last executing test programs: 2m43.376220046s ago: executing program 3 (id=237): r0 = socket(0x1e, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) 2m43.005264388s ago: executing program 3 (id=239): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2100, 0x0) 2m40.302542141s ago: executing program 3 (id=241): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0) 2m39.31734193s ago: executing program 3 (id=246): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() syz_emit_ethernet(0x3e, &(0x7f0000000440)={@random="cd1242bdc9ea", @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0xc054) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x6d9d9000) 2m35.260747583s ago: executing program 3 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 2m32.429064512s ago: executing program 3 (id=258): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0xffffffffffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x70af, 0x0, 0x6, 0x0, 0x20}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r6, 0x0, 0x0}, 0x20) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) 2m16.589239707s ago: executing program 32 (id=258): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0xffffffffffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x70af, 0x0, 0x6, 0x0, 0x20}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r6, 0x0, 0x0}, 0x20) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) 12.49892367s ago: executing program 1 (id=621): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x2, 0x7, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0x10003}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c80)}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) socket$inet6(0xa, 0x2, 0x7d08) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) read$FUSE(r3, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 9.210172845s ago: executing program 0 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002400)=[{0xd28, 0x1, 0x8, "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"}], 0xd28}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.071606429s ago: executing program 1 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 9.017581949s ago: executing program 0 (id=633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="a361719f50d51ccbc842bd9b09317208a4802325cb48780df8a19d4961c578b80d5b7d20b73a068ed966e806f913998f83f5742d808f2653973d38cc88dccf31832c5d5318388c642472595064dd2d5499eee19b1e2e5dbe00e37f4e6ed4b15ac778a4f54a2d87ed2b1edfca784cb452d67270ef792dc71af7b81149f8fc938c61e03a340b36c94a0656bde901b7376cefa02c9e3d5db26ce13e0f3f8b5a2807cf42098f399ab957621ae45a63e0", 0xae}, {&(0x7f0000000500)="7f59646f9852", 0x6}], 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000700)={0x2, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) unshare(0x2a020600) r5 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000100)={0x9, {0x9, 0x9, 0x8, 0xb}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.517845813s ago: executing program 1 (id=635): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@default, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null, @default]}) 6.8478103s ago: executing program 1 (id=637): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0xf48, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0xa, 0x4e20, 0x2, @remote, 0x4}, 0xffffffffffffffff, {[0x10001, 0x1, 0x6, 0x2, 0x3, 0x0, 0xc, 0xfe]}}, 0x5c) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) timer_create(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet(0x2, 0x6, 0x1) socketpair(0x1, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x361, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 6.73957018s ago: executing program 5 (id=640): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6.722583877s ago: executing program 0 (id=641): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXA4XOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//hBVVxg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) 6.637384541s ago: executing program 5 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002400)=[{0xd28, 0x1, 0x8, "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"}], 0xd28}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.607979176s ago: executing program 5 (id=644): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x5, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) 6.394992746s ago: executing program 5 (id=645): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002fc0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000001bc0), 0x0, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 5.678719335s ago: executing program 4 (id=646): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 5.60142069s ago: executing program 0 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 5.60117914s ago: executing program 4 (id=648): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/28) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, 0x0) 5.020603183s ago: executing program 5 (id=649): io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x42, 0x2, 0xfffffffc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x3) 5.020100813s ago: executing program 1 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() r1 = creat(0x0, 0x0) close(r1) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 4.013461548s ago: executing program 4 (id=651): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="a361719f50d51ccbc842bd9b09317208a4802325cb48780df8a19d4961c578b80d5b7d20b73a068ed966e806f913998f83f5742d808f2653973d38cc88dccf31832c5d5318388c642472595064dd2d5499eee19b1e2e5dbe00e37f4e6ed4b15ac778a4f54a2d87ed2b1edfca784cb452d67270ef792dc71af7b81149f8fc938c61e03a340b36c94a0656bde901b7376cefa02c9e3d5db26ce13e0f3f8b5a2807cf42098f399ab957621ae45a63e0", 0xae}, {&(0x7f0000000500)="7f59646f9852", 0x6}], 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000700)={0x2, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) unshare(0x2a020600) r5 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000100)={0x9, {0x9, 0x9, 0x8, 0xb}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.009228938s ago: executing program 0 (id=652): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r0, 0x400, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 3.949233286s ago: executing program 5 (id=653): connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000580)=0x1c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0xffffffffffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 3.946266846s ago: executing program 2 (id=654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002400)=[{0xd28, 0x1, 0x8, "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"}], 0xd28}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.756477531s ago: executing program 2 (id=655): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 2.587867376s ago: executing program 4 (id=656): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000800)={0x7, 0x0, 0x0, 0xe0e0e0e0}) r2 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, 0x0, &(0x7f00000000c0)="8c", 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000019000100fdffffff000000001c140000fe0000250000000005001a0002000000"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24050810) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xe8, 0x8, 0xfa04, 0x0, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x6, 0x2, 0x4}, 0x0, 0xa0, 0xe8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x3], [], 0x0, 0x8, 0x8, 0xb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x170, 0x10000, 'pptp\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x1, 0x0, 0x23}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0xd5, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 2.566210652s ago: executing program 2 (id=657): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.448325066s ago: executing program 2 (id=658): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@default, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null, @default]}) 1.376402453s ago: executing program 4 (id=659): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, 0x0, 0x0) 1.268976433s ago: executing program 2 (id=660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) 241.450814ms ago: executing program 1 (id=661): r0 = socket$kcm(0x29, 0x2, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000014) 241.083104ms ago: executing program 4 (id=662): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 219.44075ms ago: executing program 2 (id=663): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=664): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x2, 0x7, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0x10003}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c80)}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) socket$inet6(0xa, 0x2, 0x7d08) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 49.396438][ T4172] cgroup: Unknown subsys name 'net' [ 49.501669][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.712260][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.049739][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.101662][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.175928][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 52.211927][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 52.227635][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.235642][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.243483][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.255484][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.262559][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.270823][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.291832][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.338460][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.345632][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.354058][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.381031][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.393191][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.400413][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.408066][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.415408][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.422457][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.430494][ T4197] device bridge_slave_0 entered promiscuous mode [ 52.446131][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.470728][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.478010][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.486453][ T4197] device bridge_slave_1 entered promiscuous mode [ 52.520396][ T4185] team0: Port device team_slave_0 added [ 52.538106][ T4185] team0: Port device team_slave_1 added [ 52.551593][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.562445][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.595323][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.606049][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.626351][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.633482][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.641410][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.649000][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.656197][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.664249][ T4190] device bridge_slave_0 entered promiscuous mode [ 52.682227][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.689538][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.716240][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.728251][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.735549][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.743193][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.750341][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.757616][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.765977][ T4190] device bridge_slave_1 entered promiscuous mode [ 52.798520][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.805576][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.831717][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.850142][ T4184] team0: Port device team_slave_0 added [ 52.858080][ T4184] team0: Port device team_slave_1 added [ 52.866559][ T4197] team0: Port device team_slave_0 added [ 52.880650][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.900763][ T4197] team0: Port device team_slave_1 added [ 52.914514][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.932006][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.948118][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.955186][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.981206][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.011118][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.025516][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.032469][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.058440][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.071829][ T4190] team0: Port device team_slave_0 added [ 53.095056][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.102105][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.109984][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.117298][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.143475][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.159123][ T4190] team0: Port device team_slave_1 added [ 53.185313][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.192276][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.218353][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.231888][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.239745][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.265862][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.285845][ T4192] team0: Port device team_slave_0 added [ 53.300715][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.307777][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.333824][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.346215][ T4192] team0: Port device team_slave_1 added [ 53.391759][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.398940][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.405835][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.413751][ T4184] Cannot create hsr debugfs directory [ 53.440457][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.447806][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.474172][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.505352][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.512324][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.538343][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.564290][ T4197] device hsr_slave_0 entered promiscuous mode [ 53.571229][ T4197] device hsr_slave_1 entered promiscuous mode [ 53.577863][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.588400][ T4197] Cannot create hsr debugfs directory [ 53.597278][ T4190] device hsr_slave_0 entered promiscuous mode [ 53.604665][ T4190] device hsr_slave_1 entered promiscuous mode [ 53.611236][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.618944][ T4190] Cannot create hsr debugfs directory [ 53.711051][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.718166][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.724950][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.732511][ T4192] Cannot create hsr debugfs directory [ 53.795083][ T1335] Bluetooth: hci2: command 0x0409 tx timeout [ 53.804283][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 53.810461][ T1335] Bluetooth: hci3: command 0x0409 tx timeout [ 53.817175][ T1335] Bluetooth: hci1: command 0x0409 tx timeout [ 53.884024][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 53.944080][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.955570][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.981115][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.001490][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.046544][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.057724][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.071626][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.088824][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.136217][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.147688][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.158500][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.169916][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.232366][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.255092][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.266561][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.273351][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.305362][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.329354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.339462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.349945][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.384559][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.400161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.409602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.418986][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.426249][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.440902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.449205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.458727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.467374][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.474467][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.485132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.503041][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.514552][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.523439][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.532846][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.544496][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.557689][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.574868][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.583294][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.592272][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.601978][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.609101][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.617308][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.626262][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.637158][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.646198][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.655455][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.662526][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.684118][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.708523][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.717002][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.726805][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.737249][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.745472][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.753062][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.762780][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.771374][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.780362][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.792313][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.800588][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.834076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.845897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.855553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.864892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.873434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.882106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.891174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.899705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.908102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.917613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.931775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.941241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.949758][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.956834][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.965748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.974225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.982505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.991421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.000182][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.007265][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.021670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.032290][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.044053][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.070744][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.090209][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.101314][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.110630][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.120298][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.153345][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.166483][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.188522][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.200508][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.215612][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.251310][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.261136][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.270173][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.279327][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.288019][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.297954][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.307159][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.316634][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.347862][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.359274][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.370162][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.377288][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.392799][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.401892][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.417224][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.424348][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.439033][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.447166][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.455041][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.474386][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.491121][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.499549][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.516395][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.532198][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.541675][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.557713][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.570846][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.580417][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.589262][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.597054][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.605044][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.612706][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.624298][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.632671][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.648701][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.675984][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.685655][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.694678][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.701726][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.710205][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.719618][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.727905][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.736765][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.745481][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.752510][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.760973][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.768619][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.776462][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.786548][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.797437][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.810696][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.820363][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.851314][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.884381][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 55.892231][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.893883][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 55.915255][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.929523][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 55.934495][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.939124][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 55.946211][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.967095][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 55.967349][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.982566][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.991223][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.000107][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.009466][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.027962][ T4185] device veth0_vlan entered promiscuous mode [ 56.046180][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.058261][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.069811][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.091378][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.109699][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.122323][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.142614][ T4185] device veth1_vlan entered promiscuous mode [ 56.154848][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.162976][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.171132][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.179513][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.188016][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.197441][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.205751][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.214637][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.222331][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.232545][ T4184] device veth0_vlan entered promiscuous mode [ 56.277861][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.298373][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.314463][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.337568][ T4184] device veth1_vlan entered promiscuous mode [ 56.360641][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.378000][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.409519][ T4185] device veth0_macvtap entered promiscuous mode [ 56.422039][ T4185] device veth1_macvtap entered promiscuous mode [ 56.445045][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.453195][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.461479][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.470476][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.479572][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.489274][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.519217][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.527073][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.534879][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.542982][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.551402][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.560047][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.582158][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.594053][ T4190] device veth0_vlan entered promiscuous mode [ 56.601549][ T4197] device veth0_vlan entered promiscuous mode [ 56.610060][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.618963][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.628280][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.636710][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.645791][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.653737][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.666298][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.676586][ T4184] device veth0_macvtap entered promiscuous mode [ 56.687532][ T4184] device veth1_macvtap entered promiscuous mode [ 56.702149][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.710791][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.719235][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.727818][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.736833][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.745540][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.754676][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.767665][ T4190] device veth1_vlan entered promiscuous mode [ 56.784130][ T4197] device veth1_vlan entered promiscuous mode [ 56.802248][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.810879][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.819465][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.828392][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.838501][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.850388][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.859865][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.868879][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.878611][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.904276][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.915764][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.927968][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.956432][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.965106][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.974470][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.983042][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.991558][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.001247][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.012981][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.030512][ T4197] device veth0_macvtap entered promiscuous mode [ 57.044725][ T4192] device veth0_vlan entered promiscuous mode [ 57.060270][ T4190] device veth0_macvtap entered promiscuous mode [ 57.068180][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.079504][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.092357][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.100079][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.108742][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.117591][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.126468][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.135420][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.144298][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.158841][ T4192] device veth1_vlan entered promiscuous mode [ 57.167626][ T4197] device veth1_macvtap entered promiscuous mode [ 57.183059][ T4190] device veth1_macvtap entered promiscuous mode [ 57.200263][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.210203][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.219089][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.227989][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.239390][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.249341][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.257859][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.266951][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.275658][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.327637][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.340929][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.362421][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.374038][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.384182][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.395740][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.409468][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.420579][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.431624][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.441721][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.452518][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.465902][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.476266][ T4192] device veth0_macvtap entered promiscuous mode [ 57.490578][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.499115][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.507982][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.518540][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.527324][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.537357][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.547932][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.559276][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.569992][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.580400][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.591222][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.603081][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.613108][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.624146][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.634434][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.644930][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.655448][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.666092][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.676939][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.690236][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.698763][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.706967][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.713151][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.722920][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.732747][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.741918][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.754484][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.763204][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.773063][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.782984][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.799018][ T4192] device veth1_macvtap entered promiscuous mode [ 57.815810][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.824747][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.833442][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.843152][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.853433][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.929478][ T1261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.940440][ T1261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.954747][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 57.956293][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.971600][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 57.977804][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 57.980251][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.994907][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.005728][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.015813][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.027486][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.037748][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 58.041950][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.043926][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 58.060285][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.073406][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.083803][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.091626][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.113152][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.122917][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.131879][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.141332][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.150628][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.161528][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.171643][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.182257][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.192336][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.203786][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.213719][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.225013][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.236076][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.272208][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.283530][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.315926][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.326859][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.337122][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.346521][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.386475][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.416848][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.466188][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.484016][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.491873][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.539367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.579111][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.587687][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.604008][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.611482][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.632599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.647991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.659123][ T4270] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.690259][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.721617][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.746666][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.755549][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.768408][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.802702][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.826573][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.856301][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.897222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.378588][ T4270] kvm [4269]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x495a [ 59.395137][ T4270] kvm [4269]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 59.427046][ T4270] kvm [4269]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x100b, nop [ 59.452278][ T4270] kvm [4269]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x5956 [ 59.519253][ T4270] kvm [4269]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9c5 [ 59.585400][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 60.351763][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 60.359941][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 60.387417][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 60.424279][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 60.638361][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 62.023774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.124236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.133902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.142869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.151826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.160892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.169881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.193636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.194080][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.202680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.211591][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.218362][ T4323] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 65.922140][ T4363] netlink: 'syz.4.35': attribute type 1 has an invalid length. [ 65.951897][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 66.001262][ T4363] device macvlan2 entered promiscuous mode [ 67.953630][ T4385] fuse: Bad value for 'group_id' [ 68.848900][ T4406] QAT: failed to copy from user cfg_data. [ 68.868517][ T4406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.49'. [ 70.361028][ T4424] devpts: called with bogus options [ 71.322664][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329301][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.572049][ T4446] input: syz0 as /devices/virtual/input/input5 [ 71.702737][ T4452] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 71.739167][ T4452] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 73.452878][ T4452] syz.1.68 (4452) used greatest stack depth: 21136 bytes left [ 74.213698][ T4481] Cannot find add_set index 0 as target [ 74.231344][ T4482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 75.013578][ C0] sched: RT throttling activated [ 75.052056][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.060359][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.063721][ T1106] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.313694][ T1106] usb 2-1: Using ep0 maxpacket: 16 [ 76.552574][ T13] cfg80211: failed to load regulatory.db [ 76.785258][ T1106] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 76.810709][ T4507] loop0: detected capacity change from 0 to 128 [ 76.954770][ T1106] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 77.123944][ T1106] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 77.133148][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.143351][ T1106] usb 2-1: Product: syz [ 77.147838][ T1106] usb 2-1: Manufacturer: syz [ 77.152672][ T1106] usb 2-1: SerialNumber: syz [ 77.712094][ T1106] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 77.760751][ T4507] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 77.993805][ T4517] ======================================================= [ 77.993805][ T4517] WARNING: The mand mount option has been deprecated and [ 77.993805][ T4517] and is ignored by this kernel. Remove the mand [ 77.993805][ T4517] option from the mount to silence this warning. [ 77.993805][ T4517] ======================================================= [ 77.993936][ T1106] usb 2-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 78.117951][ T4520] loop1: detected capacity change from 0 to 512 [ 78.393174][ T1106] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 78.433668][ T1106] usb 2-1: USB disconnect, device number 2 [ 78.651336][ T4520] EXT4-fs (loop1): 1 orphan inode deleted [ 78.657242][ T4520] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.110474][ T4542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.89'. [ 81.303957][ T4547] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.375629][ T4548] xt_connbytes: Forcing CT accounting to be enabled [ 81.382542][ T4548] Cannot find set identified by id 0 to match [ 82.128806][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.136087][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.263921][ T4547] syz.4.88 (4547) used greatest stack depth: 20688 bytes left [ 82.393666][ T4556] QAT: failed to copy from user cfg_data. [ 82.405624][ T4556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.93'. [ 83.951075][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.971874][ T4574] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.464591][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.973374][ T4597] netlink: 36 bytes leftover after parsing attributes in process `syz.4.103'. [ 86.705999][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 86.724764][ T4597] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.732021][ T4597] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.531939][ T4629] loop1: detected capacity change from 0 to 2048 [ 90.705864][ T4626] Zero length message leads to an empty skb [ 90.735113][ T4629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.965854][ T4658] binder_alloc: 4654: binder_alloc_buf, no vma [ 94.259398][ T4661] loop1: detected capacity change from 0 to 1024 [ 94.721450][ T4661] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.065744][ T4667] loop2: detected capacity change from 0 to 32768 [ 96.212366][ T4685] loop3: detected capacity change from 0 to 32768 [ 96.401417][ T4697] loop0: detected capacity change from 0 to 8 [ 96.686102][ T4697] SQUASHFS error: xz decompression failed, data probably corrupt [ 96.694447][ T4697] SQUASHFS error: Failed to read block 0x108: -5 [ 96.700830][ T4697] SQUASHFS error: Unable to read metadata cache entry [106] [ 96.708259][ T4697] SQUASHFS error: Unable to read inode 0x11f [ 96.819462][ T4667] XFS (loop2): Mounting V5 Filesystem [ 97.027879][ T4685] XFS (loop3): Mounting V5 Filesystem [ 97.300015][ T4712] Cannot find add_set index 0 as target [ 97.360602][ T4713] netlink: 64 bytes leftover after parsing attributes in process `syz.4.128'. [ 97.377879][ T4667] XFS (loop2): Ending clean mount [ 97.608936][ T4685] XFS (loop3): Starting recovery (logdev: internal) [ 97.685771][ T4667] XFS (loop2): Quotacheck needed: Please wait. [ 97.726205][ T4685] XFS (loop3): Ending recovery (logdev: internal) [ 98.158472][ T4685] syz.3.124 (4685) used greatest stack depth: 20496 bytes left [ 98.381020][ T4667] XFS (loop2): Quotacheck: Done. [ 98.384447][ T4190] XFS (loop3): Unmounting Filesystem [ 98.608055][ T4185] XFS (loop2): Unmounting Filesystem [ 99.210747][ T4731] loop1: detected capacity change from 0 to 2048 [ 99.316141][ T4731] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.329464][ T4740] loop3: detected capacity change from 0 to 128 [ 100.500876][ T4742] loop2: detected capacity change from 0 to 2048 [ 100.514483][ T4740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.533913][ T4740] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.547772][ T4742] EXT4-fs (loop2): Ignoring removed bh option [ 100.563890][ T4742] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 100.650609][ T4742] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,block_validity,nodelalloc,discard,bh,jqfmt=vfsv1,mblk_io_submit,nombcache,errors=remount-ro,. Quota mode: none. [ 100.793868][ T4742] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.863028][ T26] audit: type=1804 audit(1773276711.613:2): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.133" name="/newroot/24/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 100.948366][ T4758] QAT: failed to copy from user cfg_data. [ 100.968661][ T4758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'. [ 101.207270][ T4740] fscrypt: Error allocating hmac(sha512): -2 [ 101.875257][ T4767] Cannot find add_set index 0 as target [ 102.102292][ T4773] netlink: 64 bytes leftover after parsing attributes in process `syz.3.142'. [ 106.843519][ T4811] Cannot find add_set index 0 as target [ 107.049400][ T4814] netlink: 64 bytes leftover after parsing attributes in process `syz.4.155'. [ 107.767722][ T4818] binder: BINDER_SET_CONTEXT_MGR already set [ 107.774249][ T4818] binder: 4816:4818 ioctl 4018620d 200000004a80 returned -16 [ 110.232221][ T4834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.764235][ T4884] loop4: detected capacity change from 0 to 512 [ 114.897152][ T4884] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.437769][ T4884] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.176: bg 0: block 473: padding at end of block bitmap is not set [ 115.471616][ T4882] process 'syz.1.174' launched './file2' with NULL argv: empty string added [ 115.513375][ T4884] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 115.559661][ T4884] EXT4-fs (loop4): 1 orphan inode deleted [ 115.769607][ T4884] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.152325][ T4884] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.865909][ T4904] netlink: 64 bytes leftover after parsing attributes in process `syz.3.180'. [ 119.391570][ T4919] lo speed is unknown, defaulting to 1000 [ 119.454779][ T4919] lo speed is unknown, defaulting to 1000 [ 119.464310][ T4919] lo speed is unknown, defaulting to 1000 [ 119.499860][ T4919] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.550246][ T4919] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.657989][ T4919] lo speed is unknown, defaulting to 1000 [ 119.674631][ T4929] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 120.940883][ T4932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.189'. [ 120.988743][ T4919] lo speed is unknown, defaulting to 1000 [ 120.997014][ T4919] lo speed is unknown, defaulting to 1000 [ 121.004791][ T4919] lo speed is unknown, defaulting to 1000 [ 121.011407][ T4919] lo speed is unknown, defaulting to 1000 [ 121.450899][ T4929] device macvlan2 entered promiscuous mode [ 121.615596][ T4929] device bond1 entered promiscuous mode [ 121.643785][ T4929] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.673065][ T4929] device bond1 left promiscuous mode [ 121.702865][ T4935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.190'. [ 122.387545][ T4951] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.590888][ T4951] F2FS-fs (loop3): Unable to read 1th superblock [ 122.644251][ T4951] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.676398][ T4951] F2FS-fs (loop3): Unable to read 2th superblock [ 122.774696][ T4943] loop1: detected capacity change from 0 to 32768 [ 122.909455][ T4943] XFS (loop1): Mounting V5 Filesystem [ 123.072540][ T4943] XFS (loop1): Ending clean mount [ 123.093754][ T4943] XFS (loop1): Quotacheck needed: Please wait. [ 123.158662][ T4943] XFS (loop1): Quotacheck: Done. [ 123.360722][ T4184] XFS (loop1): Unmounting Filesystem [ 123.930161][ T4959] loop4: detected capacity change from 0 to 32768 [ 125.136786][ T4987] loop3: detected capacity change from 0 to 128 [ 125.616547][ T4987] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.827324][ T4987] hpfs: filesystem error: improperly stopped [ 125.927366][ T4987] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.052688][ T4987] hpfs: You really don't want any checks? You are crazy... [ 126.180732][ T4987] hpfs: hpfs_map_sector(): read error [ 126.274946][ T4987] hpfs: code page support is disabled [ 126.347609][ T4987] hpfs: hpfs_map_4sectors(): unaligned read [ 126.355272][ T4987] hpfs: hpfs_map_4sectors(): unaligned read [ 126.361957][ T4987] hpfs: filesystem error: unable to find root dir [ 126.374162][ T4987] hpfs: hpfs_map_4sectors(): unaligned read [ 126.381726][ T4987] hpfs: hpfs_map_sector(): read error [ 126.389028][ T4987] hpfs: hpfs_map_4sectors(): unaligned read [ 126.395076][ T4987] hpfs: hpfs_map_sector(): read error [ 129.264963][ T5029] mmap: syz.2.219 (5029) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 131.810687][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 132.022216][ T5062] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 132.229552][ T5065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.231'. [ 132.315064][ T5068] device macvlan2 entered promiscuous mode [ 132.361710][ T5068] device bond1 entered promiscuous mode [ 132.381921][ T5068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.437285][ T5068] device bond1 left promiscuous mode [ 134.009190][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.015596][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.483879][ T5132] device gretap0 entered promiscuous mode [ 149.379766][ T5195] loop1: detected capacity change from 0 to 32768 [ 149.819234][ T5195] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.266 (5195) [ 150.271506][ T5195] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 150.280451][ T5195] BTRFS info (device loop1): enabling disk space caching [ 150.287506][ T5195] BTRFS info (device loop1): force clearing of disk cache [ 150.294806][ T5195] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 150.304354][ T5195] BTRFS info (device loop1): use zstd compression, level 3 [ 150.311541][ T5195] BTRFS info (device loop1): disk space caching is enabled [ 150.318729][ T5195] BTRFS info (device loop1): has skinny extents [ 151.092592][ T5195] BTRFS info (device loop1): enabling ssd optimizations [ 151.112057][ T5195] BTRFS info (device loop1): clearing free space tree [ 151.119441][ T5195] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.129409][ T5195] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.658126][ T5228] syz.0.270 uses obsolete (PF_INET,SOCK_PACKET) [ 155.723787][ T1106] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.867732][ T5271] Cannot find add_set index 0 as target [ 156.124414][ T1106] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 156.172565][ T1106] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.333848][ T1106] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.529711][ T5277] loop1: detected capacity change from 0 to 256 [ 156.617839][ T1106] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.636567][ T26] audit: type=1800 audit(1773276767.393:3): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.280" name="file2" dev="loop1" ino=1048606 res=0 errno=0 [ 156.657371][ T1106] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.657480][ T1106] usb 3-1: Product: syz [ 156.674062][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.685443][ T5277] FAT-fs (loop1): Filesystem has been set read-only [ 156.695110][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.703974][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.708684][ T1106] usb 3-1: Manufacturer: syz [ 156.712543][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.744668][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.768026][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.773609][ T1106] usb 3-1: SerialNumber: syz [ 156.779997][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.799802][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.812451][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.829504][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.832682][ T1106] usb 3-1: config 0 descriptor?? [ 156.909031][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.925900][ T1106] hub 3-1:0.0: bad descriptor, ignoring hub [ 156.931854][ T1106] hub: probe of 3-1:0.0 failed with error -5 [ 156.946573][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.973798][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 156.975131][ T1106] usb 3-1: selecting invalid altsetting 0 [ 157.019572][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.041784][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.063363][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.087855][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.150206][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.223511][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.271981][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.302275][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.311513][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.330598][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.342985][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.415586][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.431072][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.477373][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.489638][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.495016][ T21] usb 3-1: USB disconnect, device number 2 [ 157.502542][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.513759][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.522614][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.533842][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.542738][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.597363][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.624186][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.642273][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.710777][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.724970][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.735934][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.755867][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.766557][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.789404][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.801127][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.812452][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.854527][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.953722][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 157.962481][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.027051][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.080706][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.113804][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.122368][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.141493][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.169510][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.179019][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.190829][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.226132][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.240371][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.258755][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.268383][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.281943][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.290770][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.305079][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.321969][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.334564][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.343277][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.356740][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.368838][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.381440][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.392716][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.480715][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.630123][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.750127][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.750566][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.766080][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.766392][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.766732][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.767925][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.768094][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.768337][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.769255][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.769610][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.769866][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.770615][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 158.770781][ T5277] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 159.830416][ T5302] loop0: detected capacity change from 0 to 1024 [ 159.951525][ T5302] EXT4-fs (loop0): Ignoring removed bh option [ 160.000444][ T5309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 160.061821][ T5304] loop4: detected capacity change from 0 to 4096 [ 160.071852][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,grpid,noquota,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 160.277900][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 160.623235][ T5326] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 160.650027][ T5326] CIFS: Unable to determine destination address [ 162.046472][ T5334] loop0: detected capacity change from 0 to 1024 [ 162.119597][ T5334] hfsplus: unable to parse mount options [ 163.820125][ T5344] lo speed is unknown, defaulting to 1000 [ 165.473716][ T4231] Bluetooth: hci5: command 0x0409 tx timeout [ 165.773365][ T5368] loop0: detected capacity change from 0 to 1024 [ 166.367245][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 166.624256][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.654299][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.693159][ T5344] device bridge_slave_0 entered promiscuous mode [ 166.731160][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.763429][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.804507][ T5344] device bridge_slave_1 entered promiscuous mode [ 166.879706][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.977503][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.981895][ T5364] loop4: detected capacity change from 0 to 32768 [ 167.102327][ T5344] team0: Port device team_slave_0 added [ 167.150447][ T4304] hfsplus: b-tree write err: -5, ino 25 [ 167.170555][ T5344] team0: Port device team_slave_1 added [ 167.184204][ T4304] hfsplus: b-tree write err: -5, ino 4 [ 167.247943][ T5364] XFS (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 167.263599][ T5364] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 167.271343][ T5364] XFS (loop4): DAX and reflink cannot be used together! [ 167.280680][ T4304] hfsplus: b-tree write err: -5, ino 2 [ 167.403342][ T4699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.470114][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.624972][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.647717][ T1324] Bluetooth: hci5: command 0x041b tx timeout [ 167.653306][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.976531][ T4699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.122323][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.339202][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.018238][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.117667][ T4699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.612962][ T4229] Bluetooth: hci5: command 0x040f tx timeout [ 170.932617][ T5415] loop1: detected capacity change from 0 to 4096 [ 170.943322][ T4699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.130252][ T5415] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 171.475096][ T5344] device hsr_slave_0 entered promiscuous mode [ 171.585181][ T5415] ntfs3: loop1: Failed to load $Extend. [ 171.647816][ T5344] device hsr_slave_1 entered promiscuous mode [ 171.687320][ T5344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.697378][ T5344] Cannot create hsr debugfs directory [ 172.777552][ T1335] Bluetooth: hci5: command 0x0419 tx timeout [ 172.974683][ T5442] loop1: detected capacity change from 0 to 4096 [ 173.403072][ T5344] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.561182][ T5451] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.576192][ T5344] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.652442][ T5344] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.872743][ T5344] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.931957][ T26] audit: type=1800 audit(1773276784.683:4): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.324" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 174.442247][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.559409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.578266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.905214][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.099185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.124506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.164062][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.171157][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.203886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.228963][ T5471] loop2: detected capacity change from 0 to 32768 [ 175.234789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.253920][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.260999][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.288470][ T5471] [ 175.288470][ T5471] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.288470][ T5471] [ 175.301694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.332647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.353470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.373026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.392136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.418841][ T5471] read_mapping_page failed! [ 175.431218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.435638][ T5471] ERROR: (device loop2): txCommit: [ 175.435638][ T5471] [ 175.449523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.472421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.503689][ T5480] read_mapping_page failed! [ 175.512942][ T5480] ERROR: (device loop2): txCommit: [ 175.512942][ T5480] [ 175.585080][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.634405][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.679913][ T4185] [ 175.679913][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.679913][ T4185] [ 175.691321][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.699771][ T4185] [ 175.699771][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.699771][ T4185] [ 175.712497][ T26] audit: type=1326 audit(1773276786.473:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5483 comm="syz.4.330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7e682e799 code=0x0 [ 175.744749][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.761251][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.793302][ T5484] lo speed is unknown, defaulting to 1000 [ 175.876409][ T1324] Bluetooth: hci1: command 0x0406 tx timeout [ 175.896113][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 175.922435][ T1324] Bluetooth: hci0: command 0x0406 tx timeout [ 175.935768][ T1324] Bluetooth: hci3: command 0x0406 tx timeout [ 176.248940][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.277238][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.327414][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.263445][ T4699] device hsr_slave_0 left promiscuous mode [ 177.580049][ T5524] Cannot find add_set index 0 as target [ 178.821627][ T4699] device hsr_slave_1 left promiscuous mode [ 178.863699][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.942948][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.965723][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.999167][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.038935][ T4699] device bridge_slave_1 left promiscuous mode [ 179.057917][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.098782][ T4699] device bridge_slave_0 left promiscuous mode [ 179.114001][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.262683][ T4699] device veth1_macvtap left promiscuous mode [ 179.288846][ T4699] device veth0_macvtap left promiscuous mode [ 179.312286][ T4699] device veth1_vlan left promiscuous mode [ 179.336758][ T4699] device veth0_vlan left promiscuous mode [ 179.541266][ T4699] bond1 (unregistering): Released all slaves [ 179.732358][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 179.755044][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 179.774656][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.802789][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.138173][ T4699] bond0 (unregistering): Released all slaves [ 181.138780][ T5559] QAT: failed to copy from user cfg_data. [ 181.154046][ T5559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 181.165087][ T5559] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 181.219009][ T5556] netlink: 220 bytes leftover after parsing attributes in process `syz.2.344'. [ 181.415835][ T5556] unsupported nlmsg_type 40 [ 182.753747][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.915484][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.061896][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.169477][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.353081][ T26] audit: type=1326 audit(1773276795.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52306799 code=0x7ffc0000 [ 184.356435][ T5344] device veth0_vlan entered promiscuous mode [ 185.181241][ T26] audit: type=1326 audit(1773276795.143:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb52306799 code=0x7ffc0000 [ 185.327726][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.357986][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.107110][ T5344] device veth1_vlan entered promiscuous mode [ 186.144380][ T26] audit: type=1326 audit(1773276795.523:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52306799 code=0x7ffc0000 [ 186.174924][ T5609] loop0: detected capacity change from 0 to 4096 [ 186.267605][ T5618] QAT: failed to copy from user cfg_data. [ 186.279500][ T5618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.356'. [ 186.290028][ T5618] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 187.045778][ T26] audit: type=1326 audit(1773276795.533:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52306799 code=0x7ffc0000 [ 187.045779][ T5609] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 187.100624][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.190012][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.231307][ T5609] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 187.242175][ T5344] device veth0_macvtap entered promiscuous mode [ 187.320830][ T5344] device veth1_macvtap entered promiscuous mode [ 187.844733][ T5629] netlink: 64 bytes leftover after parsing attributes in process `syz.4.358'. [ 187.873085][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.891822][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.902668][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.915013][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.930788][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.942553][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.303659][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.481967][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.541306][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.722161][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.961419][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.017321][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.028360][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.039088][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.049727][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.059735][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.070651][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.126642][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.135751][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.176487][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.264763][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.320780][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.374974][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.386905][ T5647] netlink: 'syz.2.362': attribute type 1 has an invalid length. [ 189.454559][ T5650] bond1: (slave gretap1): making interface the new active one [ 189.467739][ T5650] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 189.589326][ T5650] syz.2.362 (5650) used greatest stack depth: 20176 bytes left [ 189.603214][ T5344] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.767660][ T26] audit: type=1326 audit(1773276800.523:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb52306799 code=0x0 [ 190.553614][ T5344] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.562352][ T5344] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.705764][ T5672] QAT: failed to copy from user cfg_data. [ 190.717771][ T5672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.367'. [ 190.728217][ T5672] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 191.532732][ T5344] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.073021][ T5685] loop2: detected capacity change from 0 to 512 [ 193.157936][ T5685] EXT4-fs (loop2): Ignoring removed orlov option [ 193.166084][ T4558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.187817][ T4558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.196917][ T5685] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 193.245462][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.277291][ T5685] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 193.317173][ T5685] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 193.377754][ T5685] EXT4-fs (loop2): orphan cleanup on readonly fs [ 193.427500][ T5685] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 193.436663][ T4558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.447179][ T5685] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 193.525901][ T4558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.533460][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.583884][ T5685] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 193.733741][ T5685] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.370: bg 0: block 40: padding at end of block bitmap is not set [ 193.927194][ T5685] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 194.434727][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.434813][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.503871][ T5685] EXT4-fs (loop2): 1 truncate cleaned up [ 194.523692][ T5685] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,noload,noblock_validity,norecovery,i_version,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 194.742312][ T5708] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 196.288372][ T5728] loop4: detected capacity change from 0 to 16 [ 196.474772][ T5728] erofs: (device loop4): mounted with root inode @ nid 36. [ 196.512730][ T5726] QAT: failed to copy from user cfg_data. [ 196.525498][ T5726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.378'. [ 196.534822][ T5726] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 197.493116][ T5742] netlink: 64 bytes leftover after parsing attributes in process `syz.2.380'. [ 200.812420][ T5780] netlink: 64 bytes leftover after parsing attributes in process `syz.5.389'. [ 204.003725][ T5797] Cannot find add_set index 0 as target [ 204.579438][ T5811] device syzkaller0 entered promiscuous mode [ 204.654824][ T5817] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 206.826843][ T5843] loop0: detected capacity change from 0 to 4096 [ 207.679167][ T5843] ntfs3: Unknown parameter '01777777777777777777777' [ 208.084447][ T5848] netlink: 64 bytes leftover after parsing attributes in process `syz.1.405'. [ 208.377366][ T5869] Cannot find add_set index 0 as target [ 209.084867][ T5870] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 210.046264][ T5881] loop1: detected capacity change from 0 to 128 [ 211.949649][ T5881] EXT4-fs (loop1): Test dummy encryption mode enabled [ 212.675648][ T5881] EXT4-fs: failed to create workqueue [ 212.744838][ T5881] EXT4-fs (loop1): mount failed [ 214.247678][ T5927] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 214.247678][ T5927] program syz.2.423 not setting count and/or reply_len properly [ 222.177615][ T6018] QAT: failed to copy from user cfg_data. [ 222.192533][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.447'. [ 222.206673][ T6018] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 223.062939][ T6022] Invalid argument reading file caps for ./file0 [ 223.349240][ T6033] capability: warning: `syz.5.452' uses 32-bit capabilities (legacy support in use) [ 223.526302][ T6041] sd 0:0:1:0: device reset [ 224.702396][ T6058] Cannot find add_set index 0 as target [ 226.517050][ T6090] QAT: failed to copy from user cfg_data. [ 226.528756][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'. [ 226.538223][ T6090] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 228.618278][ T6108] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 228.797242][ T6092] loop4: detected capacity change from 0 to 40427 [ 229.045796][ T6092] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 230.044861][ T6092] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 230.140766][ T6092] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 230.276674][ T6111] loop2: detected capacity change from 0 to 32768 [ 231.932987][ T6148] netlink: 64 bytes leftover after parsing attributes in process `syz.2.475'. [ 234.805946][ T6157] QAT: failed to copy from user cfg_data. [ 234.867112][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 234.929109][ T6157] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 235.274119][ T6187] Cannot find add_set index 0 as target [ 238.644987][ T6245] QAT: failed to copy from user cfg_data. [ 238.658430][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.495'. [ 238.667875][ T6245] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 239.458138][ T6248] batman_adv: batadv0: Adding interface: dummy0 [ 239.482620][ T6248] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.511778][ T6248] batman_adv: batadv0: Interface activated: dummy0 [ 240.035871][ T6264] syz.4.502 sent an empty control message without MSG_MORE. [ 240.098488][ T6266] loop2: detected capacity change from 0 to 512 [ 240.299063][ T6257] batadv0: mtu less than device minimum [ 241.377457][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.390423][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.402903][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.415401][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.427886][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.440361][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.452904][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.465517][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.478409][ T6257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.720454][ T6266] EXT4-fs (loop2): 1 orphan inode deleted [ 241.726432][ T6266] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.105576][ T6309] netlink: 64 bytes leftover after parsing attributes in process `syz.2.511'. [ 245.164025][ T6317] xt_connbytes: Forcing CT accounting to be enabled [ 245.170850][ T6317] Cannot find set identified by id 0 to match [ 246.804195][ T6332] loop2: detected capacity change from 0 to 2048 [ 248.357237][ T6332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.873330][ T6349] loop4: detected capacity change from 0 to 512 [ 251.272344][ T6349] EXT4-fs: failed to create workqueue [ 251.277806][ T6349] EXT4-fs (loop4): mount failed [ 251.965482][ T6363] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 253.147894][ T6368] bond1: (slave gretap1): making interface the new active one [ 253.168074][ T6368] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 255.645844][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.652416][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.305848][ T6424] loop4: detected capacity change from 0 to 512 [ 256.541998][ T6424] EXT4-fs (loop4): 1 orphan inode deleted [ 256.547976][ T6424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.969704][ T6422] loop5: detected capacity change from 0 to 2048 [ 257.194578][ T6422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.846680][ T6441] netlink: 'syz.5.541': attribute type 1 has an invalid length. [ 258.196506][ T6442] bond1: (slave gretap1): making interface the new active one [ 258.241589][ T6442] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 260.611788][ T6495] QAT: failed to copy from user cfg_data. [ 260.623820][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 260.633054][ T6495] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 260.825850][ T6500] loop4: detected capacity change from 0 to 512 [ 261.671445][ T6500] EXT4-fs (loop4): 1 orphan inode deleted [ 261.724419][ T6500] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.427671][ T6483] syz.5.549 (6483) used greatest stack depth: 18552 bytes left [ 262.710864][ T6485] syz.5.549 (6485) used greatest stack depth: 18192 bytes left [ 264.098144][ T6551] lo speed is unknown, defaulting to 1000 [ 264.929371][ T6576] QAT: failed to copy from user cfg_data. [ 264.942461][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.5.569'. [ 264.951797][ T6576] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 266.280105][ T6582] loop0: detected capacity change from 0 to 512 [ 266.355401][ T6582] EXT4-fs (loop0): 1 orphan inode deleted [ 266.361269][ T6582] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.014330][ T6704] Cannot find add_set index 0 as target [ 276.282234][ T6733] loop1: detected capacity change from 0 to 16 [ 276.530925][ T6733] erofs: (device loop1): mounted with root inode @ nid 36. [ 279.164466][ T6749] loop2: detected capacity change from 0 to 2048 [ 279.266419][ T6749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.334434][ T6794] loop1: detected capacity change from 0 to 16 [ 284.334120][ T6794] erofs: (device loop1): mounted with root inode @ nid 36. [ 285.952694][ T6810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 286.137040][ T6812] loop2: detected capacity change from 0 to 2048 [ 287.817181][ T6812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.982401][ T1335] Bluetooth: hci5: command 0x0406 tx timeout [ 289.069176][ T6835] loop4: detected capacity change from 0 to 256 [ 289.124425][ T6835] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 291.423864][ T6857] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.541578][ T6861] loop1: detected capacity change from 0 to 128 [ 291.675602][ T6868] loop0: detected capacity change from 0 to 256 [ 291.901096][ T6868] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 292.766804][ T6881] Cannot find add_set index 0 as target [ 295.647334][ T6922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 298.423886][ T6951] ================================================================== [ 298.432374][ T6951] BUG: KASAN: use-after-free in ax25_find_cb+0x175/0x3a0 [ 298.439434][ T6951] Read of size 8 at addr ffff888024c1ac08 by task syz.4.662/6951 [ 298.447156][ T6951] [ 298.449500][ T6951] CPU: 0 PID: 6951 Comm: syz.4.662 Not tainted syzkaller #0 [ 298.456790][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.466853][ T6951] Call Trace: [ 298.470118][ T6951] [ 298.473033][ T6951] dump_stack_lvl+0x188/0x250 [ 298.477705][ T6951] ? show_regs_print_info+0x20/0x20 [ 298.482885][ T6951] ? _printk+0xda/0x130 [ 298.487013][ T6951] ? ax25_find_cb+0x175/0x3a0 [ 298.491673][ T6951] ? load_image+0x400/0x400 [ 298.496151][ T6951] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 298.501596][ T6951] print_address_description+0x60/0x2d0 [ 298.507121][ T6951] ? ax25_find_cb+0x175/0x3a0 [ 298.511776][ T6951] kasan_report+0xdf/0x130 [ 298.516176][ T6951] ? ax25_find_cb+0x175/0x3a0 [ 298.520854][ T6951] ax25_find_cb+0x175/0x3a0 [ 298.525337][ T6951] rose_transmit_link+0x169/0x730 [ 298.530342][ T6951] rose_write_internal+0x680/0x1e90 [ 298.535526][ T6951] ? rose_validate_nr+0x120/0x120 [ 298.540532][ T6951] ? rose_route_free_lci+0x13c/0x160 [ 298.545797][ T6951] ? rose_connect+0x9e1/0x13b0 [ 298.550541][ T6951] rose_connect+0xada/0x13b0 [ 298.555115][ T6951] ? rose_bind+0xa00/0xa00 [ 298.559512][ T6951] ? aa_af_perm+0x300/0x340 [ 298.563990][ T6951] ? tomoyo_socket_connect_permission+0x196/0x270 [ 298.570392][ T6951] ? bpf_lsm_socket_connect+0x5/0x10 [ 298.575657][ T6951] ? security_socket_connect+0x7c/0xa0 [ 298.581094][ T6951] ? rose_bind+0xa00/0xa00 [ 298.585490][ T6951] __sys_connect+0x3cb/0x450 [ 298.590060][ T6951] ? __sys_connect_file+0x170/0x170 [ 298.595245][ T6951] __x64_sys_connect+0x76/0x80 [ 298.600004][ T6951] do_syscall_64+0x4c/0xa0 [ 298.604406][ T6951] ? clear_bhb_loop+0x30/0x80 [ 298.609058][ T6951] ? clear_bhb_loop+0x30/0x80 [ 298.613714][ T6951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.619606][ T6951] RIP: 0033:0x7fe7e682e799 [ 298.624001][ T6951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.643605][ T6951] RSP: 002b:00007fe7e4a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 298.652017][ T6951] RAX: ffffffffffffffda RBX: 00007fe7e6aa8090 RCX: 00007fe7e682e799 [ 298.659971][ T6951] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000b [ 298.667920][ T6951] RBP: 00007fe7e68c4c99 R08: 0000000000000000 R09: 0000000000000000 [ 298.675868][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.683819][ T6951] R13: 00007fe7e6aa8128 R14: 00007fe7e6aa8090 R15: 00007ffcd59ab478 [ 298.691781][ T6951] [ 298.694778][ T6951] [ 298.697078][ T6951] Allocated by task 5320: [ 298.701376][ T6951] __kasan_kmalloc+0xb5/0xf0 [ 298.705948][ T6951] ax25_dev_device_up+0x50/0x580 [ 298.710863][ T6951] ax25_device_event+0x483/0x4f0 [ 298.715776][ T6951] raw_notifier_call_chain+0xcb/0x160 [ 298.721123][ T6951] __dev_notify_flags+0x194/0x300 [ 298.726120][ T6951] dev_change_flags+0xe3/0x1a0 [ 298.730859][ T6951] dev_ifsioc+0x130/0xd50 [ 298.735166][ T6951] dev_ioctl+0x545/0xe30 [ 298.739381][ T6951] sock_do_ioctl+0x245/0x320 [ 298.743944][ T6951] sock_ioctl+0x4d2/0x710 [ 298.748251][ T6951] __se_sys_ioctl+0xfa/0x170 [ 298.752814][ T6951] do_syscall_64+0x4c/0xa0 [ 298.757205][ T6951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.763073][ T6951] [ 298.765372][ T6951] Freed by task 6941: [ 298.769324][ T6951] kasan_set_track+0x4b/0x70 [ 298.773895][ T6951] kasan_set_free_info+0x1f/0x40 [ 298.778816][ T6951] ____kasan_slab_free+0xd5/0x110 [ 298.783815][ T6951] slab_free_freelist_hook+0xea/0x170 [ 298.789263][ T6951] kfree+0xef/0x2a0 [ 298.793047][ T6951] ax25_release+0x661/0x870 [ 298.797525][ T6951] sock_close+0xd5/0x240 [ 298.801739][ T6951] __fput+0x234/0x930 [ 298.805695][ T6951] task_work_run+0x125/0x1a0 [ 298.810257][ T6951] do_exit+0x626/0x20c0 [ 298.814383][ T6951] do_group_exit+0x12e/0x300 [ 298.818948][ T6951] get_signal+0x6ca/0x12c0 [ 298.823334][ T6951] arch_do_signal_or_restart+0xe7/0x12c0 [ 298.828938][ T6951] exit_to_user_mode_loop+0x9e/0x130 [ 298.834196][ T6951] exit_to_user_mode_prepare+0xee/0x180 [ 298.839720][ T6951] syscall_exit_to_user_mode+0x16/0x40 [ 298.845173][ T6951] ret_from_fork+0x15/0x30 [ 298.849563][ T6951] [ 298.851859][ T6951] Last potentially related work creation: [ 298.857555][ T6951] kasan_save_stack+0x35/0x60 [ 298.862207][ T6951] kasan_record_aux_stack+0xb8/0x100 [ 298.867466][ T6951] insert_work+0x54/0x3d0 [ 298.871768][ T6951] __queue_work+0x9c5/0xd50 [ 298.876241][ T6951] queue_work_on+0x124/0x1f0 [ 298.880802][ T6951] netdevice_event+0x803/0x900 [ 298.885540][ T6951] raw_notifier_call_chain+0xcb/0x160 [ 298.890886][ T6951] dev_set_mac_address+0x2e8/0x400 [ 298.895970][ T6951] bond_enslave+0x10f5/0x3c50 [ 298.900626][ T6951] do_set_master+0x120/0x220 [ 298.905190][ T6951] rtnl_newlink+0x1757/0x1a50 [ 298.909845][ T6951] rtnetlink_rcv_msg+0x844/0xf30 [ 298.914769][ T6951] netlink_rcv_skb+0x1f5/0x440 [ 298.919503][ T6951] netlink_unicast+0x774/0x920 [ 298.924238][ T6951] netlink_sendmsg+0x8ba/0xbe0 [ 298.928973][ T6951] ____sys_sendmsg+0x5b7/0x8f0 [ 298.933714][ T6951] ___sys_sendmsg+0x236/0x2e0 [ 298.938401][ T6951] __se_sys_sendmsg+0x1af/0x290 [ 298.943225][ T6951] do_syscall_64+0x4c/0xa0 [ 298.947613][ T6951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.953483][ T6951] [ 298.955793][ T6951] Second to last potentially related work creation: [ 298.962349][ T6951] kasan_save_stack+0x35/0x60 [ 298.967003][ T6951] kasan_record_aux_stack+0xb8/0x100 [ 298.972262][ T6951] insert_work+0x54/0x3d0 [ 298.976563][ T6951] __queue_work+0x9c5/0xd50 [ 298.981066][ T6951] queue_work_on+0x124/0x1f0 [ 298.985629][ T6951] inet6addr_event+0x9c/0xc0 [ 298.990191][ T6951] atomic_notifier_call_chain+0x15d/0x280 [ 298.995884][ T6951] ipv6_add_addr+0xb57/0xe10 [ 299.000446][ T6951] inet6_addr_add+0x43a/0x9c0 [ 299.005093][ T6951] inet6_rtm_newaddr+0x64c/0x8f0 [ 299.010007][ T6951] rtnetlink_rcv_msg+0x844/0xf30 [ 299.014920][ T6951] netlink_rcv_skb+0x1f5/0x440 [ 299.019654][ T6951] netlink_unicast+0x774/0x920 [ 299.024388][ T6951] netlink_sendmsg+0x8ba/0xbe0 [ 299.029125][ T6951] __sys_sendto+0x46d/0x620 [ 299.033604][ T6951] __x64_sys_sendto+0xda/0xf0 [ 299.038262][ T6951] do_syscall_64+0x4c/0xa0 [ 299.042657][ T6951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.048521][ T6951] [ 299.050823][ T6951] The buggy address belongs to the object at ffff888024c1ac00 [ 299.050823][ T6951] which belongs to the cache kmalloc-192 of size 192 [ 299.064853][ T6951] The buggy address is located 8 bytes inside of [ 299.064853][ T6951] 192-byte region [ffff888024c1ac00, ffff888024c1acc0) [ 299.077928][ T6951] The buggy address belongs to the page: [ 299.083541][ T6951] page:ffffea0000930680 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024c1a900 pfn:0x24c1a [ 299.094975][ T6951] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 299.102505][ T6951] raw: 00fff00000000200 ffffea0000af31c8 ffffea00009b3f48 ffff888016c41a00 [ 299.111060][ T6951] raw: ffff888024c1a900 000000000010000d 00000001ffffffff 0000000000000000 [ 299.119640][ T6951] page dumped because: kasan: bad access detected [ 299.126042][ T6951] page_owner tracks the page as allocated [ 299.131729][ T6951] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 8374681106, free_ts 0 [ 299.146540][ T6951] get_page_from_freelist+0x1bbd/0x1ca0 [ 299.152069][ T6951] __alloc_pages+0x1ee/0x480 [ 299.156630][ T6951] alloc_page_interleave+0x24/0x1e0 [ 299.161805][ T6951] new_slab+0xc0/0x4b0 [ 299.165847][ T6951] ___slab_alloc+0x80a/0xdd0 [ 299.170409][ T6951] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 299.175754][ T6951] mon_bus_init+0x50/0x290 [ 299.180145][ T6951] mon_notify+0x10e/0x3e0 [ 299.184447][ T6951] blocking_notifier_call_chain+0x103/0x1b0 [ 299.190312][ T6951] usb_register_bus+0xcf/0x140 [ 299.195050][ T6951] usb_add_hcd+0x356/0xef0 [ 299.199442][ T6951] vhci_hcd_probe+0x140/0x370 [ 299.204098][ T6951] platform_probe+0x137/0x1c0 [ 299.208762][ T6951] really_probe+0x284/0xc80 [ 299.213236][ T6951] __driver_probe_device+0x18c/0x330 [ 299.218493][ T6951] driver_probe_device+0x4f/0x420 [ 299.223493][ T6951] page_owner free stack trace missing [ 299.228862][ T6951] [ 299.231159][ T6951] Memory state around the buggy address: [ 299.236761][ T6951] ffff888024c1ab00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 299.244796][ T6951] ffff888024c1ab80: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.252829][ T6951] >ffff888024c1ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.260856][ T6951] ^ [ 299.265156][ T6951] ffff888024c1ac80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 299.273192][ T6951] ffff888024c1ad00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 299.281570][ T6951] ================================================================== [ 299.289602][ T6951] Disabling lock debugging due to kernel taint [ 299.295847][ T6951] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 299.303012][ T6951] CPU: 0 PID: 6951 Comm: syz.4.662 Tainted: G B syzkaller #0 [ 299.311656][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.321681][ T6951] Call Trace: [ 299.324935][ T6951] [ 299.327849][ T6951] dump_stack_lvl+0x188/0x250 [ 299.332498][ T6951] ? show_regs_print_info+0x20/0x20 [ 299.337670][ T6951] ? load_image+0x400/0x400 [ 299.342145][ T6951] panic+0x2e5/0x810 [ 299.346012][ T6951] ? asm_common_interrupt+0x22/0x40 [ 299.351183][ T6951] ? bpf_jit_dump+0xd0/0xd0 [ 299.355658][ T6951] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 299.361523][ T6951] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 299.367385][ T6951] ? _raw_spin_unlock+0x40/0x40 [ 299.372208][ T6951] ? ax25_find_cb+0x175/0x3a0 [ 299.376858][ T6951] check_panic_on_warn+0x80/0xa0 [ 299.381770][ T6951] ? ax25_find_cb+0x175/0x3a0 [ 299.386417][ T6951] end_report+0x6d/0xf0 [ 299.390547][ T6951] kasan_report+0x102/0x130 [ 299.395024][ T6951] ? ax25_find_cb+0x175/0x3a0 [ 299.399674][ T6951] ax25_find_cb+0x175/0x3a0 [ 299.404152][ T6951] rose_transmit_link+0x169/0x730 [ 299.409154][ T6951] rose_write_internal+0x680/0x1e90 [ 299.414324][ T6951] ? rose_validate_nr+0x120/0x120 [ 299.419320][ T6951] ? rose_route_free_lci+0x13c/0x160 [ 299.424578][ T6951] ? rose_connect+0x9e1/0x13b0 [ 299.429314][ T6951] rose_connect+0xada/0x13b0 [ 299.433877][ T6951] ? rose_bind+0xa00/0xa00 [ 299.438271][ T6951] ? aa_af_perm+0x300/0x340 [ 299.442764][ T6951] ? tomoyo_socket_connect_permission+0x196/0x270 [ 299.449166][ T6951] ? bpf_lsm_socket_connect+0x5/0x10 [ 299.454436][ T6951] ? security_socket_connect+0x7c/0xa0 [ 299.459872][ T6951] ? rose_bind+0xa00/0xa00 [ 299.464281][ T6951] __sys_connect+0x3cb/0x450 [ 299.468852][ T6951] ? __sys_connect_file+0x170/0x170 [ 299.474030][ T6951] __x64_sys_connect+0x76/0x80 [ 299.478778][ T6951] do_syscall_64+0x4c/0xa0 [ 299.483169][ T6951] ? clear_bhb_loop+0x30/0x80 [ 299.487818][ T6951] ? clear_bhb_loop+0x30/0x80 [ 299.492466][ T6951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.498331][ T6951] RIP: 0033:0x7fe7e682e799 [ 299.502721][ T6951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.522297][ T6951] RSP: 002b:00007fe7e4a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 299.530689][ T6951] RAX: ffffffffffffffda RBX: 00007fe7e6aa8090 RCX: 00007fe7e682e799 [ 299.538647][ T6951] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000b [ 299.546593][ T6951] RBP: 00007fe7e68c4c99 R08: 0000000000000000 R09: 0000000000000000 [ 299.554618][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.562561][ T6951] R13: 00007fe7e6aa8128 R14: 00007fe7e6aa8090 R15: 00007ffcd59ab478 [ 299.570509][ T6951] [ 299.573808][ T6951] Kernel Offset: disabled [ 299.578119][ T6951] Rebooting in 86400 seconds..