227023][ T4350] xt_hashlimit: overflow, try lower: 3/0 [ 80.319826][ T4357] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 80.369550][ T4357] loop2: detected capacity change from 0 to 8 [ 80.420312][ T4362] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.468755][ T4357] SQUASHFS error: zlib decompression failed, data probably corrupt [ 80.487239][ T4357] SQUASHFS error: Failed to read block 0x9b: -5 [ 80.499945][ T4357] SQUASHFS error: Unable to read metadata cache entry [99] [ 80.520228][ T4357] SQUASHFS error: Unable to read inode 0x127 [ 80.674848][ T4364] Set syz1 is full, maxelem 1029 reached [ 81.041537][ T4373] x_tables: duplicate entry at hook 1 [ 81.128948][ T4375] MPTCP: addr_signal error, rm_addr=1 [ 81.129053][ T4373] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 81.341816][ T4361] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.404502][ T4379] process 'syz.2.37' launched './file0/file2' with NULL argv: empty string added [ 82.072941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 82.122928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 82.292930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 82.412930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 82.482969][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 82.882931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 82.892930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.142927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.182927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.212936][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.392945][ T4404] ======================================================= [ 84.392945][ T4404] WARNING: The mand mount option has been deprecated and [ 84.392945][ T4404] and is ignored by this kernel. Remove the mand [ 84.392945][ T4404] option from the mount to silence this warning. [ 84.392945][ T4404] ======================================================= [ 86.151018][ T4423] tmpfs: Bad value for 'mpol' [ 87.504891][ T1337] cfg80211: failed to load regulatory.db [ 88.994945][ T4445] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.229070][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 89.287678][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.311757][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.359699][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.400787][ T4458] device bridge_slave_0 left promiscuous mode [ 89.427918][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.504985][ T4458] device bridge_slave_1 left promiscuous mode [ 89.529556][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.624789][ T4458] bond0: (slave bond_slave_0): Releasing backup interface [ 89.726185][ T4458] bond0: (slave bond_slave_1): Releasing backup interface [ 89.903692][ T4458] team0: Port device team_slave_0 removed [ 90.856539][ T4458] team0: Port device team_slave_1 removed [ 90.954558][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.962052][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.981084][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.011571][ T4495] loop2: detected capacity change from 0 to 128 [ 91.043186][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.072424][ T4458] syz.4.58 (4458) used greatest stack depth: 19504 bytes left [ 91.083244][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 91.110061][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.118038][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.178305][ T4465] team0: Mode changed to "broadcast" [ 99.370495][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.378878][ T4545] bridge0: port 2(bridge_slave_1) entered listening state [ 99.379220][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.379278][ T4545] bridge0: port 1(bridge_slave_0) entered listening state [ 99.399751][ T4552] netlink: 104 bytes leftover after parsing attributes in process `syz.0.79'. [ 99.415689][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.416002][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.454295][ T4545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.281186][ T4582] loop0: detected capacity change from 0 to 256 [ 100.513612][ T4584] sp0: Synchronizing with TNC [ 101.153306][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.103'. [ 101.191726][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 101.233156][ T4604] Zero length message leads to an empty skb [ 101.922084][ T4608] loop4: detected capacity change from 0 to 4096 [ 101.955987][ T4611] netlink: 'syz.1.106': attribute type 4 has an invalid length. [ 102.110590][ T4620] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.668868][ T4645] loop2: detected capacity change from 0 to 256 [ 102.699518][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.112'. [ 102.878081][ T4653] kAFS: unable to lookup cell '' [ 103.018325][ T4660] binder: 4659:4660 ioctl c0306201 200000000180 returned -14 [ 103.285978][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 103.309370][ T4506] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.339717][ T4668] netlink: 'syz.4.123': attribute type 29 has an invalid length. [ 103.447743][ T4671] netlink: 'syz.4.123': attribute type 29 has an invalid length. [ 103.490818][ T4668] netlink: 'syz.4.123': attribute type 29 has an invalid length. [ 103.733256][ T4506] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.761582][ T4506] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.832369][ T4506] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 103.917739][ T4506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.932217][ T4685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.795906][ T4685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.834567][ T4506] usb 2-1: config 0 descriptor?? [ 105.068223][ T2241] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.214239][ T4506] usb 2-1: USB disconnect, device number 2 [ 105.305488][ T2241] usb 5-1: Using ep0 maxpacket: 8 [ 105.430445][ T2241] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.476108][ T2241] usb 5-1: config 0 has no interfaces? [ 105.561986][ T2241] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.597025][ T2241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.853272][ T2241] usb 5-1: config 0 descriptor?? [ 106.259493][ T4688] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 106.321707][ T1337] usb 5-1: USB disconnect, device number 2 [ 106.444889][ T4722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 106.802575][ T4506] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 107.798413][ T1283] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.105238][ T4749] loop4: detected capacity change from 0 to 512 [ 108.213337][ T4749] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.147: inode has both inline data and extents flags [ 108.228071][ T4749] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.147: couldn't read orphan inode 15 (err -117) [ 108.245175][ T4749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.343499][ T4506] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 108.352627][ T4506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.378395][ T4506] usb 3-1: Product: syz [ 108.386999][ T4506] usb 3-1: Manufacturer: syz [ 108.391657][ T4506] usb 3-1: SerialNumber: syz [ 108.851249][ T4506] usb 3-1: unit 8 not found! [ 108.856351][ T4506] usb 3-1: unit 6 not found! [ 108.871245][ T4506] usb 3-1: unit 199 not found! [ 108.890219][ T4506] usb 3-1: unit 208 not found! [ 108.947189][ T4506] usb 3-1: USB disconnect, device number 2 [ 109.242551][ T26] audit: type=1326 audit(1777045382.301:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.4.149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d57f42dd9 code=0x0 [ 109.338270][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.391112][ T4759] sch_fq: defrate 53322 ignored. [ 109.809513][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 110.407490][ T4765] loop1: detected capacity change from 0 to 1024 [ 110.450411][ T4765] EXT4-fs (loop1): Ignoring removed orlov option [ 110.464773][ T4769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.472614][ T4769] IPv6: NLM_F_CREATE should be set when creating new route [ 110.501948][ T4765] EXT4-fs (loop1): Ignoring removed bh option [ 110.549130][ T4765] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,orlov,noblock_validity,norecovery,auto_da_alloc,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,nodiscard,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 111.394018][ T4769] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.401553][ T4769] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.838478][ T4265] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.871286][ T4769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.925213][ T4769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.103989][ T4265] usb 5-1: Using ep0 maxpacket: 8 [ 113.222093][ T4265] usb 5-1: config 0 has no interfaces? [ 113.380264][ T4265] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 113.394043][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.402122][ T4265] usb 5-1: Product: syz [ 113.406322][ T4265] usb 5-1: Manufacturer: syz [ 113.411216][ T4265] usb 5-1: SerialNumber: syz [ 113.425750][ T4265] usb 5-1: config 0 descriptor?? [ 113.438229][ T4769] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.447376][ T4769] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.474912][ T4769] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.484014][ T4769] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.710201][ T4799] loop2: detected capacity change from 0 to 1024 [ 113.752137][ T23] usb 5-1: USB disconnect, device number 3 [ 113.808107][ T4799] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.986170][ T4293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.189310][ T4293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.178187][ T4816] device bridge_slave_0 left promiscuous mode [ 115.310703][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.159959][ T4816] device bridge_slave_1 left promiscuous mode [ 117.328108][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.479325][ T4828] fuse: Bad value for 'fd' [ 117.868710][ T4816] bond0: (slave bond_slave_0): Releasing backup interface [ 118.146770][ T4816] bond0: (slave bond_slave_1): Releasing backup interface [ 118.580423][ T4816] team0: Port device team_slave_0 removed [ 118.661514][ T4816] team0: Port device team_slave_1 removed [ 118.715896][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.787954][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.960928][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 120.594101][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.703536][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.711081][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.845865][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 120.865883][ T4231] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 120.964878][ T4230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.133194][ T4230] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.146695][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.155506][ T4230] usb 3-1: Product: syz [ 121.159713][ T4230] usb 3-1: Manufacturer: syz [ 121.164894][ T4230] usb 3-1: SerialNumber: syz [ 121.172864][ T4230] usb 3-1: config 0 descriptor?? [ 121.193473][ T4835] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.381014][ T4231] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 121.392987][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.401652][ T4231] usb 5-1: Product: syz [ 121.405933][ T4231] usb 5-1: Manufacturer: syz [ 121.420099][ T4231] usb 5-1: SerialNumber: syz [ 121.432008][ T4231] usb 5-1: config 0 descriptor?? [ 121.481686][ T4231] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 121.520964][ T4847] usb 3-1: USB disconnect, device number 3 [ 121.623928][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.698254][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.071503][ T4847] Bluetooth: hci2: command 0x041b tx timeout [ 122.360640][ T4832] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.369586][ T4832] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.385620][ T4832] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.395065][ T4832] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.763711][ T4293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.846422][ T4293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.891303][ T4862] fuse: Bad value for 'fd' [ 123.086084][ T4829] chnl_net:caif_netlink_parms(): no params data found [ 123.264688][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.272116][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.280448][ T4829] device bridge_slave_0 entered promiscuous mode [ 123.289640][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.300883][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.310067][ T4829] device bridge_slave_1 entered promiscuous mode [ 123.343215][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.355464][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.438466][ T4829] team0: Port device team_slave_0 added [ 123.466444][ T4829] team0: Port device team_slave_1 added [ 123.648959][ T4231] gspca_stk1135: reg_w 0x203 err -71 [ 123.655475][ T4231] gspca_stk1135: serial bus timeout: status=0x00 [ 123.672801][ T4231] gspca_stk1135: Sensor write failed [ 123.695323][ T4231] gspca_stk1135: serial bus timeout: status=0x00 [ 123.713885][ T4231] gspca_stk1135: Sensor write failed [ 123.732488][ T4231] gspca_stk1135: serial bus timeout: status=0x00 [ 123.733904][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.757511][ T4231] gspca_stk1135: Sensor read failed [ 123.777078][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.782405][ T4231] gspca_stk1135: serial bus timeout: status=0x00 [ 123.883190][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.761984][ T4884] loop2: detected capacity change from 0 to 131072 [ 124.777400][ T4231] gspca_stk1135: Sensor read failed [ 124.782759][ T4231] gspca_stk1135: Detected sensor type unknown (0x0) [ 124.795928][ T4231] gspca_stk1135: serial bus timeout: status=0x00 [ 124.802463][ T4231] gspca_stk1135: Sensor read failed [ 124.807718][ T4231] gspca_stk1135: serial bus timeout: status=0x00 [ 124.822701][ T4231] gspca_stk1135: Sensor read failed [ 124.828041][ T4231] gspca_stk1135: serial bus timeout: status=0x00 [ 124.834672][ T4231] gspca_stk1135: Sensor write failed [ 124.840227][ T4231] gspca_stk1135: serial bus timeout: status=0x00 [ 124.846582][ T4231] gspca_stk1135: Sensor write failed [ 124.864580][ T4231] stk1135: probe of 5-1:0.0 failed with error -71 [ 124.909980][ T4231] usb 5-1: USB disconnect, device number 4 [ 124.950286][ T4884] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.009361][ T4884] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.018274][ T4846] Bluetooth: hci2: command 0x040f tx timeout [ 125.097288][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.115040][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.159734][ T26] audit: type=1804 audit(1777045398.448:10): pid=4884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.185" name="/newroot/35/file1/bus" dev="loop2" ino=10 res=1 errno=0 [ 125.230254][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.582521][ T4829] device hsr_slave_0 entered promiscuous mode [ 125.599783][ T4829] device hsr_slave_1 entered promiscuous mode [ 125.616688][ T4829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.636392][ T4829] Cannot create hsr debugfs directory [ 126.772868][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.780368][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.205221][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 127.395662][ T4938] loop2: detected capacity change from 0 to 512 [ 127.780855][ T4938] EXT4-fs (loop2): Ignoring removed oldalloc option [ 127.796644][ T4938] EXT4-fs (loop2): Ignoring removed nobh option [ 127.933153][ T4938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.190: iget: bad extra_isize 90 (inode size 256) [ 127.951453][ T4938] EXT4-fs (loop2): Remounting filesystem read-only [ 127.965103][ T4938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.190: error while reading EA inode 11 err=-117 [ 127.985240][ T4938] EXT4-fs (loop2): Remounting filesystem read-only [ 127.992006][ T4938] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.017186][ T4938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.190: iget: bad extra_isize 90 (inode size 256) [ 128.040333][ T4938] EXT4-fs (loop2): Remounting filesystem read-only [ 128.050052][ T4938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.190: error while reading EA inode 11 err=-117 [ 128.068420][ T4938] EXT4-fs (loop2): Remounting filesystem read-only [ 128.075754][ T4938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.190: iget: bad extra_isize 90 (inode size 256) [ 128.090271][ T4938] EXT4-fs (loop2): Remounting filesystem read-only [ 128.128320][ T4938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.190: error while reading EA inode 18 err=-117 [ 128.148163][ T4938] EXT4-fs (loop2): Remounting filesystem read-only [ 128.158911][ T4938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.190: iget: bad extra_isize 90 (inode size 256) [ 128.181300][ T4938] EXT4-fs (loop2): Remounting filesystem read-only [ 128.188306][ T4938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.190: error while reading EA inode 18 err=-117 [ 128.207932][ T4938] EXT4-fs (loop2): Remounting filesystem read-only [ 128.217647][ T4938] EXT4-fs (loop2): 1 orphan inode deleted [ 128.226805][ T4938] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,errors=remount-ro,nodiscard,grpid,. Quota mode: none. [ 128.565329][ T4908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.621953][ T4908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.090604][ T4908] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.099650][ T4908] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.108942][ T4908] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.118212][ T4908] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.207699][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 129.216180][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 129.323917][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 129.364617][ T4944] device team1 entered promiscuous mode [ 129.372552][ T4944] 8021q: adding VLAN 0 to HW filter on device team1 [ 129.380748][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 129.402260][ T4945] device team2 entered promiscuous mode [ 129.408321][ T4945] 8021q: adding VLAN 0 to HW filter on device team2 [ 129.475546][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 129.785013][ T4829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.821121][ T4829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.873899][ T4829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.901546][ T4829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.042659][ T4971] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 131.057083][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.105862][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.145963][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.175426][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.294004][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.386969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.428746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.567335][ T4994] ptrace attach of "./syz-executor exec"[4995] was attempted by "./syz-executor exec"[4994] [ 131.886986][ T4993] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.205'. [ 132.391839][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.398237][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.427050][ T4829] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.443474][ T5006] device bridge_slave_0 left promiscuous mode [ 132.485420][ T5006] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.534357][ T5006] device bridge_slave_1 left promiscuous mode [ 132.550282][ T5006] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.635941][ T5006] bond0: (slave bond_slave_0): Releasing backup interface [ 132.667243][ T5006] bond0: (slave bond_slave_1): Releasing backup interface [ 132.709673][ T5006] team0: Port device team_slave_0 removed [ 132.731924][ T5006] team0: Port device team_slave_1 removed [ 132.747582][ T5006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.768745][ T5006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.797446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.810495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.827383][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.834559][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.873215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.893164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.906274][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.913495][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.943736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.994099][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.045120][ T5018] fuse: Bad value for 'fd' [ 133.047065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.121176][ T4293] device hsr_slave_0 left promiscuous mode [ 133.327891][ T4293] device hsr_slave_1 left promiscuous mode [ 133.405869][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.750756][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.771157][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.790117][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.801548][ T4293] device bridge_slave_1 left promiscuous mode [ 133.821729][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.850534][ T4293] device bridge_slave_0 left promiscuous mode [ 133.870571][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.954729][ T4293] device veth1_macvtap left promiscuous mode [ 133.966284][ T4293] device veth0_macvtap left promiscuous mode [ 133.976263][ T4293] device veth1_vlan left promiscuous mode [ 133.988157][ T4293] device veth0_vlan left promiscuous mode [ 134.164254][ T5038] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 134.766031][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 134.790593][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 134.806883][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.833576][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.977449][ T4293] bond0 (unregistering): Released all slaves [ 135.062004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.077830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.120020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.158479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.187551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.252240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.277534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.306649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.327058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.348375][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.783293][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.797516][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.831686][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.292645][ T5089] Illegal XDP return value 18530304, expect packet loss! [ 136.484922][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.502729][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.605468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.772343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.875328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.090504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.361329][ T4829] device veth0_vlan entered promiscuous mode [ 137.760935][ T4829] device veth1_vlan entered promiscuous mode [ 138.007142][ T5115] 9pnet: Insufficient options for proto=fd [ 138.032375][ T4829] device veth0_macvtap entered promiscuous mode [ 138.093828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.178142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.302545][ T4829] device veth1_macvtap entered promiscuous mode [ 138.508811][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.590417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.112744][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.208064][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.266915][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.283552][ T5130] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 139.304559][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.336275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.359402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.408722][ T4829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.472106][ T4829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.493473][ T4829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.533373][ T5135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.242'. [ 139.548349][ T4829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.696783][ T5142] loop4: detected capacity change from 0 to 512 [ 139.731999][ T5135] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.771446][ T5135] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 139.829183][ T5142] EXT4-fs (loop4): Ignoring removed nobh option [ 139.917163][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.933916][ T5142] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.243: corrupted in-inode xattr [ 139.999123][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.999203][ T5142] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.243: couldn't read orphan inode 15 (err -117) [ 140.029911][ T5142] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,nombcache,resuid=0x0000000000000000,usrjquota=,barrier,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 140.058854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.179446][ T5142] tipc: Started in network mode [ 140.184479][ T5142] tipc: Node identity ac14142f, cluster identity 4711 [ 140.219995][ T5142] tipc: New replicast peer: 0.0.0.0 [ 140.227107][ T5142] tipc: Enabled bearer , priority 10 [ 140.292348][ T5153] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 140.333862][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.352357][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.400758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.441702][ T5159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.249'. [ 140.483630][ T5160] overlayfs: failed to clone upperpath [ 140.839352][ T5176] loop2: detected capacity change from 0 to 512 [ 140.985878][ T5176] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 141.068800][ T5176] EXT4-fs (loop2): 1 truncate cleaned up [ 141.084585][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noload,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 141.387136][ T1108] tipc: Node number set to 2886997039 [ 141.418519][ T5176] overlayfs: upper fs needs to support d_type. [ 141.649085][ T4198] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 141.700436][ T4198] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 141.949674][ T4198] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 144.601092][ T5253] ptrace attach of "./syz-executor exec"[4187] was attempted by ""[5253] [ 146.615200][ T5282] sctp: failed to load transform for md5: -2 [ 148.804884][ T5349] loop5: detected capacity change from 0 to 64 [ 148.961666][ T5349] hfs: request for non-existent node 83886080 in B*Tree [ 148.969016][ T5349] hfs: request for non-existent node 83886080 in B*Tree [ 149.525778][ T5349] hfs: get root inode failed [ 150.248901][ C0] sched: RT throttling activated [ 150.304120][ T5349] netlink: 132 bytes leftover after parsing attributes in process `syz.5.290'. [ 152.503778][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.600810][ T4847] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 152.774339][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 152.805557][ T5414] fuse: Unknown parameter '4' [ 152.833004][ T5414] sctp: [Deprecated]: syz.3.310 (pid 5414) Use of int in max_burst socket option deprecated. [ 152.833004][ T5414] Use struct sctp_assoc_value instead [ 152.904622][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.934168][ T4231] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.002097][ T4847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 153.012254][ T4231] usb 6-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 153.049981][ T5422] overlayfs: failed to clone upperpath [ 153.070064][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.119006][ T4231] usb 6-1: config 0 descriptor?? [ 153.207893][ T4847] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 153.228215][ T4847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.265672][ T4847] usb 3-1: Product: syz [ 153.269913][ T4847] usb 3-1: Manufacturer: syz [ 153.310832][ T4847] usb 3-1: SerialNumber: syz [ 153.339443][ T4847] usb 3-1: config 0 descriptor?? [ 153.406740][ T4847] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 153.458477][ T4847] gm12u320: probe of 3-1:0.0 failed with error -5 [ 153.483160][ T4847] usb-storage 3-1:0.0: USB Mass Storage device detected [ 153.543004][ T4847] usb-storage 3-1:0.0: device ignored [ 153.585580][ T1337] usb 6-1: USB disconnect, device number 2 [ 153.625457][ T5401] udc-core: couldn't find an available UDC or it's busy [ 153.668218][ T5401] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.686244][ T5401] misc userio: The device must be registered before sending interrupts [ 154.472997][ T4231] usb 3-1: USB disconnect, device number 4 [ 155.288912][ T5444] loop4: detected capacity change from 0 to 32768 [ 155.478288][ T5444] XFS (loop4): Mounting V5 Filesystem [ 155.794478][ T5444] XFS (loop4): Ending clean mount [ 157.280420][ T5468] device bond1 entered promiscuous mode [ 157.374634][ T4187] XFS (loop4): Unmounting Filesystem [ 157.619108][ T5490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 157.881936][ T4231] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 158.171430][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 158.301694][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.324341][ T4231] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.572716][ T4231] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.591961][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.917981][ T4231] usb 6-1: Product: syz [ 158.978979][ T4231] usb 6-1: Manufacturer: syz [ 159.066145][ T4231] usb 6-1: SerialNumber: syz [ 159.217577][ T4231] usb 6-1: config 0 descriptor?? [ 160.444401][ T5528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.921664][ T1337] usb 6-1: USB disconnect, device number 3 [ 162.187331][ T5544] netlink: 63 bytes leftover after parsing attributes in process `syz.0.336'. [ 162.473640][ T5553] sock: sock_set_timeout: `syz.5.339' (pid 5553) tries to set negative timeout [ 162.546377][ T5559] binder: 5556:5559 ioctl c0306201 200000000680 returned -14 [ 162.684493][ T26] audit: type=1326 audit(1777045434.334:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.3.345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x0 [ 164.141159][ T5593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 165.658249][ T5616] netlink: 140 bytes leftover after parsing attributes in process `syz.3.358'. [ 165.757265][ T5616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 167.823267][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.089216][ T26] audit: type=1107 audit(1777045439.289:12): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 169.789524][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 170.446620][ T5670] device veth0_vlan left promiscuous mode [ 170.650802][ T5699] overlayfs: failed to clone upperpath [ 170.674080][ T5699] overlayfs: failed to clone upperpath [ 170.783291][ T5705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.379'. [ 170.819299][ T1108] usb 3-1: device descriptor read/all, error -71 [ 170.978193][ T5713] device dummy0 entered promiscuous mode [ 170.990875][ T5713] device macvlan2 entered promiscuous mode [ 171.075075][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 171.086933][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 171.094443][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.104532][ T146] Workqueue: hci1 hci_rx_work [ 171.109269][ T146] Call Trace: [ 171.112574][ T146] [ 171.115564][ T146] dump_stack_lvl+0x188/0x250 [ 171.120331][ T146] ? show_regs_print_info+0x20/0x20 [ 171.125596][ T146] ? load_image+0x400/0x400 [ 171.130150][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 171.135306][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 171.140012][ T146] ? process_one_work+0x85f/0x1010 [ 171.145161][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 171.150399][ T146] kobject_add_internal+0x6e0/0xd90 [ 171.155646][ T146] kobject_add+0x160/0x230 [ 171.160097][ T146] ? kobject_init+0x1d0/0x1d0 [ 171.164812][ T146] ? klist_children_get+0x50/0x50 [ 171.169879][ T146] ? get_device_parent+0x121/0x3f0 [ 171.175049][ T146] device_add+0x483/0xfb0 [ 171.179434][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 171.184422][ T146] le_conn_complete_evt+0xc48/0x15c0 [ 171.189767][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 171.194926][ T146] ? __mutex_trylock_common+0x155/0x260 [ 171.200513][ T146] hci_le_meta_evt+0x285/0x3c90 [ 171.205388][ T146] ? hci_event_packet+0x37b/0x1370 [ 171.210527][ T146] ? __lock_acquire+0x7d10/0x7d10 [ 171.215695][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 171.221884][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 171.227534][ T146] ? mark_lock+0x94/0x320 [ 171.231985][ T146] ? mutex_unlock+0x10/0x10 [ 171.236506][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 171.242503][ T146] ? lock_chain_count+0x20/0x20 [ 171.247371][ T146] ? __rwlock_init+0x140/0x140 [ 171.252155][ T146] hci_event_packet+0xe48/0x1370 [ 171.257109][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 171.262336][ T146] ? rcu_lock_release+0x20/0x20 [ 171.267214][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 171.272437][ T146] hci_rx_work+0x255/0xa10 [ 171.276887][ T146] process_one_work+0x85f/0x1010 [ 171.281866][ T146] ? worker_detach_from_pool+0x240/0x240 [ 171.287516][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 171.292821][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 171.297860][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 171.303435][ T146] ? wq_worker_running+0x97/0x170 [ 171.308495][ T146] worker_thread+0xaa6/0x1290 [ 171.313216][ T146] kthread+0x436/0x520 [ 171.317297][ T146] ? rcu_lock_release+0x20/0x20 [ 171.322163][ T146] ? kthread_blkcg+0xd0/0xd0 [ 171.326766][ T146] ret_from_fork+0x1f/0x30 [ 171.331209][ T146] [ 171.336969][ T146] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.350304][ T146] Bluetooth: hci1: failed to register connection device [ 171.501370][ T5726] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 171.562480][ T5733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.386'. [ 171.827125][ T4231] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 171.921093][ T5747] 9pnet_virtio: no channels available for device 127.0.0.1 [ 172.217728][ T4231] usb 5-1: config 0 has too many interfaces: 229, using maximum allowed: 32 [ 172.302994][ T4231] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 229 [ 172.780021][ T4231] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 172.789682][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=31 [ 172.804614][ T4231] usb 5-1: SerialNumber: syz [ 172.832078][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 172.849053][ T4231] usb 5-1: config 0 descriptor?? [ 173.117753][ T5731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.384'. [ 173.168976][ T4231] usb 5-1: USB disconnect, device number 5 [ 173.228594][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 173.564356][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 174.459436][ T5799] Error parsing options; rc = [-22] [ 174.634985][ T26] audit: type=1326 audit(1777045445.277:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 175.114458][ T5800] loop4: detected capacity change from 0 to 512 [ 175.166565][ T26] audit: type=1326 audit(1777045445.351:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 175.240991][ T26] audit: type=1326 audit(1777045445.452:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 175.288989][ T26] audit: type=1326 audit(1777045445.461:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 175.325385][ T26] audit: type=1326 audit(1777045445.461:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 175.425156][ T26] audit: type=1326 audit(1777045445.471:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 175.507294][ T26] audit: type=1326 audit(1777045445.480:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 175.648020][ T26] audit: type=1326 audit(1777045445.563:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 175.712210][ T26] audit: type=1326 audit(1777045445.572:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d57f42dd9 code=0x7ffc0000 [ 176.872265][ T26] audit: type=1326 audit(1777045445.581:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d57f42b42 code=0x7ffc0000 [ 179.678600][ T5836] loop4: detected capacity change from 0 to 32768 [ 179.760884][ T5836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.409 (5836) [ 179.805693][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 179.826087][ T5871] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 179.834918][ T5871] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 179.934746][ T5836] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 179.944113][ T5836] BTRFS info (device loop4): setting nodatasum [ 179.996527][ T5880] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 179.999081][ T5836] BTRFS info (device loop4): force zlib compression, level 3 [ 180.045124][ T5836] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 180.104342][ T5836] BTRFS info (device loop4): use lzo compression, level 0 [ 180.142977][ T5836] BTRFS info (device loop4): turning on flush-on-commit [ 180.179461][ T5836] BTRFS info (device loop4): enabling auto defrag [ 180.210931][ T5836] BTRFS info (device loop4): max_inline at 4096 [ 180.226175][ T5836] BTRFS info (device loop4): using free space tree [ 180.254729][ T5836] BTRFS info (device loop4): has skinny extents [ 180.716002][ T5836] BTRFS error (device loop4): open_ctree failed: -12 [ 180.821549][ T5908] loop2: detected capacity change from 0 to 128 [ 181.251515][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 182.305522][ T5942] loop4: detected capacity change from 0 to 256 [ 184.183368][ T5946] loop2: detected capacity change from 0 to 64 [ 184.320610][ T5946] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 184.367263][ T5952] overlayfs: failed to clone upperpath [ 186.852799][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 187.051847][ T5991] overlayfs: failed to clone upperpath [ 187.331348][ T5999] syz.3.453 uses obsolete (PF_INET,SOCK_PACKET) [ 189.465236][ T6027] kvm: pic: non byte read [ 189.470340][ T6027] kvm: pic: non byte read [ 189.525879][ T6027] kvm: pic: non byte read [ 189.722868][ T6044] xt_policy: output policy not valid in PREROUTING and INPUT [ 191.757939][ T6064] netlink: 'syz.2.470': attribute type 4 has an invalid length. [ 191.818121][ T6066] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 191.853958][ T6064] netlink: 'syz.2.470': attribute type 4 has an invalid length. [ 191.880389][ T6066] bond1: (slave gretap1): making interface the new active one [ 191.901330][ T6066] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 191.954157][ T23] libceph: connect (1)[c::]:6789 error -101 [ 192.205530][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 192.836548][ T23] libceph: connect (1)[c::]:6789 error -101 [ 192.853505][ T6054] ceph: No mds server is up or the cluster is laggy [ 192.857642][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 192.873230][ T6074] loop2: detected capacity change from 0 to 164 [ 193.021112][ T6074] Unable to read rock-ridge attributes [ 193.529848][ T6094] device bridge1 entered promiscuous mode [ 193.672315][ T6101] autofs4:pid:6101:autofs_fill_super: called with bogus options [ 194.987348][ T4789] Bluetooth: hci1: command 0x0406 tx timeout [ 195.073283][ T4789] Bluetooth: hci3: command 0x0406 tx timeout [ 195.106701][ T4789] Bluetooth: hci4: command 0x0406 tx timeout [ 195.972335][ T6124] loop5: detected capacity change from 0 to 256 [ 196.371123][ T6124] msdos filesystem being mounted at /syzcgroup/unified/syz5 supports timestamps until 2107-12-31 (0x10391447e) [ 199.057977][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.075315][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.610313][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 200.913044][ T6199] 9pnet: Insufficient options for proto=fd [ 201.922159][ T6191] team0 (unregistering): Port device team_slave_0 removed [ 202.037656][ T6191] team0 (unregistering): Port device team_slave_1 removed [ 205.860812][ T6256] loop2: detected capacity change from 0 to 2048 [ 206.982516][ T6269] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.874919][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 207.874937][ T26] audit: type=1800 audit(3924529125.025:85): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.529" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 208.219632][ T6288] ufs: You didn't specify the type of your ufs filesystem [ 208.219632][ T6288] [ 208.219632][ T6288] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 208.219632][ T6288] [ 208.219632][ T6288] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 208.251815][ T6288] ufs: ufstype=old is supported read-only [ 208.264679][ T6288] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.104341][ T6290] xt_hashlimit: size too large, truncated to 1048576 [ 209.163937][ T6290] xt_hashlimit: invalid rate [ 211.477611][ T6315] netlink: 32 bytes leftover after parsing attributes in process `syz.0.546'. [ 213.733894][ T6337] netlink: 'syz.5.555': attribute type 1 has an invalid length. [ 213.799433][ T6337] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.555'. [ 215.811775][ T6374] capability: warning: `syz.0.567' uses deprecated v2 capabilities in a way that may be insecure [ 225.920045][ T6494] loop4: detected capacity change from 0 to 512 [ 226.510669][ T6494] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.526734][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.602'. [ 226.541648][ T6494] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.751017][ T6510] netlink: 'syz.0.605': attribute type 10 has an invalid length. [ 226.776590][ T6510] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 226.958830][ T4792] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 228.432976][ T4792] usb 3-1: config 0 has no interfaces? [ 229.603159][ T4792] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.612271][ T4792] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.635259][ T4792] usb 3-1: Product: syz [ 229.649705][ T4792] usb 3-1: Manufacturer: syz [ 229.654354][ T4792] usb 3-1: SerialNumber: syz [ 229.671579][ T4792] usb 3-1: config 0 descriptor?? [ 229.854018][ T13] usb 3-1: USB disconnect, device number 7 [ 232.044232][ T6570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.625'. [ 232.150807][ T6570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.625'. [ 232.216235][ T6570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.625'. [ 232.281841][ T6570] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 233.602528][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 233.743754][ T4792] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 234.042943][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'. [ 234.154386][ T6589] device batadv_slave_1 entered promiscuous mode [ 234.211592][ T6588] device batadv_slave_1 left promiscuous mode [ 235.036596][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.061189][ T6598] IPVS: Error connecting to the multicast addr [ 235.069171][ T4792] usb 3-1: Using ep0 maxpacket: 16 [ 235.081878][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.633'. [ 235.203794][ T4792] usb 3-1: config 0 has no interfaces? [ 235.225563][ T21] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 235.241863][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.269696][ T21] usb 5-1: Product: syz [ 235.447917][ T4792] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.457621][ T21] usb 5-1: Manufacturer: syz [ 235.462268][ T21] usb 5-1: SerialNumber: syz [ 235.467324][ T4792] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.475355][ T4792] usb 3-1: Manufacturer: syz [ 235.489904][ T21] usb 5-1: config 0 descriptor?? [ 235.500261][ T4792] usb 3-1: config 0 descriptor?? [ 235.533652][ T21] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 235.539995][ T21] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 235.914072][ T6584] udc-core: couldn't find an available UDC or it's busy [ 236.257512][ T6584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.409317][ T4792] usb 5-1: USB disconnect, device number 6 [ 236.649178][ T6631] capability: warning: `syz.3.645' uses 32-bit capabilities (legacy support in use) [ 236.878949][ T6638] overlayfs: failed to clone upperpath [ 236.889364][ T6581] Set syz1 is full, maxelem 6117 reached [ 236.980283][ T4846] usb 3-1: USB disconnect, device number 8 [ 238.158356][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 238.330687][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 238.370840][ T6658] device lo entered promiscuous mode [ 238.376689][ T6658] device tunl0 entered promiscuous mode [ 238.409776][ T6658] device gre0 entered promiscuous mode [ 238.434951][ T6658] device gretap0 entered promiscuous mode [ 238.501253][ T6658] device erspan0 entered promiscuous mode [ 238.507175][ T6658] device ip_vti0 entered promiscuous mode [ 238.573363][ T6658] device ip6_vti0 entered promiscuous mode [ 238.815972][ T6658] device sit0 entered promiscuous mode [ 239.094617][ T6658] device ip6tnl0 entered promiscuous mode [ 239.521213][ T6658] device ip6gre0 entered promiscuous mode [ 239.527132][ T6658] device ip6gretap0 entered promiscuous mode [ 239.559256][ T6667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 239.635925][ T6658] device bridge0 entered promiscuous mode [ 239.670251][ T6658] device vcan0 entered promiscuous mode [ 239.698496][ T6658] device bond0 entered promiscuous mode [ 239.744813][ T6658] device team0 entered promiscuous mode [ 239.768008][ T6658] device dummy0 entered promiscuous mode [ 239.773913][ T6658] device nlmon0 entered promiscuous mode [ 239.779717][ T6658] device caif0 entered promiscuous mode [ 239.785407][ T6658] device batadv0 entered promiscuous mode [ 239.802513][ T6658] device veth0 entered promiscuous mode [ 239.808252][ T6658] device veth1 entered promiscuous mode [ 239.826548][ T6658] device wg0 entered promiscuous mode [ 239.832214][ T6658] device wg1 entered promiscuous mode [ 239.880391][ T6658] device wg2 entered promiscuous mode [ 239.890303][ T6658] device veth0_to_bridge entered promiscuous mode [ 239.919677][ T6658] device bridge_slave_0 entered promiscuous mode [ 240.136765][ T6658] device veth1_to_bridge entered promiscuous mode [ 240.338586][ T6658] device bridge_slave_1 entered promiscuous mode [ 240.584521][ T6658] device veth0_to_bond entered promiscuous mode [ 240.636020][ T6658] device bond_slave_0 entered promiscuous mode [ 240.646827][ T6658] device veth1_to_bond entered promiscuous mode [ 240.653343][ T6658] device bond_slave_1 entered promiscuous mode [ 240.685585][ T6658] device veth0_to_team entered promiscuous mode [ 240.698773][ T6658] device team_slave_0 entered promiscuous mode [ 240.706075][ T6658] device veth1_to_team entered promiscuous mode [ 240.718443][ T6658] device team_slave_1 entered promiscuous mode [ 240.729249][ T6658] device veth0_to_batadv entered promiscuous mode [ 240.746629][ T6658] device batadv_slave_0 entered promiscuous mode [ 240.753797][ T6658] device veth1_to_batadv entered promiscuous mode [ 240.767144][ T6658] device batadv_slave_1 entered promiscuous mode [ 240.773944][ T6658] device xfrm0 entered promiscuous mode [ 240.785304][ T6658] device veth0_to_hsr entered promiscuous mode [ 240.794947][ T6658] device veth1_to_hsr entered promiscuous mode [ 240.806434][ T6658] device hsr0 entered promiscuous mode [ 240.814152][ T6658] device veth1_virt_wifi entered promiscuous mode [ 240.836394][ T6659] loop2: detected capacity change from 0 to 32768 [ 240.843842][ T6658] device veth0_virt_wifi entered promiscuous mode [ 240.851129][ T6658] device virt_wifi0 entered promiscuous mode [ 240.857877][ T6658] device vlan0 entered promiscuous mode [ 240.875182][ T6658] device vlan1 entered promiscuous mode [ 240.881083][ T6658] device macvlan0 entered promiscuous mode [ 240.892219][ T6658] device macvlan1 entered promiscuous mode [ 240.898929][ T6658] device ipvlan0 entered promiscuous mode [ 240.904845][ T6658] device ipvlan1 entered promiscuous mode [ 240.916332][ T6658] device macvtap0 entered promiscuous mode [ 240.922487][ T6658] device macsec0 entered promiscuous mode [ 240.928994][ T6658] device geneve0 entered promiscuous mode [ 240.935035][ T6658] device geneve1 entered promiscuous mode [ 240.958660][ T6658] device wlan0 entered promiscuous mode [ 240.982519][ T6658] device wlan1 entered promiscuous mode [ 240.992999][ T6658] device erspan1 entered promiscuous mode [ 241.003568][ T6658] device eth0 entered promiscuous mode [ 241.022857][ T6659] JBD2: Ignoring recovery information on journal [ 241.059821][ T6658] device eth1 entered promiscuous mode [ 241.080240][ T6659] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 241.112828][ T6658] device eth2 entered promiscuous mode [ 241.118714][ T6658] device eth3 entered promiscuous mode [ 241.486966][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.666'. [ 243.483193][ T6717] device ipip0 entered promiscuous mode [ 243.513461][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 244.458007][ T4198] ocfs2: Unmounting device (7,2) on (node local) [ 248.872954][ T6773] ptrace attach of "./syz-executor exec"[6774] was attempted by "./syz-executor exec"[6773] [ 249.515902][ T6771] netlink: 798 bytes leftover after parsing attributes in process `syz.3.690'. [ 250.727143][ T4846] Bluetooth: hci2: command 0x0406 tx timeout [ 250.872181][ T6789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.430787][ T6819] netlink: 10 bytes leftover after parsing attributes in process `syz.3.701'. [ 253.480440][ T6821] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.003017][ T6831] No such timeout policy "syz1" [ 254.861509][ T26] audit: type=1804 audit(3924529168.383:86): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.709" name="bus" dev="ramfs" ino=42243 res=1 errno=0 [ 254.930827][ T26] audit: type=1804 audit(3924529168.401:87): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.709" name="bus" dev="ramfs" ino=42243 res=1 errno=0 [ 256.317826][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 256.335637][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 256.345712][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 256.356246][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 256.365916][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 258.547434][ T6880] binder: BINDER_SET_CONTEXT_MGR already set [ 258.573761][ T6880] binder: 6879:6880 ioctl 4018620d 2000000002c0 returned -16 [ 258.631497][ T6880] binder: 6879:6880 ioctl c0306201 200000000680 returned -14 [ 264.119264][ T6915] Set syz1 is full, maxelem 6117 reached [ 264.904390][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.884467][ T6934] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 265.985156][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.487434][ T26] audit: type=1326 audit(3924529180.036:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 267.594702][ T26] audit: type=1326 audit(3924529180.064:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 267.654020][ T26] audit: type=1326 audit(3924529180.101:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 267.677694][ T26] audit: type=1326 audit(3924529180.101:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 267.736095][ T26] audit: type=1326 audit(3924529180.101:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 267.766666][ T26] audit: type=1326 audit(3924529180.101:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 267.896950][ T26] audit: type=1326 audit(3924529180.101:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 267.968225][ T26] audit: type=1326 audit(3924529180.119:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 268.012048][ T26] audit: type=1326 audit(3924529180.119:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 268.036367][ T26] audit: type=1326 audit(3924529180.119:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3391fc8dd9 code=0x7ffc0000 [ 268.198097][ T6976] netlink: set zone limit has 8 unknown bytes [ 270.328867][ T7011] ªªªªª: renamed from virt_wifi0 [ 270.335210][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.758'. [ 273.701943][ T7016] ipt_CLUSTERIP: Please specify destination IP [ 273.737802][ T7044] loop2: detected capacity change from 0 to 164 [ 274.523658][ T7044] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.568694][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.773'. [ 276.853230][ T7065] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.862833][ T7065] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.871875][ T7065] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.880806][ T7065] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.060800][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.773'. [ 278.883030][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 281.592691][ T7141] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 283.675652][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 284.383038][ T7172] loop2: detected capacity change from 0 to 256 [ 284.533005][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 284.597051][ T7172] exfat: Deprecated parameter 'utf8' [ 284.640158][ T7172] exfat: Deprecated parameter 'namecase' [ 284.852924][ T7172] exfat: Deprecated parameter 'namecase' [ 285.032139][ T7172] exfat: Deprecated parameter 'utf8' [ 285.315453][ T7172] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 285.465416][ T7184] xt_policy: output policy not valid in PREROUTING and INPUT [ 285.542915][ T7172] exfat filesystem being mounted at /149/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 286.387767][ T7189] 9p filesystem being mounted at /199/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 287.832442][ T7214] kvm: pic: non byte read [ 287.843502][ T7214] kvm: pic: non byte read [ 287.854151][ T7214] kvm: pic: non byte read [ 288.746337][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 289.445711][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.520802][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.577174][ T7209] device bridge_slave_0 entered promiscuous mode [ 289.632475][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.663818][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.672281][ T7209] device bridge_slave_1 entered promiscuous mode [ 289.704133][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.720082][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.002199][ T4847] Bluetooth: hci5: command 0x0409 tx timeout [ 290.503039][ T7209] team0: Port device team_slave_0 added [ 290.610674][ T7209] team0: Port device team_slave_1 added [ 290.729497][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.736539][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.785209][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.798683][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.809049][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.935244][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.829059][ T7265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 291.908616][ T7209] device hsr_slave_0 entered promiscuous mode [ 291.954828][ T7209] device hsr_slave_1 entered promiscuous mode [ 291.968472][ T7209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.000196][ T7209] Cannot create hsr debugfs directory [ 292.342807][ T4846] Bluetooth: hci5: command 0x041b tx timeout [ 292.353807][ T7209] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.383850][ T7209] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.402838][ T7209] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 292.420890][ T7209] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 292.531774][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.584235][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.611230][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.643920][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.652697][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.665490][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.678974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.694994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.705494][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.712634][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.729077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.781526][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.921882][ T7209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.933327][ T7209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.982625][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.068021][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.081594][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.094922][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.102137][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.114907][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.124407][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.267662][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.574426][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.818054][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.877500][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.911629][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.920705][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.929743][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.938393][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.968118][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.984026][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.053867][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 294.363226][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.597061][ T4846] Bluetooth: hci5: command 0x040f tx timeout [ 294.603300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.622237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.177754][ T154] tipc: Disabling bearer [ 295.194428][ T154] tipc: Left network mode [ 296.445520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.463743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.551461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.570326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.607179][ T7209] device veth0_vlan entered promiscuous mode [ 296.619649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.642888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.683350][ T7209] device veth1_vlan entered promiscuous mode [ 296.787320][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.825248][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.851484][ T4846] Bluetooth: hci5: command 0x0419 tx timeout [ 297.184639][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.558670][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.576390][ T7209] device veth0_macvtap entered promiscuous mode [ 298.354162][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.383129][ T7209] device veth1_macvtap entered promiscuous mode [ 298.452280][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.472609][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.517124][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.529810][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.540426][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.551547][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.581176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.597379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.606387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.692548][ T7399] ufs: You didn't specify the type of your ufs filesystem [ 298.692548][ T7399] [ 298.692548][ T7399] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 298.692548][ T7399] [ 298.692548][ T7399] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 298.723788][ T7399] ufs: ufstype=old is supported read-only [ 298.731484][ T7399] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.776614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.820620][ T7209] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.875491][ T7209] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.964900][ T7209] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.973762][ T7209] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.036949][ T7412] xt_hashlimit: size too large, truncated to 1048576 [ 301.043693][ T7412] xt_hashlimit: invalid rate [ 301.191446][ T154] device hsr_slave_0 left promiscuous mode [ 301.202703][ T154] device hsr_slave_1 left promiscuous mode [ 301.226073][ T154] device veth1_macvtap left promiscuous mode [ 301.270345][ T154] device veth0_macvtap left promiscuous mode [ 301.298638][ T154] device veth1_vlan left promiscuous mode [ 301.488280][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 301.488297][ T26] audit: type=1800 audit(3924529211.399:154): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.875" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 302.802133][ T7450] loop2: detected capacity change from 0 to 512 [ 302.983574][ T7450] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 303.018789][ T7450] msdos filesystem being mounted at /163/bus supports timestamps until 2107-12-31 (0x103911d1e) [ 303.979797][ T154] bond0 (unregistering): Released all slaves [ 304.924401][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.958653][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.091846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.110707][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.883'. [ 305.215117][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.228806][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.367470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.171530][ T7480] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 306.204404][ T7480] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.885'. [ 309.046294][ T7526] mmap: syz.0.898 (7526): VmData 175874048 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 313.923003][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 314.703179][ T4792] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 315.394734][ T4792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.404891][ T4792] usb 3-1: config 0 has no interfaces? [ 315.437998][ T4792] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice= e.76 [ 315.447402][ T4792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.489784][ T4792] usb 3-1: config 0 descriptor?? [ 316.519497][ T4846] usb 3-1: USB disconnect, device number 9 [ 316.879087][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 316.950939][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 320.109198][ T4230] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 320.761566][ T7645] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.922476][ T7645] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.009224][ T4792] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 321.057078][ T7645] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.142949][ T7645] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.241141][ T7645] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.272658][ T7645] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.297654][ T7645] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.324292][ T7645] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.410050][ T4792] usb 7-1: config 0 has no interfaces? [ 321.584659][ T4792] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 321.612376][ T4792] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 321.668900][ T4792] usb 7-1: Product: syz [ 321.687207][ T4792] usb 7-1: Manufacturer: syz [ 321.713403][ T4792] usb 7-1: SerialNumber: syz [ 321.782614][ T4792] usb 7-1: config 0 descriptor?? [ 321.907185][ T7694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.019431][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 322.105560][ T4846] usb 7-1: USB disconnect, device number 2 [ 323.721323][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 323.834626][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.948'. [ 323.891723][ T4230] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 323.904048][ T4230] usb 3-1: can't read configurations, error -71 [ 327.779758][ T7809] netlink: 'syz.2.965': attribute type 10 has an invalid length. [ 327.808363][ T7809] device wlan1 left promiscuous mode [ 327.860570][ T7809] device wlan1 entered promiscuous mode [ 327.899962][ T7809] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.269653][ T7837] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 329.298063][ T7837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 331.448735][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.455087][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.943415][ T7889] ptrace attach of "./syz-executor exec"[7893] was attempted by "./syz-executor exec"[7889] [ 337.168811][ T7898] netlink: 798 bytes leftover after parsing attributes in process `syz.0.995'. [ 337.365468][ T7909] netlink: 40 bytes leftover after parsing attributes in process `syz.6.986'. [ 337.413595][ T7909] netlink: 40 bytes leftover after parsing attributes in process `syz.6.986'. [ 337.440551][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.989'. [ 337.460679][ T7909] netlink: 40 bytes leftover after parsing attributes in process `syz.6.986'. [ 337.487595][ T7909] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 337.529498][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.989'. [ 337.714836][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.992'. [ 339.435588][ T7940] No such timeout policy "syz1" [ 340.427229][ T7963] overlayfs: failed to clone upperpath [ 340.480935][ T7960] netlink: 10 bytes leftover after parsing attributes in process `syz.5.998'. [ 340.653193][ T7967] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.094313][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1014'. [ 344.151304][ T8005] ODEBUG: Out of memory. ODEBUG disabled [ 344.223608][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1014'. [ 348.461691][ T8047] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 349.603674][ T8063] device ipip0 entered promiscuous mode [ 350.278370][ T8079] No such timeout policy "syz1" [ 350.309300][ T8072] loop2: detected capacity change from 0 to 2048 [ 350.862764][ T26] audit: type=1804 audit(3924529256.962:155): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1029" name="bus" dev="ramfs" ino=46614 res=1 errno=0 [ 350.890031][ T8072] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 350.982133][ T26] audit: type=1804 audit(3924529257.017:156): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1029" name="bus" dev="ramfs" ino=46614 res=1 errno=0 [ 351.193023][ T8070] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 351.253414][ T8070] [ 351.255793][ T8070] ====================================================== [ 351.262836][ T8070] WARNING: possible circular locking dependency detected [ 351.269880][ T8070] syzkaller #0 Not tainted [ 351.274306][ T8070] ------------------------------------------------------ [ 351.281331][ T8070] syz.2.1027/8070 is trying to acquire lock: [ 351.287325][ T8070] ffff8880615c8ac0 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 351.297109][ T8070] [ 351.297109][ T8070] but task is already holding lock: [ 351.304482][ T8070] ffff88805ded6c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 351.314680][ T8070] [ 351.314680][ T8070] which lock already depends on the new lock. [ 351.314680][ T8070] [ 351.325122][ T8070] [ 351.325122][ T8070] the existing dependency chain (in reverse order) is: [ 351.334146][ T8070] [ 351.334146][ T8070] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 351.342584][ T8070] percpu_down_read+0x46/0x1b0 [ 351.347893][ T8070] ext4_writepages+0x20f/0x2df0 [ 351.353279][ T8070] do_writepages+0x476/0x6e0 [ 351.358411][ T8070] __writeback_single_inode+0x153/0xda0 [ 351.364492][ T8070] writeback_single_inode+0x3cb/0x8e0 [ 351.370487][ T8070] write_inode_now+0x23b/0x2c0 [ 351.375801][ T8070] iput+0x5ab/0x8a0 [ 351.380223][ T8070] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 351.386132][ T8070] ext4_xattr_block_set+0x4fd/0x2d20 [ 351.391954][ T8070] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 351.398297][ T8070] __ext4_expand_extra_isize+0x301/0x3e0 [ 351.404469][ T8070] __ext4_mark_inode_dirty+0x469/0x700 [ 351.410574][ T8070] ext4_evict_inode+0xa8d/0x1090 [ 351.416067][ T8070] evict+0x4c9/0x8d0 [ 351.420498][ T8070] ext4_orphan_cleanup+0xad2/0x1320 [ 351.426230][ T8070] ext4_fill_super+0x8d6e/0x94f0 [ 351.431701][ T8070] mount_bdev+0x287/0x3c0 [ 351.436588][ T8070] legacy_get_tree+0xe6/0x180 [ 351.441805][ T8070] vfs_get_tree+0x88/0x270 [ 351.446757][ T8070] do_new_mount+0x24a/0xa40 [ 351.451804][ T8070] __se_sys_mount+0x2e3/0x3d0 [ 351.457018][ T8070] do_syscall_64+0x4c/0xa0 [ 351.461970][ T8070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.468415][ T8070] [ 351.468415][ T8070] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 351.476025][ T8070] __lock_acquire+0x2c42/0x7d10 [ 351.481419][ T8070] lock_acquire+0x19e/0x400 [ 351.486454][ T8070] down_write+0x38/0x60 [ 351.491143][ T8070] ext4_destroy_inline_data+0x24/0xe0 [ 351.497057][ T8070] ext4_writepages+0x670/0x2df0 [ 351.502441][ T8070] do_writepages+0x476/0x6e0 [ 351.507567][ T8070] filemap_fdatawrite_wbc+0x1eb/0x240 [ 351.513475][ T8070] file_write_and_wait_range+0x14d/0x220 [ 351.519640][ T8070] ext4_sync_file+0x1ff/0xae0 [ 351.524857][ T8070] ext4_buffered_write_iter+0x338/0x3b0 [ 351.530934][ T8070] ext4_file_write_iter+0x74d/0x1700 [ 351.536758][ T8070] vfs_write+0x745/0xd60 [ 351.541534][ T8070] ksys_write+0x152/0x260 [ 351.546397][ T8070] do_syscall_64+0x4c/0xa0 [ 351.551344][ T8070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.557770][ T8070] [ 351.557770][ T8070] other info that might help us debug this: [ 351.557770][ T8070] [ 351.568021][ T8070] Possible unsafe locking scenario: [ 351.568021][ T8070] [ 351.575498][ T8070] CPU0 CPU1 [ 351.580873][ T8070] ---- ---- [ 351.586251][ T8070] lock(&sbi->s_writepages_rwsem); [ 351.591458][ T8070] lock(&ei->xattr_sem); [ 351.598403][ T8070] lock(&sbi->s_writepages_rwsem); [ 351.606130][ T8070] lock(&ei->xattr_sem); [ 351.610483][ T8070] [ 351.610483][ T8070] *** DEADLOCK *** [ 351.610483][ T8070] [ 351.618633][ T8070] 3 locks held by syz.2.1027/8070: [ 351.623750][ T8070] #0: ffff88807d0e2870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 351.632999][ T8070] #1: ffff88805ded0460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 351.641899][ T8070] #2: ffff88805ded6c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 351.652440][ T8070] [ 351.652440][ T8070] stack backtrace: [ 351.658341][ T8070] CPU: 0 PID: 8070 Comm: syz.2.1027 Not tainted syzkaller #0 [ 351.665718][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 351.675781][ T8070] Call Trace: [ 351.679071][ T8070] [ 351.682022][ T8070] dump_stack_lvl+0x188/0x250 [ 351.686712][ T8070] ? load_image+0x400/0x400 [ 351.691229][ T8070] ? show_regs_print_info+0x20/0x20 [ 351.696445][ T8070] ? print_circular_bug+0x12b/0x1a0 [ 351.701658][ T8070] check_noncircular+0x296/0x330 [ 351.706610][ T8070] ? add_chain_block+0x940/0x940 [ 351.711562][ T8070] ? lockdep_lock+0xf1/0x1f0 [ 351.716171][ T8070] ? mark_lock+0x94/0x320 [ 351.720512][ T8070] __lock_acquire+0x2c42/0x7d10 [ 351.725493][ T8070] ? verify_lock_unused+0x140/0x140 [ 351.730705][ T8070] ? mark_lock+0x94/0x320 [ 351.735053][ T8070] ? verify_lock_unused+0x140/0x140 [ 351.740291][ T8070] ? __lock_acquire+0x12e8/0x7d10 [ 351.745331][ T8070] ? hlock_conflict+0x59/0x1f0 [ 351.750137][ T8070] lock_acquire+0x19e/0x400 [ 351.754653][ T8070] ? ext4_destroy_inline_data+0x24/0xe0 [ 351.760226][ T8070] ? read_lock_is_recursive+0x10/0x10 [ 351.765617][ T8070] ? rcu_read_lock_any_held+0xb0/0x130 [ 351.771099][ T8070] ? ext4_journal_check_start+0x180/0x250 [ 351.776829][ T8070] down_write+0x38/0x60 [ 351.780997][ T8070] ? ext4_destroy_inline_data+0x24/0xe0 [ 351.787009][ T8070] ext4_destroy_inline_data+0x24/0xe0 [ 351.792399][ T8070] ext4_writepages+0x670/0x2df0 [ 351.797271][ T8070] ? lockdep_lock+0xf1/0x1f0 [ 351.801883][ T8070] ? verify_lock_unused+0x140/0x140 [ 351.807103][ T8070] ? ext4_readpage+0x2e0/0x2e0 [ 351.811892][ T8070] ? __lock_acquire+0x7d10/0x7d10 [ 351.816928][ T8070] ? do_raw_spin_lock+0x128/0x2f0 [ 351.821981][ T8070] ? do_raw_spin_unlock+0x11d/0x230 [ 351.827198][ T8070] ? ext4_readpage+0x2e0/0x2e0 [ 351.831980][ T8070] do_writepages+0x476/0x6e0 [ 351.836588][ T8070] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 351.842169][ T8070] ? __writepage+0x130/0x130 [ 351.846775][ T8070] ? __lock_acquire+0x7d10/0x7d10 [ 351.851814][ T8070] ? __rwlock_init+0x140/0x140 [ 351.856745][ T8070] ? generic_write_end+0x24d/0x3d0 [ 351.861882][ T8070] ? do_raw_spin_unlock+0x11d/0x230 [ 351.867098][ T8070] filemap_fdatawrite_wbc+0x1eb/0x240 [ 351.872501][ T8070] file_write_and_wait_range+0x14d/0x220 [ 351.878148][ T8070] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 351.883540][ T8070] ext4_sync_file+0x1ff/0xae0 [ 351.888234][ T8070] ext4_buffered_write_iter+0x338/0x3b0 [ 351.893802][ T8070] ext4_file_write_iter+0x74d/0x1700 [ 351.899108][ T8070] ? rcu_read_lock_any_held+0xb0/0x130 [ 351.904593][ T8070] ? ext4_file_read_iter+0x700/0x700 [ 351.909897][ T8070] ? end_current_label_crit_section+0x14b/0x170 [ 351.916171][ T8070] ? memset+0x1e/0x40 [ 351.920354][ T8070] ? iov_iter_init+0xb4/0x170 [ 351.925050][ T8070] vfs_write+0x745/0xd60 [ 351.929304][ T8070] ? file_end_write+0x250/0x250 [ 351.934170][ T8070] ? __fget_files+0x40f/0x480 [ 351.938887][ T8070] ? mutex_lock_nested+0x17/0x20 [ 351.943842][ T8070] ? __fdget_pos+0x2bf/0x370 [ 351.948448][ T8070] ? ksys_write+0x71/0x260 [ 351.952897][ T8070] ksys_write+0x152/0x260 [ 351.957242][ T8070] ? __ia32_sys_read+0x80/0x80 [ 351.962025][ T8070] ? lockdep_hardirqs_on+0x94/0x140 [ 351.967243][ T8070] do_syscall_64+0x4c/0xa0 [ 351.971668][ T8070] ? clear_bhb_loop+0x30/0x80 [ 351.976363][ T8070] ? clear_bhb_loop+0x30/0x80 [ 351.981063][ T8070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.986987][ T8070] RIP: 0033:0x7f9f473dedd9 [ 351.991423][ T8070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.011223][ T8070] RSP: 002b:00007f9f45638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.019668][ T8070] RAX: ffffffffffffffda RBX: 00007f9f47657fa0 RCX: 00007f9f473dedd9 [ 352.027654][ T8070] RDX: 0000000000001006 RSI: 0000200000001440 RDI: 0000000000000005 [ 352.035662][ T8070] RBP: 00007f9f47474d69 R08: 0000000000000000 R09: 0000000000000000 [ 352.043663][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.051843][ T8070] R13: 00007f9f47658038 R14: 00007f9f47657fa0 R15: 00007ffd013eb0b8 [ 352.059833][ T8070] [ 352.205176][ T8100] loop6: detected capacity change from 0 to 512 [ 352.256207][ T8070] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 352.822915][ T8100] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 352.838259][ T8100] msdos filesystem being mounted at /23/bus supports timestamps until 2107-12-31 (0x103911d1e) [ 353.135129][ T8070] EXT4-fs (loop2): This should not happen!! Data will be lost [ 353.135129][ T8070] [ 353.221050][ T8070] EXT4-fs (loop2): Total free blocks count 0 [ 353.233839][ T8070] EXT4-fs (loop2): Free/Dirty block details [ 353.248956][ T8070] EXT4-fs (loop2): free_blocks=4096 [ 353.262417][ T8070] EXT4-fs (loop2): dirty_blocks=16 [ 353.273568][ T8070] EXT4-fs (loop2): Block reservation details [ 353.279674][ T8070] EXT4-fs (loop2): i_reserved_data_blocks=1