last executing test programs: 2m37.069892887s ago: executing program 0 (id=90): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x10000000, &(0x7f0000000100), &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58) getpgrp(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_type(r6, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) syz_open_dev$usbfs(0x0, 0x75, 0x109301) 2m35.026713448s ago: executing program 0 (id=94): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 2m31.746458952s ago: executing program 0 (id=103): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2m30.428429278s ago: executing program 0 (id=106): syz_open_dev$tty1(0xc, 0x4, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) preadv(r0, 0x0, 0x0, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x5) 2m28.998946217s ago: executing program 0 (id=112): syz_mount_image$ext4(&(0x7f0000000900)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f0000000800)={[{@data_err_ignore}, {@nodiscard}, {@quota}]}, 0x1, 0x580, &(0x7f0000001f80)="$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") renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) 2m28.624687641s ago: executing program 0 (id=115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) 2m13.11775909s ago: executing program 32 (id=115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) 1m27.344049952s ago: executing program 1 (id=257): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001300)="e24fc801dffdf37981a92f7f4005844301258a0ec141f1ec014bd9d03d1db52a75dfb8e04daddc3fac31adda350235262d9e1b8e20d406b97372033032d7623ff84bbf544a91c12eb644b323e9653fd76852c025e718cc91d9e9e274a7ed2dc15d8efec8d11a7983cdc8f3c39dbf764fc28873b760c435743929653c359ee706dcf2658403b25fbf3382f179562dc64883887ead6a916ef430ee4f67e21a3f01a3a35627bfb2f6ba204da0280c9f2fb5443879616a431884af82606286c4760a9ef4aa264e0000137f28dbe594332062120a76b565165987eef46c1d523f0fba98cd51f14537e313952f76574e3137aa1b41ae8e16f4087ddbaa7de98ca609a1b01b64ab10613204e4d18f376138fe7735ffb2fa09843922ce5a365e1e84286f09c432e0f521be13182256dcf534e03efb1735e55a8dce53e32ac669207d21e3b79414a8e61204f7c4173f2381e4c5e6cce12f6bae60d5bff199d5da50e40f87efbcec332173caba740a1b12c915bccf04940399b9a72a7dca4b8c7d46a2c444f6c7e30cf1f811a4a31cabb9b512a949105e2aa4081a3d613ad9ae4cf209d684e4b27c204bc5a395da552b8638df42d4c3522b64eaf11c988fce5634757ed41b39c338aea3ed2171e86fd34cde22dc3519edd2108641f3c3d4ca2016524b8f7d67e80ef5474d0a4a157eca9e5c0c5fcd7f459f64e91effe3bbcdcf9aba5704952cf0b82b1b0d4533a9c7ddc914bc7dfd8eea591be5806408191e3cca1cd6101f575b7c7206cd219b9f379fc3d03c3c867e5c36a8fcc75e86988a1897876b5a3bb2b3e102a742ebaeb50e08096c1990fa8d8755c187f86213f3cfc322f7997da73594e30f68a1da5768201916dfd52711ad79caae751260cc054dda58307f4031aebc75514795e6d7ae7725c27f7bc8f1e2115603e1f8b18517a74ddd901752a194cfb37535c949f4a5eefc98b231e03fd7a5d7643817567c7fbdcad37365a1a063c11bfd7e6474e9608391f3f3ebcd97a3ad7a9873d8615a9a4dac09ebc528b9277f71d5c2e6012645c643764319941206e6957987b5423b3864e6acb89c0e0371d66c5e16dfd920305cf5dc39ea0d48cea652236f3492f5b60a2a648e8ac61bf13811a81be593e430f504d0fe3d38222acd10e188605410900c55f203e0f6d553cf4e7cdfdfdbf4b60ee166c8be15757c6042f7f7b0c0c75932f795b075ba4116f1336622bafc47e58206255af610b3a7e88fed94a1c4a8b29e7e379b084431d5e059c0d0342678ef5b2ad08d10be3b48e4a1d0de16e8ca0175e1453fa15f8086f7b93d15e5f0769d56cbcec255fd1e82c43a61d50b893a8e7bc84c7cc1b9cffbc4d8f8d703d1ca879acf93e82f35a534665bd5a5a9e13e35ed00d796b830c45f87ba6c90857d05774506611c940e391752237af000473cfff41236801a9e78c48206e03e2a4b1c9164eb1f8cfb71d1559d3b5650327868ef87906b5a0e05470b0655f51090a57a65895608866ac0e008c44898ea0fa968ae510b561b8ebb9f0a38c2572f93aa6a8f5aaab1ff62ad761af234379adfc397c186a99bbecd534266358c5e053de4698e37fb0c512d72492c6f0d18e686c21665224d23fb6b15670e235a96bab63d63df51624f73d78fc38e0c8956882ebbbe0207f3b13be74b70ef29e64912cac49dd90a7f4d5fd09bec08dcb8413578f9e4456079c3673ffd33b366d4a203af63f25ba792a722a4d36749c6724e0b37cfd71761f3ff122861e362aab7a26a8c8090b65ab080535fa912d5b58a9b65410b94acc42396796e35a308cac7594439f4ed2afc8cc4676159751d9ce63ff894a7cad95b375f852d9bd493719ab9bac41cd9ec817b835628a6a9f4869fc9ce72ea3fc7119341ceaf23e85f7a990b7eeb35ef2ef2c84f6fafa0c186a0b2490c72cfe2ce7607634e0d651e4c87514a177300f4f3b762e386cc1522e9b859fb9297329a73b89b8a97184864823d1829fe7a6bf30c69f24b61338e3f341e05e3f70ec6cd6f3544652f69ade293dc896836632271cde36ebb6f515dc8d13121def9d2911ed0d19f2fc31a12b1de3b43dbfb32c0df664c85d4b978f3a41b43546844c8581590dade2db066d5a948a386438232b0be334232800fd164aac8047a96b85356820597a0ef21b2df300a8ef2a08155b7a8eb7793e5ec768db868432c9d65cd748369f24909862131553af695be43c95f2e65a9ef1f8fbad3d03bee4640639c0351c6ed58113b86ec0530aff32f4e4b786285ce72afd6dce83b3a82f58a0bc62735e3402848690d2865438c81f174588e6046ba95935ec0dfbbbb87dda17d8fdcf07b8322bdf18b1421293ead6a8b38119724c9c122f457f85129cbd50338a7e3194418c00ed91cd39878f7753477a17856281ae743c8dcdfc7d5c7142348f9fae4f7767f2c89c394c3fd5d8f261bde3b2055ccddf05c36643e21ec542a62be492501b470813fcedf01c876da0e1e822c3867f32951053f2963b5d1f90e713df0b2c526f36e685b4153d4ae4e8c607df1308c84e500c0bd9fe80dc3cf28187a39fd09643afb25eaa9411f3ce6304dc8bfd02afc9a6bad59887a1cad44a1f613a0779059a90248f09e357af291b1cce42cb9ac766dac70e599c1bbba4a58715adf2426a865eb1e0b80f10602db39c400b45131700490a9c38345022acc79851c2368bc7d191bc1f995722c564198669a68c971f60779e6983508a7c8077cdc7677d9a8b70b8fd1183f57cbc2d653ef6e96110c0c6730be7add59392b4082a6478447cc307d35512dfb2c4e27122b9749eeed9b5a5906f99ee57d7b565822bd4d78aed8f1567409a59ae77b3a1552a5cdb1558ff3ffd2b4cd0e141fce5ad11de5509c6dac5858bbb222bc403e3a307294afbe9633e162bfc5231284f58d475ef19cc1012cb4a81bd26e7e24509ecb5bd859a04a8e39f373188fc58573a52bf8a5de50aa082a4ad28202d01da2f0c7d3a6d1d3b9c3dab9d3ad9a663af4894904236632514d668e5f5016a350ae5accae2902cb9cba8d5262abc4e934329f410739831d447b798bb1da19bd3c98e90f43e54b8911ab9da8d594c9d0617396a53469ec2eb6ca0843ffd39e65b79bf856c755d8fda71b66e16cba537adac14de21a16a379513555d13ee6e021e6bb1cb5db35a7cb0162c3dbf631e8b6b42cc98fba74396971be184b910dbf0fbc29c0e45acfe59c789a134bcc01f7c3b2513d4ef988e7f66e5002d9ee8766870b9502d173953b78b654f020349b7af7845462822a6c78a63416606a265389216f141ca8269a11f18edf1d11de7f11906b787a0189a4fe5a55bb0f78c25319583b5f81c4ad25dd4544d35a2f8afce5b8a117b16104c45997f9ad31421414006f158881e9c7f553f3b7364e274bff39236720d67346e8270b2fd6b5b33c0cece3251b62ec09c709ad1adee626e43a54356b803adf23e45ddbe2bbade69974ca43c3f2246389612398a5247678299995592002f369b0a779ffa60d0785edecab597cb6fa11e2ce68d5e956c5fe95c12ce24cb334a2d1fe9e63491b7d85d58ba4150df6c42f29223eaa607837fee3c71667d7c4a69d5bd2a88e548429e4630c59c38689a52cbc9099f303d680c053cce1a0b24c17a918f7dd08a9348a414e30c8c91e9680facb185914018e1c5a090cd00578c837d9f69e49eae3e45326b679678cca81ca20cf3bfa8e4e548dc446d168382695319ea9fdc14bf29c2b15e2acb925f7db4723f6b382efcbdb10f00837278564a2d0e0da63b755206bdf69faba7e5d7406ec324ca089729a68ca29cbccd17256cb465b91e718b3b64429b8a8e70a72d85b470d85f4b8169ebc74809334db04384c3c2887f09374e60cb3d5c93f3ce5077bcea293b37215ba345f6a30b1d6e08c1cf7024b65ecac5063e177d9af7f687a35c377871d87b00fe7c453199e5c0588a49bf9981651f57468bb37d1812cce02cf1a6df234cf50aabb65959fb7863384d46cbf43600aeb2858a8bea733eec75bcf02f2dfc0c2df6b6c0f807236e67cf6e7253a6f0582cad219daad67c91b8c2f38ad91a9db3bc284f6301f28ad3d1ade08cfc4a8b63268de502d7b4cad5973ce2867a534e576789fe2bd60b15da33d7a5a5e728f6e5ab7052c4636439258979a804bf67aec5546343d7cbee90b4be9d5ef0775d64bfade2daae18d7de4240dd1d88ff3816f2d5c871174b3b48e9fab898abd4cd2df8cb1c3cfff889594a3f08cb935031edbe34aab3433ffd50263a406deef158bbabfa2ec70e79c761d95fcfbef0800c95413068b3789c6b12de5ebe9b414e65ce4f86a6bbccd5ec8e4e220f8ad07255abbaef719ebe1e5d066db4dd1f639cb156c34755eb14053824a1003e97ee54e8dab35f441ee563d80d3163a7b8f71d4f17e240cfae9f2e50c164cf373bb174f5dadafe2430a17be757e30f251d5d60863526a8f46addb932c8170c4a383348c5441aa353e5f1181482d4d0cc0e5d2809c11ee1fac29230c907926c2d3fa55298ae9835c46218650421497d060d15a4194c4d7382a886333375098156a9f0fd6b1d0d94933bb6f285fe51d4aa3037739f143ba20f9b326565f6db49787d1aeb30055ce588dd3c008c0bc1a08935c991067d63003b68b9e2db95360d8aaf2103bb5142c590bb799b268488febc7414b9ae8e108ca4ab4f031adbb9fbe4631c29adb14fb9726df3c6192a3e81b6c34d68e15ee309503ccc1ab240d4ce3c9a099cd7f8782eea9bd1c7005582b9c1fe08030b47958865723652fed003c90703e07f9f1782e33f3bf3d0b83691cd5970fb4af65afa2244bff41e93fa24c33c26c43c93c33a2144aac437a4ab2b4f498104278ec5f2cd38de61eb8b436f5a9dbc3d8b2405ff0598cbcaa964377f61daaf935c42e0db4567520cfee195da1c6090d62031dd0865b2f5aa88be1746a761e3a64b78de338b8996136bbd6b859eb730aa8ab1f68bb5a02b713d8b303ab2ef1e5433d225b0dd485d40a049a1953b488df5314fdbc1c654132498838043c35c7b168e786b0f35a04ec4417968c5561c45735cc09163e8fdbbe67a4c04d672948037e957968c6bf672668d1f6369475d4a238f46af939dbca37cc96ae88b152c1b8b524883e296e5e915a928e9a54268c28e14a85c87fe3bde0e9175dd2eb2645852464ddeae29aefc01d05ef668914829f340f6b14a7bc0f2ce4114f1bef1e2afc37583670a900c58affc6c55bb69e737e5fd02322536ec1e4249f8cca7171394d97c930656beb437ea1b7ac8f6b69d8c1499371deeff7608dde446d4a50f29ce015c655885fcc090aeed40d52390ef952c6b9f937197718aae27fe924c419d1468b45bc0e88688425c3a451dac67f29460fce27a5b753f60b244c1832e9b485e321e8d8d4f547eda56680d9d01aa6d4d7881ab760f926157315a3fcb4d7f9653b91270fc43637420215c71274e4effaf6b67fea48c05393272e288e103e28d26eb39fcb9afdef67686485e90e605b45d2f36a39b4973426f843c2db1e861c67d7c2ca2b8e92ca98ad1297d3fd913258081fff78d981097a2c22b0a9d881f649582e49fd9baaaa89d0d7091f9cfeb8bec3c9b7dfb85e53bee2fb051ff0f7d57ef4af134a7ca9ab91271411a0c95be1af414689425f985faa808a2520c96403788d71af4314023af7a2761ee7ba7e135edfaa51f9f89caa784d853886c147d11f3ccab318250aa65d366396b5dfcda0dda9f8cca5ad6815252ebc061c47f871785e0b3edbdcfb2d74c6fa3eaabaf9f3", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f9376b9bd08ff4733feb589ca70432b1fed0632fa8a295da47135911f", 0x38}], 0x4}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7c6012b802872041cfe8c0cd3e0dc1df76772f74d964ff31e481f3c5b96de5d57b25b5e6da0643aa88c693acfefe376af4bc577a451f8000a542b421fbfdeda", 0x86}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}, {{&(0x7f0000001240)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000001100)=[{0x0}, {&(0x7f00000023c0)="8a8648be4c0f4e1cba8b1840619b9a0923cbf9c9e8a72617e2e504549abe818ced0c93477f15975b6b27fd195a3a4401a378a1e5a709e9f341a8797020aab580ac75b83133bec3d80165bf352ecc7504f9962251f1a561761625a5a45301d2a88a2be2aeab736f41076e8646a5cff93e5b8fa1ef1430850968d743e3c547f8bbc45b04d88a8bb63ced695e762ad7b9", 0x8f}, {&(0x7f0000002480)="b5ab91163db3105215e366eb45664eb92ee14d8deb8cdfac670763e8882a6a6071042aaadc599c6f2232e1b6ea1db7c3e1b6748ff9527e3783f0007c9732084afa53b5f37f201a173b301cbfaa0c37ae7b866fc6285623c35b2071998f277f88a12fa1", 0x63}, {&(0x7f0000002500)="5aa9d040d6305795a3115a8a0bb4e7a5c3fc05e2c40575e5d7c818ab6793f3fede473ea54b4b6d5d29db4f46680c135b90008b4307a794fa9fd2c0a6d72a9f8a894cf52bf63e2ae96390cd0b3b08ff524984bf724eeace9bc6e9caebbe045ec695487633a2de1f2545ab0c2d74525d1f588287e966201492b03dab0326afab06d75a0f0b15d5f05d0f1b28f5fa5920a0d71394fbf1698230518b2e942b3499af46ce1a7c9b9f19068d7a306f6d08ce5d938524164854ad3322b0f7b3", 0xbc}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77e26464b8dc6ec581588f80c054c025f9", 0x20}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m24.915346506s ago: executing program 1 (id=261): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x30, 0xffffffffffffffff, 0x15385000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030002"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1m21.375561339s ago: executing program 1 (id=270): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, 0x0, 0x0) 1m20.155506492s ago: executing program 1 (id=274): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m17.436575336s ago: executing program 1 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) keyctl$join(0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200008c0) 1m15.752060945s ago: executing program 1 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m14.693204821s ago: executing program 33 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 19.279030309s ago: executing program 4 (id=425): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3a8, 0xa, 0x1, 0xfffffff0, 0x200, 0xa, 0x6, 0x1, 0x40, 0x1, 0x140, 0xfff, 0x4, 0x6, 0x7000, 0x8, 0x7569, 0x9, 0x779e8886, 0xc00, 0x1, 0x2, 0xff, 0x0, 0x3, 0xffffffde, 0x3ff, 0x3, 0x4, 0x9, 0x80000001, 0x1, 0x7, 0x4, 0xbd, 0x8, 0x9cc3, 0xce4b, 0xb, 0x1, 0x5, 0xf, 0x401, 0x8, 0x401, 0x1000, 0xf391, 0xadd, 0xb7, 0x97e, 0x8001, 0x401, 0x9, 0xa6d, 0xfff, 0x3, 0xfff, 0x0, 0x9f, 0xa1, 0x7fff, 0xfffffff4, 0x603b654e, 0x101, 0x10000, 0x2, 0x8, 0x5, 0x0, 0x5, 0x9, 0x9, 0x4, 0x3, 0x2, 0x1, 0x80000001, 0xec, 0x9, 0xe76, 0x3, 0x4, 0x400000, 0x9de1, 0xfff, 0xb41, 0x1ff, 0x3, 0x1000, 0x8, 0x7, 0x0, 0x4, 0x38, 0xb, 0x101, 0xdd0, 0x4aaa, 0x6, 0x5, 0x2, 0x4, 0x3, 0x5, 0x8b3, 0x3, 0x1, 0x5, 0x80000001, 0x5, 0x7, 0xb5, 0x7, 0xff, 0x3, 0x4, 0x7, 0x9, 0x8, 0x8, 0x0, 0xcc1a, 0x4, 0x0, 0x7, 0x10001, 0x80000001, 0x9, 0x200, 0x2, 0x7, 0x3, 0xd5e, 0x3ff, 0xc87b, 0x2f, 0x1, 0x1, 0xffffff83, 0x4d0, 0x0, 0x1000, 0x3, 0x0, 0x7f, 0x7, 0x1, 0x7ff, 0x1, 0xe6, 0x2, 0x4, 0xfff, 0x3, 0xfffffffd, 0x4, 0xfffffffe, 0xfffffff8, 0x3d, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x100000, 0x7, 0x6, 0x2, 0x5, 0x4, 0x200, 0xffff, 0x3, 0x5, 0x5, 0xfffffff9, 0x6, 0x4, 0x2, 0xb291, 0xc, 0x0, 0x7ff, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3ff, 0x9, 0x5, 0x9, 0x8, 0x4, 0xe, 0x0, 0x7, 0x1, 0x0, 0x2e04, 0xe0bf, 0x80000001, 0xfffffff9, 0x9, 0x3, 0x4, 0x8, 0xf, 0x6, 0x5, 0x8, 0x2, 0x8000, 0x3, 0xb8000000, 0x1649445e, 0x8, 0xffffffd4, 0x7ff, 0x6, 0x65d, 0xb, 0x3, 0x80000000, 0x4242, 0x8, 0x0, 0x9, 0x6, 0x8, 0xffff, 0xffffffff, 0x894, 0xd, 0x4e3c, 0x5, 0x0, 0xfffffff9, 0x8, 0x4, 0x1, 0x3, 0x1, 0x0, 0x9, 0x0, 0x8, 0x3, 0x10001, 0x3, 0x7, 0x7f, 0xa, 0x4, 0x7, 0xafd9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x7, 0xb, 0x7fff, 0x5, 0x4, 0x5, 0xfffffff8, 0x0, 0x36, 0x3410, 0xb, 0x6, 0x9, 0x7, 0x6, 0xfffffffb, 0x4, 0x400, 0x3b080, 0xf9bc, 0x7ff, 0xe2, 0x4, 0x10, 0x7, 0x6fb2, 0x9565, 0x4, 0x2, 0xfff, 0x9, 0x9, 0x0, 0x7, 0x7, 0x7, 0x4, 0x6, 0x6, 0x401, 0xb, 0x40, 0xffffffff, 0x8, 0xcc, 0x8, 0x853c, 0x0, 0x2, 0xd698, 0x1000, 0x304, 0x94ab, 0x7fffffff, 0x63d5, 0x9, 0x4, 0x5, 0x986, 0x7fffffff, 0x6, 0x9, 0x5, 0x10001, 0x81, 0x101, 0x9, 0x5, 0x2, 0x14, 0x4, 0x3, 0x1c000, 0x3, 0x6, 0xb2, 0x55, 0x400, 0x2, 0x401, 0x2, 0x1cb, 0x8001, 0xffff, 0x7, 0x6, 0x4, 0x8, 0x0, 0x10001, 0x40, 0x3, 0x8, 0x7ff, 0x4, 0x9, 0xfffffffc, 0xd, 0x40, 0x5, 0x3, 0x7fff, 0x4, 0x100005, 0x100, 0x8, 0x3ce, 0x2, 0x8, 0xffffffff, 0x4c, 0xffffffff, 0x0, 0xfff, 0xf, 0xd, 0x1000, 0x6, 0x3, 0xaee4, 0xffff30bd, 0x5, 0x4, 0x3, 0x3, 0x2, 0x1, 0x80000000, 0x5, 0x3ff, 0x3, 0x4, 0x6, 0xf71f, 0x4, 0x6, 0x3, 0xc, 0x62a, 0x8000, 0x2ff, 0x219, 0x43f, 0x1, 0x5, 0x3, 0x7, 0x8, 0xfffffffb, 0xa327, 0x10000, 0x7f, 0x7, 0x6, 0x6, 0x1000, 0x9, 0x9, 0x1, 0xb, 0x7, 0x6, 0x38b62e7e, 0xb3e, 0x2, 0x0, 0x120000, 0x4, 0x3ff, 0x6, 0x1000, 0x9, 0x6, 0x0, 0x7, 0x5, 0x8000, 0x100, 0x6, 0x12c3c0, 0x6, 0x7f, 0x200, 0x800, 0x5, 0xfffffff7, 0xef21, 0x4, 0x0, 0x2fb5, 0x56b0, 0x6, 0x6, 0xa175, 0x9, 0x0, 0x8, 0x2, 0x0, 0x3, 0x4, 0x1, 0xb, 0x1, 0x4, 0xb, 0x9, 0xa60, 0xa44, 0x7, 0x2, 0x7, 0x4665, 0x0, 0xbac3, 0x7, 0x0, 0x8001, 0xcd, 0x1, 0x9, 0xa, 0xad722e4, 0xa30, 0x1, 0x6, 0x8, 0x1, 0x8, 0x7, 0x3, 0x8, 0x3, 0x9e, 0x0, 0x954, 0x8001, 0xffff0001, 0x7ff, 0x8, 0xffffffc0, 0x8, 0x1000, 0x9, 0x8, 0x1, 0xb, 0x1, 0x80000001, 0x5, 0xffff7fff, 0x9, 0x6, 0xfffffff8, 0x10000]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r6, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 16.124080859s ago: executing program 4 (id=430): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008cd0cb10040000102030109026e00494181f03b080b020101013000090400000001"], 0x0) 15.096040625s ago: executing program 3 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x2d) 12.842067123s ago: executing program 4 (id=437): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x0, 0x2) r6 = syz_open_dev$evdev(&(0x7f0000001800), 0x0, 0x2002) write$evdev(r6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@newae={0xac, 0x1e, 0x200, 0x70bd25, 0x25dfdbfc, {{@in=@local, 0x4d6, 0x2, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x84, 0x3503}, [@proto={0x5, 0x19, 0x32}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @algo_auth={0x48, 0x1, {{'blake2s-224-x86\x00'}}}]}, 0xac}}, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0x1]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94) 12.809908274s ago: executing program 3 (id=438): socket$kcm(0x2d, 0xa, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 11.271773348s ago: executing program 4 (id=440): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3a8, 0xa, 0x1, 0xfffffff0, 0x200, 0xa, 0x6, 0x1, 0x40, 0x1, 0x140, 0xfff, 0x4, 0x6, 0x7000, 0x8, 0x7569, 0x9, 0x779e8886, 0xc00, 0x1, 0x2, 0xff, 0x0, 0x3, 0xffffffde, 0x3ff, 0x3, 0x4, 0x9, 0x80000001, 0x1, 0x7, 0x4, 0xbd, 0x8, 0x9cc3, 0xce4b, 0xb, 0x1, 0x5, 0xf, 0x401, 0x8, 0x401, 0x1000, 0xf391, 0xadd, 0xb7, 0x97e, 0x8001, 0x401, 0x9, 0xa6d, 0xfff, 0x3, 0xfff, 0x0, 0x9f, 0xa1, 0x7fff, 0xfffffff4, 0x603b654e, 0x101, 0x10000, 0x2, 0x8, 0x5, 0x0, 0x5, 0x9, 0x9, 0x4, 0x3, 0x2, 0x1, 0x80000001, 0xec, 0x9, 0xe76, 0x3, 0x4, 0x400000, 0x9de1, 0xfff, 0xb41, 0x1ff, 0x3, 0x1000, 0x8, 0x7, 0x0, 0x4, 0x38, 0xb, 0x101, 0xdd0, 0x4aaa, 0x6, 0x5, 0x2, 0x4, 0x3, 0x5, 0x8b3, 0x3, 0x1, 0x5, 0x80000001, 0x5, 0x7, 0xb5, 0x7, 0xff, 0x3, 0x4, 0x7, 0x9, 0x8, 0x8, 0x0, 0xcc1a, 0x4, 0x0, 0x7, 0x10001, 0x80000001, 0x9, 0x200, 0x2, 0x7, 0x3, 0xd5e, 0x3ff, 0xc87b, 0x2f, 0x1, 0x1, 0xffffff83, 0x4d0, 0x0, 0x1000, 0x3, 0x0, 0x7f, 0x7, 0x1, 0x7ff, 0x1, 0xe6, 0x2, 0x4, 0xfff, 0x3, 0xfffffffd, 0x4, 0xfffffffe, 0xfffffff8, 0x3d, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x100000, 0x7, 0x6, 0x2, 0x5, 0x4, 0x200, 0xffff, 0x3, 0x5, 0x5, 0xfffffff9, 0x6, 0x4, 0x2, 0xb291, 0xc, 0x0, 0x7ff, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3ff, 0x9, 0x5, 0x9, 0x8, 0x4, 0xe, 0x0, 0x7, 0x1, 0x0, 0x2e04, 0xe0bf, 0x80000001, 0xfffffff9, 0x9, 0x3, 0x4, 0x8, 0xf, 0x6, 0x5, 0x8, 0x2, 0x8000, 0x3, 0xb8000000, 0x1649445e, 0x8, 0xffffffd4, 0x7ff, 0x6, 0x65d, 0xb, 0x3, 0x80000000, 0x4242, 0x8, 0x0, 0x9, 0x6, 0x8, 0xffff, 0xffffffff, 0x894, 0xd, 0x4e3c, 0x5, 0x0, 0xfffffff9, 0x8, 0x4, 0x1, 0x3, 0x1, 0x0, 0x9, 0x0, 0x8, 0x3, 0x10001, 0x3, 0x7, 0x7f, 0xa, 0x4, 0x7, 0xafd9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x7, 0xb, 0x7fff, 0x5, 0x4, 0x5, 0xfffffff8, 0x0, 0x36, 0x3410, 0xb, 0x6, 0x9, 0x7, 0x6, 0xfffffffb, 0x4, 0x400, 0x3b080, 0xf9bc, 0x7ff, 0xe2, 0x4, 0x10, 0x7, 0x6fb2, 0x9565, 0x4, 0x2, 0xfff, 0x9, 0x9, 0x0, 0x7, 0x7, 0x7, 0x4, 0x6, 0x6, 0x401, 0xb, 0x40, 0xffffffff, 0x8, 0xcc, 0x8, 0x853c, 0x0, 0x2, 0xd698, 0x1000, 0x304, 0x94ab, 0x7fffffff, 0x63d5, 0x9, 0x4, 0x5, 0x986, 0x7fffffff, 0x6, 0x9, 0x5, 0x10001, 0x81, 0x101, 0x9, 0x5, 0x2, 0x14, 0x4, 0x3, 0x1c000, 0x3, 0x6, 0xb2, 0x55, 0x400, 0x2, 0x401, 0x2, 0x1cb, 0x8001, 0xffff, 0x7, 0x6, 0x4, 0x8, 0x0, 0x10001, 0x40, 0x3, 0x8, 0x7ff, 0x4, 0x9, 0xfffffffc, 0xd, 0x40, 0x5, 0x3, 0x7fff, 0x4, 0x100005, 0x100, 0x8, 0x3ce, 0x2, 0x8, 0xffffffff, 0x4c, 0xffffffff, 0x0, 0xfff, 0xf, 0xd, 0x1000, 0x6, 0x3, 0xaee4, 0xffff30bd, 0x5, 0x4, 0x3, 0x3, 0x2, 0x1, 0x80000000, 0x5, 0x3ff, 0x3, 0x4, 0x6, 0xf71f, 0x4, 0x6, 0x3, 0xc, 0x62a, 0x8000, 0x2ff, 0x219, 0x43f, 0x1, 0x5, 0x3, 0x7, 0x8, 0xfffffffb, 0xa327, 0x10000, 0x7f, 0x7, 0x6, 0x6, 0x1000, 0x9, 0x9, 0x1, 0xb, 0x7, 0x6, 0x38b62e7e, 0xb3e, 0x2, 0x0, 0x120000, 0x4, 0x3ff, 0x6, 0x1000, 0x9, 0x6, 0x0, 0x7, 0x5, 0x8000, 0x100, 0x6, 0x12c3c0, 0x6, 0x7f, 0x200, 0x800, 0x5, 0xfffffff7, 0xef21, 0x4, 0x0, 0x2fb5, 0x56b0, 0x6, 0x6, 0xa175, 0x9, 0x0, 0x8, 0x2, 0x0, 0x3, 0x4, 0x1, 0xb, 0x1, 0x4, 0xb, 0x9, 0xa60, 0xa44, 0x7, 0x2, 0x7, 0x4665, 0x0, 0xbac3, 0x7, 0x0, 0x8001, 0xcd, 0x1, 0x9, 0xa, 0xad722e4, 0xa30, 0x1, 0x6, 0x8, 0x1, 0x8, 0x7, 0x3, 0x8, 0x3, 0x9e, 0x0, 0x954, 0x8001, 0xffff0001, 0x7ff, 0x8, 0xffffffc0, 0x8, 0x1000, 0x9, 0x8, 0x1, 0xb, 0x1, 0x80000001, 0x5, 0xffff7fff, 0x9, 0x6, 0xfffffff8, 0x10000]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r6, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 10.924920559s ago: executing program 3 (id=441): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9.359806504s ago: executing program 3 (id=444): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) 8.782012164s ago: executing program 2 (id=445): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x42c41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x28, 0x5, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x201) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x454}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000014000180050002000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 7.438453971s ago: executing program 2 (id=450): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffd}]}) getpid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0xb, 0x2) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 6.368104588s ago: executing program 6 (id=451): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, 0x0, 0x0) 6.166568425s ago: executing program 2 (id=452): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r3, 0x84, 0x82, &(0x7f00000004c0)="36b5a7067df289c36052d32e9266b51ad87c219955103b76ffdeac2fe3d71286eff7892630b006cf7a50adab8ef86d9a74d30d13a5a320fcad350416c64446d1", 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 6.155532165s ago: executing program 4 (id=453): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 5.944665542s ago: executing program 5 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) socket(0x400000000010, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 5.924647233s ago: executing program 6 (id=455): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.020464264s ago: executing program 3 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x46b1, 0x5) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) 4.89429879s ago: executing program 4 (id=457): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9larHpqe7GHggU9iHhoaDc1dNuEJAUTekjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTsOx2Yubzgdl9fzZ577vDy7y3s48EUFrj2UMacSIiriURo5vqDkVeOd563eof965nRxJra2/9nkSSl7Vfn+TPx/LM4Yj47lLEk5Xt7c4vLt2abDTqc3n+zMLt2TPzi0unp29P3qzfrN+pnX313PmJ12rnan2L9cFXn/1y+cqbz3784fuvTH3fOJ3EhRjJ6zbH0S/jMb7+nmyWva/n+91YQSp5PJ3iZP9rn7+hiHg6RqOSj/rMaEw/KLRzwECtVSLWgJJKjH8oqcjn/+21/SDWwfvZo4utN2B7/Idan43E4eba6Ohqsmll1FrvjvWh/ayNv++d/CI7YkCfQ+xk+X4rmO3xJ82+jTU/xcniT/8VfxoRE3n/s/KzPbY/viVfSPzP9Bb/hfw5K7/UY/tFxw9AOa1cbF3It1//0vX5T3SY/4x0uHb1oujrX/f530b8lS7zv6t7bOPnjy5/2q1u8/wvO7L223PBx+HR/YiTHeNP1uNPOsSfzXuu7bGNN3747XK3uqLjX3sYcarj+mfjjlay8/3JM1PTjfpE67FjG998+96X3dovOv7s/B/tEv9O5z8rm91jG19ffXi7W93u8ae/DidvN1PDeckHkwsLc7WI4eTK9vJdFiLt17R/Rxb/iy/sPP47xX8kWzvsMf7Zd26t9h7/YGXx3+jx/H+yxzb+evfuc93qio4fAAAAAAAADpK0+V2OJK2up9O0Wm3t4X0qjqaNmfmFl6Zm7t650frOx1gMpe073aOtfJLla/n3Ydv5s1vyL0fE8Yj4vHKkma9en2ncKDp4AAAAAAAAAAAAAAAAAAAA2CeObdn//2eltf8fKIlDRXcAKIzxD+Vl/EN5Gf9QXsY/lJfxD+Vl/EN5Gf9QXj2N/+X+9wN4/Fz/obyMfwAAAAA4kI4/v/JTEhHLrx9pHpnhvG6o0J4Bg5YW3QGgMJWiOwAUxq1/KC9rfCDZpf5wt4qV3X4SAAAAAAAAAAAAAOiXUyfs/4eysv8fysv+fygv+/+hvKzxAfv/AQAAAAAAAAAAAGD/G2keSVrN9wKPRJpWqxH/j4ixGEqmphv1iYh4IiJ+rAz9L8vXiu40AAAAAAAAAAAAAAAAAAAAHDDzi0u3JhuN+pyEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///Dy5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/TPwEAAP//KHYg8A==") sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0xc, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x38, 0xd5, 0x2, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 4.772740163s ago: executing program 5 (id=458): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @mcast2, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008cd0cb10040000102030109026e00494181f03b080b0201010130000904000000010130000a2401000a00030000000904010000010230000904010101010230000905010910000005080a2525060000000601000904020000010230000904020101010230000905820908000102040a25250600000048"], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) syz_usb_control_io$uac3(r3, &(0x7f00000038c0)={0x14, 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB]}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 4.608664299s ago: executing program 6 (id=459): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003080)=@deltaction={0x6c, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20000084) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sndpcmc(&(0x7f0000000ac0), 0x1, 0x8802) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$tcp_congestion(r4, &(0x7f00000005c0)='bbr\x00', 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) 4.391915846s ago: executing program 2 (id=460): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x42c41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x28, 0x5, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x201) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x454}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000014000180050002000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.84999544s ago: executing program 3 (id=461): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) 2.827913061s ago: executing program 6 (id=462): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00'], 0x28}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a1) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, 0x0, 0x0) close(r4) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) close(r1) 1.99880115s ago: executing program 2 (id=463): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00'], 0x28}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) 1.879002164s ago: executing program 6 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) 1.065337223s ago: executing program 2 (id=465): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) 910.113987ms ago: executing program 5 (id=466): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3a8, 0xa, 0x1, 0xfffffff0, 0x200, 0xa, 0x6, 0x1, 0x40, 0x1, 0x140, 0xfff, 0x4, 0x6, 0x7000, 0x8, 0x7569, 0x9, 0x779e8886, 0xc00, 0x1, 0x2, 0xff, 0x0, 0x3, 0xffffffde, 0x3ff, 0x3, 0x4, 0x9, 0x80000001, 0x1, 0x7, 0x4, 0xbd, 0x8, 0x9cc3, 0xce4b, 0xb, 0x1, 0x5, 0xf, 0x401, 0x8, 0x401, 0x1000, 0xf391, 0xadd, 0xb7, 0x97e, 0x8001, 0x401, 0x9, 0xa6d, 0xfff, 0x3, 0xfff, 0x0, 0x9f, 0xa1, 0x7fff, 0xfffffff4, 0x603b654e, 0x101, 0x10000, 0x2, 0x8, 0x5, 0x0, 0x5, 0x9, 0x9, 0x4, 0x3, 0x2, 0x1, 0x80000001, 0xec, 0x9, 0xe76, 0x3, 0x4, 0x400000, 0x9de1, 0xfff, 0xb41, 0x1ff, 0x3, 0x1000, 0x8, 0x7, 0x0, 0x4, 0x38, 0xb, 0x101, 0xdd0, 0x4aaa, 0x6, 0x5, 0x2, 0x4, 0x3, 0x5, 0x8b3, 0x3, 0x1, 0x5, 0x80000001, 0x5, 0x7, 0xb5, 0x7, 0xff, 0x3, 0x4, 0x7, 0x9, 0x8, 0x8, 0x0, 0xcc1a, 0x4, 0x0, 0x7, 0x10001, 0x80000001, 0x9, 0x200, 0x2, 0x7, 0x3, 0xd5e, 0x3ff, 0xc87b, 0x2f, 0x1, 0x1, 0xffffff83, 0x4d0, 0x0, 0x1000, 0x3, 0x0, 0x7f, 0x7, 0x1, 0x7ff, 0x1, 0xe6, 0x2, 0x4, 0xfff, 0x3, 0xfffffffd, 0x4, 0xfffffffe, 0xfffffff8, 0x3d, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x100000, 0x7, 0x6, 0x2, 0x5, 0x4, 0x200, 0xffff, 0x3, 0x5, 0x5, 0xfffffff9, 0x6, 0x4, 0x2, 0xb291, 0xc, 0x0, 0x7ff, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3ff, 0x9, 0x5, 0x9, 0x8, 0x4, 0xe, 0x0, 0x7, 0x1, 0x0, 0x2e04, 0xe0bf, 0x80000001, 0xfffffff9, 0x9, 0x3, 0x4, 0x8, 0xf, 0x6, 0x5, 0x8, 0x2, 0x8000, 0x3, 0xb8000000, 0x1649445e, 0x8, 0xffffffd4, 0x7ff, 0x6, 0x65d, 0xb, 0x3, 0x80000000, 0x4242, 0x8, 0x0, 0x9, 0x6, 0x8, 0xffff, 0xffffffff, 0x894, 0xd, 0x4e3c, 0x5, 0x0, 0xfffffff9, 0x8, 0x4, 0x1, 0x3, 0x1, 0x0, 0x9, 0x0, 0x8, 0x3, 0x10001, 0x3, 0x7, 0x7f, 0xa, 0x4, 0x7, 0xafd9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x7, 0xb, 0x7fff, 0x5, 0x4, 0x5, 0xfffffff8, 0x0, 0x36, 0x3410, 0xb, 0x6, 0x9, 0x7, 0x6, 0xfffffffb, 0x4, 0x400, 0x3b080, 0xf9bc, 0x7ff, 0xe2, 0x4, 0x10, 0x7, 0x6fb2, 0x9565, 0x4, 0x2, 0xfff, 0x9, 0x9, 0x0, 0x7, 0x7, 0x7, 0x4, 0x6, 0x6, 0x401, 0xb, 0x40, 0xffffffff, 0x8, 0xcc, 0x8, 0x853c, 0x0, 0x2, 0xd698, 0x1000, 0x304, 0x94ab, 0x7fffffff, 0x63d5, 0x9, 0x4, 0x5, 0x986, 0x7fffffff, 0x6, 0x9, 0x5, 0x10001, 0x81, 0x101, 0x9, 0x5, 0x2, 0x14, 0x4, 0x3, 0x1c000, 0x3, 0x6, 0xb2, 0x55, 0x400, 0x2, 0x401, 0x2, 0x1cb, 0x8001, 0xffff, 0x7, 0x6, 0x4, 0x8, 0x0, 0x10001, 0x40, 0x3, 0x8, 0x7ff, 0x4, 0x9, 0xfffffffc, 0xd, 0x40, 0x5, 0x3, 0x7fff, 0x4, 0x100005, 0x100, 0x8, 0x3ce, 0x2, 0x8, 0xffffffff, 0x4c, 0xffffffff, 0x0, 0xfff, 0xf, 0xd, 0x1000, 0x6, 0x3, 0xaee4, 0xffff30bd, 0x5, 0x4, 0x3, 0x3, 0x2, 0x1, 0x80000000, 0x5, 0x3ff, 0x3, 0x4, 0x6, 0xf71f, 0x4, 0x6, 0x3, 0xc, 0x62a, 0x8000, 0x2ff, 0x219, 0x43f, 0x1, 0x5, 0x3, 0x7, 0x8, 0xfffffffb, 0xa327, 0x10000, 0x7f, 0x7, 0x6, 0x6, 0x1000, 0x9, 0x9, 0x1, 0xb, 0x7, 0x6, 0x38b62e7e, 0xb3e, 0x2, 0x0, 0x120000, 0x4, 0x3ff, 0x6, 0x1000, 0x9, 0x6, 0x0, 0x7, 0x5, 0x8000, 0x100, 0x6, 0x12c3c0, 0x6, 0x7f, 0x200, 0x800, 0x5, 0xfffffff7, 0xef21, 0x4, 0x0, 0x2fb5, 0x56b0, 0x6, 0x6, 0xa175, 0x9, 0x0, 0x8, 0x2, 0x0, 0x3, 0x4, 0x1, 0xb, 0x1, 0x4, 0xb, 0x9, 0xa60, 0xa44, 0x7, 0x2, 0x7, 0x4665, 0x0, 0xbac3, 0x7, 0x0, 0x8001, 0xcd, 0x1, 0x9, 0xa, 0xad722e4, 0xa30, 0x1, 0x6, 0x8, 0x1, 0x8, 0x7, 0x3, 0x8, 0x3, 0x9e, 0x0, 0x954, 0x8001, 0xffff0001, 0x7ff, 0x8, 0xffffffc0, 0x8, 0x1000, 0x9, 0x8, 0x1, 0xb, 0x1, 0x80000001, 0x5, 0xffff7fff, 0x9, 0x6, 0xfffffff8, 0x10000]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r6, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 612.006598ms ago: executing program 5 (id=467): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000480), 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r2, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 496.468552ms ago: executing program 5 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) socket(0x400000000010, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 125.612155ms ago: executing program 5 (id=469): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 6 (id=470): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@ifindex, 0xffffffffffffffff, 0x6, 0x4}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): meout [ 69.101148][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 69.113951][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.150228][ T4278] device hsr_slave_0 entered promiscuous mode [ 69.157208][ T4278] device hsr_slave_1 entered promiscuous mode [ 69.164396][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.172079][ T4278] Cannot create hsr debugfs directory [ 69.230826][ T4272] device hsr_slave_0 entered promiscuous mode [ 69.238061][ T4272] device hsr_slave_1 entered promiscuous mode [ 69.244819][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.252591][ T4272] Cannot create hsr debugfs directory [ 69.559111][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.572612][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.595084][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.612732][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.651846][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.670811][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.679918][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.696073][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.735797][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.762954][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.773507][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.793244][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.916084][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.926579][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.953488][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.960417][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.972622][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.988893][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.026805][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.039606][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.051165][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.069204][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.087235][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.096484][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.108339][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.117079][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.130159][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.143381][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.155098][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.169740][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.180322][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.187855][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.198847][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.218741][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.232218][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.241778][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.251413][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.258766][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.268077][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.277646][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.286507][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.293773][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.301812][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.324771][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.340105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.348861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.359567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.368999][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.376220][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.385852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.394977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.403753][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.410817][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.419461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.441774][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.451511][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.468925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.477289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.505307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.514354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.523465][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.530569][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.538720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.548684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.557819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.568091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.577365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.586354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.595488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.604679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.657755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.670806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.680232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.688761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.699130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.707722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.716164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.725546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.734867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.743896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.753976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.763424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.773294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.781621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.791087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.799851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.808592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.817207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.829454][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.847275][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.877247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.886967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.906892][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.918753][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.963710][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.970713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.991758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.002686][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 71.060083][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.083430][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 71.084569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.100528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.146016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.157193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.166176][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 71.166186][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 71.172377][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 71.212891][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.220046][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.264160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.288524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.298976][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.306187][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.329404][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.369484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.379992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.393116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.405971][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.411257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.412557][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.424503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.468942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.509791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.564271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.576805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.599605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.608066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.620067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.630782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.639502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.651690][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.664868][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.698744][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.733957][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.749438][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.762817][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.770381][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.785754][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.795155][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.804759][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.814399][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.821561][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.830307][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.839168][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.854046][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.885697][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.914270][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.923587][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.934527][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.943995][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.951118][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.959380][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.969283][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.979375][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.996187][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.041687][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.058125][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.075659][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.087457][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.116485][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.133048][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.153038][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.173182][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.193050][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.201869][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.252397][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.273307][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.293768][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.303958][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.324758][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.345846][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.409595][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.425842][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.445093][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.462149][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.483476][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.491515][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.500382][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.520910][ T4267] device veth0_vlan entered promiscuous mode [ 72.531460][ T4271] device veth0_vlan entered promiscuous mode [ 72.543198][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.551964][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.565941][ T4267] device veth1_vlan entered promiscuous mode [ 72.629227][ T4271] device veth1_vlan entered promiscuous mode [ 72.639471][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.649010][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.658657][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.670090][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.715757][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.726417][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.770487][ T4271] device veth0_macvtap entered promiscuous mode [ 72.781744][ T4271] device veth1_macvtap entered promiscuous mode [ 72.790679][ T4279] device veth0_vlan entered promiscuous mode [ 72.798502][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.811371][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.820220][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.829806][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.838913][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.847855][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.856497][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.865158][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.878584][ T4272] device veth0_vlan entered promiscuous mode [ 72.898061][ T4279] device veth1_vlan entered promiscuous mode [ 72.906119][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.919310][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.929331][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.938619][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.948348][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.958097][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.966416][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.983114][ T4267] device veth0_macvtap entered promiscuous mode [ 72.998334][ T4267] device veth1_macvtap entered promiscuous mode [ 73.014122][ T4272] device veth1_vlan entered promiscuous mode [ 73.037126][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.058940][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.068036][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.077010][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.086844][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.092271][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 73.095482][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.109250][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.119472][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.128014][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.136282][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.145196][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.162350][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 73.183379][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.198878][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.210277][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.223797][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.235923][ T4279] device veth0_macvtap entered promiscuous mode [ 73.242714][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 73.247160][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.252950][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 73.255628][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 73.272779][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.281807][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.291974][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.300815][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.311663][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.320210][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.330384][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.339443][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.348606][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.357570][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.369205][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.382228][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.394360][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.405783][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.414699][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.423890][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.433754][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.461574][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.471126][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.484574][ T4279] device veth1_macvtap entered promiscuous mode [ 73.531125][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.543431][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.556139][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.617565][ T4272] device veth0_macvtap entered promiscuous mode [ 73.630173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.647424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.657022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.688525][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.708486][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.720038][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.733031][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.745693][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.754394][ T4272] device veth1_macvtap entered promiscuous mode [ 73.776492][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.789313][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.800517][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.813246][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.824395][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.835145][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.846957][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.877072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.887711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.901498][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.910595][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.920551][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.924839][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.930740][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.946004][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.960314][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.978532][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.979496][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.999845][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.010582][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.021218][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.031447][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.043291][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.054718][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.070770][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.078989][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.087424][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.095955][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.105622][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.114665][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.134706][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.145422][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.155982][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.166963][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.177016][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.187790][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.199355][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.208091][ T4278] device veth0_vlan entered promiscuous mode [ 74.237003][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.247309][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.255463][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.264869][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.288096][ T4278] device veth1_vlan entered promiscuous mode [ 74.311643][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.320944][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.338006][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.347578][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.385534][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.406529][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.420059][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.438483][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.439684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.456475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.465327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.473464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.481490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.490284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.518158][ T4278] device veth0_macvtap entered promiscuous mode [ 74.566015][ T4278] device veth1_macvtap entered promiscuous mode [ 74.584537][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.604375][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.632765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.646135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.655899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.678302][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.690699][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.702493][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.713481][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.723942][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.734712][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.745151][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.755997][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.776187][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.806551][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.821240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.829521][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.856188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.913666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.930866][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.968882][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.970218][ T4355] loop1: detected capacity change from 0 to 512 [ 74.980140][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.996278][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.011764][ T4355] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 75.020814][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.033246][ T4355] EXT4-fs error (device loop1): ext4_get_journal_inode:5756: comm syz.1.2: inode #1792: comm syz.1.2: iget: illegal inode # [ 75.047533][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.059467][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.070374][ T4355] EXT4-fs (loop1): Remounting filesystem read-only [ 75.077304][ T4355] EXT4-fs (loop1): no journal found [ 75.083865][ T4355] EXT4-fs (loop1): can't get journal size [ 75.089719][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.103605][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.113626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.134452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.134585][ T4355] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 75.162628][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 75.169196][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.184075][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.200493][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.209273][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.210291][ T4355] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 75.224454][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.225946][ T4315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.242872][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.252337][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 75.252589][ T4355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.300315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.322653][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 75.327921][ T4352] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.2: Logical block already allocated [ 75.332679][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 75.346762][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 75.365409][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.441767][ T4352] EXT4-fs (loop1): Remounting filesystem read-only [ 75.441786][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.467536][ T4315] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 75.486593][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.528530][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.558766][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.577431][ T4315] usb 1-1: Product: syz [ 75.581615][ T4315] usb 1-1: Manufacturer: syz [ 75.582308][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.589595][ T4315] usb 1-1: SerialNumber: syz [ 75.608923][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.628552][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 75.995790][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.029075][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.156458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.652303][ T4315] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 77.741644][ T4315] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 77.818568][ T4315] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 77.884968][ T4389] loop4: detected capacity change from 0 to 2048 [ 77.917686][ T4391] binder: 4379:4391 ioctl c0306201 0 returned -14 [ 77.975531][ T4391] binder: 4379:4391 ioctl 4018620d 0 returned -22 [ 78.019589][ T4389] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.197448][ T4392] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.642414][ T4315] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 79.408269][ T4315] lan78xx: probe of 1-1:1.0 failed with error -71 [ 79.423932][ T4315] usb 1-1: USB disconnect, device number 2 [ 79.621552][ T4402] loop2: detected capacity change from 0 to 1024 [ 79.702598][ T4402] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.796910][ T4402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.122623][ T4314] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.342202][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 80.364592][ T4314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 80.402432][ T4314] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 80.421482][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 80.433208][ T4314] usb 1-1: Product: syz [ 80.444784][ T4314] usb 1-1: Manufacturer: syz [ 80.449642][ T4314] usb 1-1: SerialNumber: syz [ 80.518278][ T4314] usb 1-1: config 0 descriptor?? [ 80.525461][ T4409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.538107][ T4314] hub 1-1:0.0: bad descriptor, ignoring hub [ 80.546266][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 80.555881][ T4314] hub: probe of 1-1:0.0 failed with error -5 [ 80.877969][ T4415] loop4: detected capacity change from 0 to 1024 [ 80.901222][ T4415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.032403][ T4415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.103590][ T4358] usb 1-1: USB disconnect, device number 3 [ 81.202406][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.438475][ T4316] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.569345][ T4316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.724352][ T124] cfg80211: failed to load regulatory.db [ 81.752331][ T4358] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.782054][ T4316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.832900][ T4316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.872848][ T4316] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.881956][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.906765][ T4427] binder: BINDER_SET_CONTEXT_MGR already set [ 81.926266][ T4316] usb 3-1: Product: syz [ 81.930717][ T4427] binder: 4426:4427 ioctl 4018620d 200000000040 returned -16 [ 81.938457][ T4316] usb 3-1: Manufacturer: syz [ 81.952236][ T4358] usb 1-1: Using ep0 maxpacket: 32 [ 81.970311][ T4358] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 82.015704][ T4316] cdc_wdm 3-1:1.0: skipping garbage [ 82.037242][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 82.044045][ T4358] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.055422][ T4316] cdc_wdm 3-1:1.0: skipping garbage [ 82.069071][ T4358] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.095894][ T4358] usb 1-1: Product: syz [ 82.097768][ T4316] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 82.100189][ T4358] usb 1-1: Manufacturer: syz [ 82.116486][ T4316] cdc_wdm 3-1:1.0: Unknown control protocol [ 82.175142][ T4358] usb 1-1: SerialNumber: syz [ 82.191905][ T4358] usb 1-1: config 0 descriptor?? [ 82.236825][ T4409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.248879][ T4429] loop1: detected capacity change from 0 to 16 [ 82.281663][ T4358] hub 1-1:0.0: bad descriptor, ignoring hub [ 82.313496][ T4429] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 82.323011][ T4358] hub: probe of 1-1:0.0 failed with error -5 [ 82.391526][ T124] usb 3-1: USB disconnect, device number 2 [ 82.420588][ T4432] loop4: detected capacity change from 0 to 64 [ 82.952281][ T4314] usb 1-1: USB disconnect, device number 4 [ 83.114163][ T4436] loop2: detected capacity change from 0 to 256 [ 83.178286][ T4436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 83.371415][ T26] audit: type=1800 audit(1775101128.336:2): pid=4436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19" name="bus" dev="loop2" ino=1048595 res=0 errno=0 [ 83.399777][ T4438] loop1: detected capacity change from 0 to 1024 [ 85.188357][ T26] audit: type=1800 audit(1775101130.136:3): pid=4442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 85.351437][ T4449] loop0: detected capacity change from 0 to 64 [ 85.396687][ T4446] loop4: detected capacity change from 0 to 1024 [ 85.530334][ T4446] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.606160][ T4449] Trying to free block not in datazone [ 85.779892][ T4446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.914985][ T4469] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.954363][ T4471] loop3: detected capacity change from 0 to 1024 [ 87.017422][ T4471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.033677][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 87.071582][ T4471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.488156][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 88.810165][ T4498] device syzkaller0 entered promiscuous mode [ 89.051633][ T4507] loop3: detected capacity change from 0 to 2048 [ 89.207132][ T4518] loop0: detected capacity change from 0 to 1024 [ 89.218646][ T4507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.350517][ T4518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.439689][ T4518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.775427][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 90.812035][ C1] sd 0:0:1:0: [sda] tag#5650 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.822491][ C1] sd 0:0:1:0: [sda] tag#5650 CDB: Read(6) 08 00 00 00 00 00 [ 90.829984][ C1] sd 0:0:1:0: [sda] tag#5651 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.840567][ C1] sd 0:0:1:0: [sda] tag#5651 CDB: Read(6) 08 00 00 00 00 00 [ 90.852064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!! [ 90.862051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!! [ 90.872039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!! [ 90.882051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!! [ 90.895035][ C1] sd 0:0:1:0: [sda] tag#5652 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.905553][ C1] sd 0:0:1:0: [sda] tag#5652 CDB: Read(6) 08 00 00 00 00 00 [ 90.912997][ C1] sd 0:0:1:0: [sda] tag#5653 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.923416][ C1] sd 0:0:1:0: [sda] tag#5653 CDB: Read(6) 08 00 00 00 00 00 [ 90.930803][ C1] sd 0:0:1:0: [sda] tag#5654 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.941764][ C1] sd 0:0:1:0: [sda] tag#5654 CDB: Read(6) 08 00 00 00 00 00 [ 90.949186][ C1] sd 0:0:1:0: [sda] tag#5655 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.959671][ C1] sd 0:0:1:0: [sda] tag#5655 CDB: Read(6) 08 00 00 00 00 00 [ 90.967118][ C1] sd 0:0:1:0: [sda] tag#5656 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.977572][ C1] sd 0:0:1:0: [sda] tag#5656 CDB: Read(6) 08 00 00 00 00 00 [ 90.985027][ C1] sd 0:0:1:0: [sda] tag#5657 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.995558][ C1] sd 0:0:1:0: [sda] tag#5657 CDB: Read(6) 08 00 00 00 00 00 [ 91.003361][ C1] sd 0:0:1:0: [sda] tag#5658 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 91.013842][ C1] sd 0:0:1:0: [sda] tag#5658 CDB: Read(6) 08 00 00 00 00 00 [ 91.021501][ C1] sd 0:0:1:0: [sda] tag#5659 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 91.031898][ C1] sd 0:0:1:0: [sda] tag#5659 CDB: Read(6) 08 00 00 00 00 00 [ 91.042039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 91.277204][ T4534] loop0: detected capacity change from 0 to 1024 [ 91.365665][ T4534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.466518][ T4534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.872013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 92.138384][ T4535] netlink: 'syz.2.46': attribute type 10 has an invalid length. [ 92.259164][ T4540] loop1: detected capacity change from 0 to 64 [ 92.323080][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 92.332886][ T4540] ======================================================= [ 92.332886][ T4540] WARNING: The mand mount option has been deprecated and [ 92.332886][ T4540] and is ignored by this kernel. Remove the mand [ 92.332886][ T4540] option from the mount to silence this warning. [ 92.332886][ T4540] ======================================================= [ 92.336777][ T4535] team0: Device vxcan1 is of different type [ 92.567424][ T4540] hfs: unable to locate alternate MDB [ 92.573246][ T4540] hfs: continuing without an alternate MDB [ 92.698138][ T4283] Bluetooth: hci3: unexpected cc 0x0402 length: 61 > 1 [ 93.010235][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 93.101668][ T4558] loop2: detected capacity change from 0 to 256 [ 93.163722][ T4560] loop3: detected capacity change from 0 to 1024 [ 93.245960][ T4560] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.266071][ T4558] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 93.316894][ T4557] loop4: detected capacity change from 0 to 2048 [ 93.348396][ T26] audit: type=1800 audit(1775101138.316:4): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.57" name="bus" dev="loop2" ino=1048596 res=0 errno=0 [ 93.434452][ T4560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.464367][ T4564] loop1: detected capacity change from 0 to 1024 [ 93.473291][ T4557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.637112][ T4564] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.423336][ T4564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.587946][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 94.629793][ T4578] loop0: detected capacity change from 0 to 64 [ 95.351275][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 95.361420][ T4578] device erspan0 entered promiscuous mode [ 95.415006][ T4578] device vlan2 entered promiscuous mode [ 95.579311][ T4348] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 95.600290][ T4592] loop2: detected capacity change from 0 to 2048 [ 95.632394][ T4310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.666650][ T4592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.812798][ T4310] usb 5-1: Using ep0 maxpacket: 8 [ 96.022011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 96.122011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 96.368071][ T4348] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.372050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 96.386660][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.398706][ T4310] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 96.418647][ T4310] usb 5-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 96.479924][ T4310] usb 5-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 96.479988][ T4348] usb 4-1: Product: syz [ 96.551682][ T4310] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 96.558747][ T4348] usb 4-1: Manufacturer: syz [ 96.567955][ T4348] usb 4-1: SerialNumber: syz [ 96.571949][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.581110][ T4310] usb 5-1: Product: syz [ 96.628776][ T4348] usb 4-1: config 0 descriptor?? [ 96.639733][ T4310] usb 5-1: Manufacturer: syz [ 96.652359][ T4310] usb 5-1: SerialNumber: syz [ 96.877440][ T4348] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.920749][ T4598] loop1: detected capacity change from 0 to 1024 [ 96.932472][ T4310] snd-usb-audio: probe of 5-1:65.0 failed with error -71 [ 96.970745][ T4310] usb 5-1: USB disconnect, device number 2 [ 97.000656][ T4598] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 97.077972][ T4598] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.138452][ T4598] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.176322][ T4598] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.67: Inode bitmap for bg 0 marked uninitialized [ 97.195461][ T4598] EXT4-fs (loop1): Remounting filesystem read-only [ 97.203738][ T4598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.332028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.966189][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 98.261407][ T4610] loop4: detected capacity change from 0 to 256 [ 98.350646][ T4610] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 98.480063][ T4348] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 98.528365][ T4348] usb 4-1: USB disconnect, device number 2 [ 98.871384][ T4616] loop4: detected capacity change from 0 to 1024 [ 98.876576][ T4617] Zero length message leads to an empty skb [ 98.915579][ T4616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.987492][ T4616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.201468][ T4348] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.763308][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 99.772200][ T4348] usb 1-1: Using ep0 maxpacket: 16 [ 99.781938][ T4348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.828574][ T4348] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.872980][ T4348] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.892306][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.900800][ T4348] usb 1-1: Product: syz [ 99.909297][ T4348] usb 1-1: Manufacturer: syz [ 99.914515][ T4348] usb 1-1: SerialNumber: syz [ 99.964911][ T4623] loop1: detected capacity change from 0 to 1024 [ 99.993062][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 100.028335][ T4623] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.081422][ T4623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.242858][ T4631] netlink: 76 bytes leftover after parsing attributes in process `syz.2.76'. [ 100.282998][ T4310] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.908775][ T4348] usb 1-1: 0:2 : does not exist [ 101.965921][ T4348] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 102.502363][ T4348] usb 1-1: USB disconnect, device number 5 [ 102.573982][ T4310] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.595464][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.608770][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 102.613926][ T4639] loop0: detected capacity change from 0 to 16 [ 102.683032][ T4639] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 102.707990][ T4310] usb 5-1: config 0 descriptor?? [ 102.723911][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.744802][ T4310] cp210x 5-1:0.0: cp210x converter detected [ 102.989999][ T4310] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 103.016236][ T4310] cp210x 5-1:0.0: querying part number failed [ 103.033736][ T4310] usb 5-1: cp210x converter now attached to ttyUSB0 [ 103.073071][ T4310] usb 5-1: USB disconnect, device number 3 [ 103.102919][ T4310] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 103.125604][ T4310] cp210x 5-1:0.0: device disconnected [ 103.172422][ T4648] loop4: detected capacity change from 0 to 256 [ 103.227428][ T4648] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 103.380137][ T4652] loop1: detected capacity change from 0 to 1024 [ 103.672119][ T4659] autofs4:pid:4659:autofs_fill_super: called with bogus options [ 103.713463][ T4652] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.786113][ T4661] wlan1 speed is unknown, defaulting to 1000 [ 103.792662][ T4661] wlan1 speed is unknown, defaulting to 1000 [ 103.807994][ T4661] wlan1 speed is unknown, defaulting to 1000 [ 103.829838][ T4661] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.861844][ T4661] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.934186][ T4661] wlan1 speed is unknown, defaulting to 1000 [ 103.945263][ T4661] wlan1 speed is unknown, defaulting to 1000 [ 103.956401][ T4661] wlan1 speed is unknown, defaulting to 1000 [ 103.966973][ T4661] wlan1 speed is unknown, defaulting to 1000 [ 103.977507][ T4661] wlan1 speed is unknown, defaulting to 1000 [ 104.678412][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.411863][ T4670] loop3: detected capacity change from 0 to 1024 [ 105.441349][ T4670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.509578][ T4670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.646086][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 108.107551][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 108.183452][ T4684] ubi31: attaching mtd0 [ 108.189479][ T4684] ubi31: scanning is finished [ 108.194235][ T4684] ubi31: empty MTD device detected [ 108.340153][ T4684] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 108.761463][ T4698] loop1: detected capacity change from 0 to 16 [ 108.803385][ T4698] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 111.552094][ T4730] program syz.2.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.562368][ T4730] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.651926][ T4736] binder: 4734:4736 ioctl 4018620d 0 returned -22 [ 111.820309][ T4738] loop3: detected capacity change from 0 to 1024 [ 111.917454][ T4738] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.221315][ T4741] ubi31: attaching mtd0 [ 112.226887][ T4741] ubi31: scanning is finished [ 112.980756][ T4741] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 113.070328][ T4738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.780795][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 114.388336][ T4755] loop3: detected capacity change from 0 to 16 [ 114.427648][ T4755] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 114.611349][ T4761] loop4: detected capacity change from 0 to 512 [ 114.670042][ T4763] loop0: detected capacity change from 0 to 512 [ 114.679083][ T4761] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 114.694536][ T4761] EXT4-fs error (device loop4): ext4_get_journal_inode:5756: comm syz.4.110: inode #1792: comm syz.4.110: iget: illegal inode # [ 114.754154][ T4761] EXT4-fs (loop4): Remounting filesystem read-only [ 114.778716][ T4346] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.792092][ T4761] EXT4-fs (loop4): no journal found [ 114.797522][ T4761] EXT4-fs (loop4): can't get journal size [ 114.816733][ T4765] binder: 4764:4765 ioctl 4018620d 0 returned -22 [ 114.986849][ T4761] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 115.035047][ T4761] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 115.062582][ T4761] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.703634][ T4761] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.110: Logical block already allocated [ 115.749624][ T4761] EXT4-fs (loop4): Remounting filesystem read-only [ 115.998309][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 116.038172][ T4778] usb usb8: usbfs: process 4778 (syz.2.117) did not claim interface 0 before use [ 116.243237][ T4780] loop4: detected capacity change from 0 to 2048 [ 116.342351][ T4780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.423634][ T4787] loop2: detected capacity change from 0 to 64 [ 116.436548][ T4787] hfs: unable to parse mount options [ 119.010619][ T4791] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 119.096637][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 119.169434][ T4791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.297513][ T4795] bond1: (slave veth3): Enslaving as an active interface with a down link [ 119.391888][ T4796] bond1: (slave dummy0): making interface the new active one [ 119.463546][ T4796] device dummy0 entered promiscuous mode [ 119.482619][ T4796] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 119.812383][ T4791] netlink: 14 bytes leftover after parsing attributes in process `syz.1.107'. [ 120.448984][ T4808] binder: 4807:4808 ioctl 4018620d 0 returned -22 [ 120.473671][ T4791] bond1: (slave dummy0): Releasing active interface [ 120.480587][ T4791] device dummy0 left promiscuous mode [ 121.846574][ T4822] loop3: detected capacity change from 0 to 64 [ 121.856526][ T4822] hfs: unable to parse mount options [ 123.128936][ T4833] loop3: detected capacity change from 0 to 2048 [ 123.215839][ T4833] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.086004][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 125.368107][ T4855] binder: 4853:4855 ioctl c0306201 0 returned -14 [ 125.450094][ T4858] usb usb8: usbfs: process 4858 (syz.1.142) did not claim interface 0 before use [ 125.768597][ T4863] loop1: detected capacity change from 0 to 64 [ 125.781754][ T4863] hfs: unable to parse mount options [ 127.042063][ T4315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.692124][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 127.768496][ T4315] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 127.862056][ T4315] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 127.982472][ T4315] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.013668][ T4315] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 128.023486][ T4868] syz.1.146 uses obsolete (PF_INET,SOCK_PACKET) [ 128.052145][ T4315] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 128.074355][ T4315] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.117376][ T4857] loop2: detected capacity change from 0 to 32768 [ 128.144982][ T4315] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.166659][ T4857] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.141 (4857) [ 128.297712][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.555871][ T4857] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.617747][ T4857] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 128.643608][ T4857] BTRFS info (device loop2): using free space tree [ 128.770093][ T4315] usb 4-1: usb_control_msg returned -71 [ 128.796572][ T4315] usbtmc 4-1:16.0: can't read capabilities [ 128.876969][ T4857] BTRFS error (device loop2): open_ctree failed: -12 [ 128.882324][ T4315] usb 4-1: USB disconnect, device number 3 [ 129.080313][ T4346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4346) [ 130.472604][ T4916] binder: 4914:4916 ioctl c0306201 0 returned -14 [ 131.910103][ T4930] loop4: detected capacity change from 0 to 2048 [ 132.100472][ T4932] loop3: detected capacity change from 0 to 32768 [ 132.134611][ T4932] JBD2: Ignoring recovery information on journal [ 132.207021][ T4930] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.220356][ T4932] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 132.281174][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.295034][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.305643][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.314183][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.322449][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 132.329913][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.847201][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854089][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986803][ T4940] wlan1 speed is unknown, defaulting to 1000 [ 133.773523][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 133.992183][ T4940] chnl_net:caif_netlink_parms(): no params data found [ 134.164572][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 134.402833][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 134.571269][ T4951] loop4: detected capacity change from 0 to 2048 [ 135.072800][ T4951] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.171908][ T4940] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.378271][ T4940] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.583017][ T4940] device bridge_slave_0 entered promiscuous mode [ 135.667978][ T4962] binder: 4958:4962 ioctl c0306201 0 returned -14 [ 135.810484][ T4940] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.939536][ T4940] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.237021][ T4940] device bridge_slave_1 entered promiscuous mode [ 136.442335][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 137.564855][ T4974] device syzkaller0 entered promiscuous mode [ 137.836257][ T4940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.502932][ T4940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.522706][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 138.766777][ T4568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.767499][ T4988] loop3: detected capacity change from 0 to 2048 [ 138.799493][ T4940] team0: Port device team_slave_0 added [ 138.877870][ T4988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.889157][ T4568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.980842][ T4940] team0: Port device team_slave_1 added [ 139.089251][ T5000] loop4: detected capacity change from 0 to 64 [ 139.230165][ T4568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.774633][ T5001] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 139.823875][ T5000] device erspan0 entered promiscuous mode [ 139.831295][ T5001] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 139.865714][ T5000] device vlan2 entered promiscuous mode [ 139.995601][ T5001] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.995601][ T5001] [ 140.021110][ T4568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.039166][ T5001] EXT4-fs (loop3): Total free blocks count 0 [ 140.602284][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 140.691031][ T4940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.929170][ T5001] EXT4-fs (loop3): Free/Dirty block details [ 140.945512][ T5001] EXT4-fs (loop3): free_blocks=66060288 [ 140.951348][ T5001] EXT4-fs (loop3): dirty_blocks=48 [ 140.956960][ T5001] EXT4-fs (loop3): Block reservation details [ 140.963825][ T5001] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 140.989758][ T4940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.108442][ T4940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.130398][ T4940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.152668][ T4940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.173486][ T4490] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 141.298280][ T4940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.323924][ T5003] loop1: detected capacity change from 0 to 32768 [ 141.409799][ T5003] JBD2: Ignoring recovery information on journal [ 142.363664][ T4940] device hsr_slave_0 entered promiscuous mode [ 142.371139][ T5003] JBD2: recovery failed [ 142.389979][ T5003] (syz.1.177,5003,1):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 142.459486][ T5003] (syz.1.177,5003,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 142.501365][ T5003] (syz.1.177,5003,1):ocfs2_check_volume:2489 ERROR: status = -5 [ 142.501932][ T4940] device hsr_slave_1 entered promiscuous mode [ 142.550632][ T5003] (syz.1.177,5003,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 142.671466][ T5003] (syz.1.177,5003,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 142.839305][ T4940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.852406][ T4940] Cannot create hsr debugfs directory [ 143.135683][ T5036] device syzkaller0 entered promiscuous mode [ 145.505975][ T5070] loop3: detected capacity change from 0 to 32768 [ 145.555396][ T5070] JBD2: Ignoring recovery information on journal [ 145.614417][ T5070] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.744176][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 147.305104][ T4940] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.372064][ T4940] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.387533][ T5067] loop1: detected capacity change from 0 to 32768 [ 147.500364][ T5067] JBD2: Ignoring recovery information on journal [ 147.529432][ T4940] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.660818][ T5067] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 147.671449][ T4940] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.013578][ T5102] device syzkaller0 entered promiscuous mode [ 150.032515][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 150.981315][ T5125] loop4: detected capacity change from 0 to 32768 [ 151.355037][ T5125] JBD2: Ignoring recovery information on journal [ 151.406668][ T5125] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 151.511817][ T4940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.363172][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 153.717343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.753131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.825666][ T4940] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.890190][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.934424][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.735878][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.744075][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.901052][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.966052][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.018712][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.067517][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.074689][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.125016][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.135300][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.166683][ T4568] device hsr_slave_0 left promiscuous mode [ 157.201168][ T4568] device hsr_slave_1 left promiscuous mode [ 157.796210][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.840125][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.953817][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.961395][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.027943][ T4568] device bridge_slave_1 left promiscuous mode [ 158.057212][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.138395][ T4568] device bridge_slave_0 left promiscuous mode [ 158.160294][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.272193][ T4889] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 158.400489][ T4568] device veth1_macvtap left promiscuous mode [ 158.421200][ T4568] device veth0_macvtap left promiscuous mode [ 158.451301][ T4568] device veth1_vlan left promiscuous mode [ 158.460205][ T4568] device veth0_vlan left promiscuous mode [ 158.496759][ T4889] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 158.517069][ T4889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.563019][ T4889] usb 3-1: Product: syz [ 158.569811][ T4889] usb 3-1: Manufacturer: syz [ 158.587750][ T4889] usb 3-1: SerialNumber: syz [ 158.619090][ T4889] usb 3-1: config 0 descriptor?? [ 158.843044][ T4889] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.316986][ T5196] loop1: detected capacity change from 0 to 32768 [ 159.430821][ T5196] JBD2: Ignoring recovery information on journal [ 159.481136][ T5196] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 160.257311][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 160.298416][ T4889] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 160.318938][ T4889] usb 3-1: USB disconnect, device number 3 [ 160.331422][ T5204] loop3: detected capacity change from 0 to 256 [ 160.497766][ T5204] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 160.645876][ T26] audit: type=1800 audit(1775101205.616:5): pid=5204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.219" name="bus" dev="loop3" ino=1048597 res=0 errno=0 [ 162.761935][ T4568] team0 (unregistering): Port device team_slave_1 removed [ 162.807948][ T4568] team0 (unregistering): Port device team_slave_0 removed [ 162.853822][ T4568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.898813][ T4568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.201564][ T4568] bond0 (unregistering): Released all slaves [ 163.307774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.317445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.374217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.402541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.425615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.481747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.502607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.551930][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.611214][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.465138][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.922677][ T5244] loop1: detected capacity change from 0 to 1024 [ 165.003158][ T5244] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.020513][ T5249] loop3: detected capacity change from 0 to 256 [ 165.183930][ T5250] loop2: detected capacity change from 0 to 32768 [ 165.220492][ T5249] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 165.258318][ T5250] JBD2: Ignoring recovery information on journal [ 165.271284][ T5244] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.391447][ T5250] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.392862][ T26] audit: type=1800 audit(1775101210.366:6): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="bus" dev="loop3" ino=1048598 res=0 errno=0 [ 165.995532][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 166.153299][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 166.512263][ T124] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.462390][ T124] usb 2-1: Using ep0 maxpacket: 8 [ 167.475642][ T124] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 167.524859][ T124] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.563339][ T124] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.617681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.624282][ T124] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.651561][ T124] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.662234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.672166][ T124] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.691701][ T4940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.722608][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.755760][ T5278] device syzkaller0 entered promiscuous mode [ 167.976703][ T124] usb 2-1: usb_control_msg returned -32 [ 167.992969][ T124] usbtmc 2-1:16.0: can't read capabilities [ 168.385426][ T5289] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 168.590435][ T4316] usb 2-1: USB disconnect, device number 2 [ 169.915211][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.936383][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.004508][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.027039][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.051432][ T5304] loop2: detected capacity change from 0 to 4096 [ 170.068295][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.078628][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.094836][ T4940] device veth0_vlan entered promiscuous mode [ 170.126293][ T4310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.166861][ T4940] device veth1_vlan entered promiscuous mode [ 170.199779][ T5304] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 170.229147][ T5304] ntfs3: loop2: Failed to load $Extend. [ 170.240068][ T5307] loop4: detected capacity change from 0 to 1024 [ 170.294947][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.309081][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.322186][ T4310] usb 2-1: Using ep0 maxpacket: 16 [ 170.331554][ T4310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.366643][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.382495][ T26] audit: type=1800 audit(1775101215.356:7): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.235" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 170.413662][ T4310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.441347][ T5307] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 170.457611][ T4310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.463504][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.480997][ T5307] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.520473][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.521636][ T4940] device veth0_macvtap entered promiscuous mode [ 170.536860][ T5307] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.549861][ T4310] usb 2-1: Product: syz [ 170.560758][ T5307] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.241: Inode bitmap for bg 0 marked uninitialized [ 170.570148][ T4310] usb 2-1: Manufacturer: syz [ 170.583509][ T5307] EXT4-fs (loop4): Remounting filesystem read-only [ 170.586817][ T4310] usb 2-1: SerialNumber: syz [ 170.595188][ T5307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.597630][ T4940] device veth1_macvtap entered promiscuous mode [ 170.854474][ T4310] usb 2-1: 0:2 : does not exist [ 170.885382][ T4310] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 170.903240][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.143169][ T4310] usb 2-1: USB disconnect, device number 3 [ 171.183128][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.262449][ T4422] udevd[4422]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 171.306363][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.368353][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.451360][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.512943][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.549422][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.560392][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.571248][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.583583][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 171.584817][ T4940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.601201][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.613715][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.623925][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.634625][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.646423][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.700878][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.714133][ T5326] loop2: detected capacity change from 0 to 16 [ 171.776964][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.804290][ T5326] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 171.814476][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.607533][ T4940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.616682][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.680665][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.689344][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.698374][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.708540][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.995632][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.025145][ T4940] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.045339][ T4940] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.062361][ T4940] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.089154][ T4940] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.182905][ T5334] device syzkaller0 entered promiscuous mode [ 174.104861][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.163187][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.211046][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.249525][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.273533][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.326537][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.051585][ T5373] loop1: detected capacity change from 0 to 1024 [ 175.174087][ T5373] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 175.284001][ T5372] netlink: 10 bytes leftover after parsing attributes in process `syz.5.155'. [ 175.299016][ T5373] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 175.334677][ T5373] EXT4-fs (loop1): orphan cleanup on readonly fs [ 175.377983][ T5373] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.253: Inode bitmap for bg 0 marked uninitialized [ 175.390758][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 175.410961][ T5373] EXT4-fs (loop1): Remounting filesystem read-only [ 175.452259][ T5373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.409278][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 178.337652][ T5377] device hsr_slave_1 left promiscuous mode [ 178.890219][ T5401] loop1: detected capacity change from 0 to 128 [ 179.432110][ T4895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 179.632162][ T4895] usb 2-1: Using ep0 maxpacket: 16 [ 179.640195][ T4895] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.670539][ T4895] usb 2-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 179.739790][ T4895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.772456][ T4895] usb 2-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 179.799239][ T4895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.821887][ T4895] usb 2-1: Product: syz [ 179.835591][ T4895] usb 2-1: Manufacturer: syz [ 179.853764][ T4895] usb 2-1: SerialNumber: syz [ 179.872076][ T4315] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 181.253078][ T4895] usb 2-1: unit 61 not found! [ 181.258290][ T4895] usb 2-1: unit 115 not found! [ 181.556174][ T4315] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 181.604591][ T4895] usb 2-1: USB disconnect, device number 4 [ 181.622167][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.709890][ T4315] usb 5-1: Product: syz [ 181.729271][ T4315] usb 5-1: Manufacturer: syz [ 181.750661][ T4315] usb 5-1: SerialNumber: syz [ 181.780203][ T4315] usb 5-1: config 0 descriptor?? [ 181.784503][ T5403] loop5: detected capacity change from 0 to 32768 [ 181.859020][ T5403] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 181.875583][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.901298][ T26] audit: type=1326 audit(1775101226.866:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.2.269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6e39c819 code=0x0 [ 181.933859][ T5403] JBD2: Ignoring recovery information on journal [ 182.011404][ T4315] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 182.228482][ T5403] JBD2: recovery failed [ 182.257730][ T5403] (syz.5.262,5403,1):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 182.301320][ T5403] (syz.5.262,5403,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 182.346171][ T5403] (syz.5.262,5403,1):ocfs2_check_volume:2489 ERROR: status = -5 [ 182.386842][ T5403] (syz.5.262,5403,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 182.449739][ T5403] (syz.5.262,5403,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 184.146562][ T4315] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 184.174967][ T4315] usb 5-1: USB disconnect, device number 4 [ 184.287762][ T5452] loop1: detected capacity change from 0 to 1024 [ 184.306363][ T5454] loop2: detected capacity change from 0 to 64 [ 184.343993][ T5452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.374902][ T5459] netlink: 76 bytes leftover after parsing attributes in process `syz.5.277'. [ 184.410891][ T5452] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.442363][ T5452] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 184.478356][ T5454] device erspan0 entered promiscuous mode [ 184.507421][ T5454] device vlan2 entered promiscuous mode [ 184.632168][ T5452] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 184.777638][ T5476] loop4: detected capacity change from 0 to 256 [ 186.230211][ T5476] FAT-fs (loop4): Directory bread(block 64) failed [ 186.252958][ T5476] FAT-fs (loop4): Directory bread(block 65) failed [ 186.272178][ T5476] FAT-fs (loop4): Directory bread(block 66) failed [ 186.287036][ T5476] FAT-fs (loop4): Directory bread(block 67) failed [ 186.389748][ T5476] FAT-fs (loop4): Directory bread(block 68) failed [ 186.417612][ T5476] FAT-fs (loop4): Directory bread(block 69) failed [ 186.438488][ T5476] FAT-fs (loop4): Directory bread(block 70) failed [ 186.476905][ T5476] FAT-fs (loop4): Directory bread(block 71) failed [ 186.514561][ T5476] FAT-fs (loop4): Directory bread(block 72) failed [ 186.547802][ T5476] FAT-fs (loop4): Directory bread(block 73) failed [ 186.631921][ T5480] loop5: detected capacity change from 0 to 40427 [ 186.662692][ T5480] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 186.909716][ T26] audit: type=1800 audit(1775101231.876:9): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.280" name="file1" dev="loop4" ino=1048602 res=0 errno=0 [ 187.467654][ T5476] syz.4.280: attempt to access beyond end of device [ 187.467654][ T5476] loop4: rw=2049, sector=1264, nr_sectors = 92 limit=256 [ 187.597943][ T5494] syz.4.280: attempt to access beyond end of device [ 187.597943][ T5494] loop4: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 187.622872][ T5488] netlink: 'syz.2.285': attribute type 12 has an invalid length. [ 188.316025][ T4411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.523185][ T4381] kworker/u4:11: attempt to access beyond end of device [ 188.523185][ T4381] loop4: rw=1, sector=1232, nr_sectors = 32 limit=256 [ 188.725149][ T4411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.984665][ T4411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.149959][ T4411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.202235][ T7] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 189.406832][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.440307][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.440338][ T7] usb 5-1: Product: syz [ 189.440353][ T7] usb 5-1: Manufacturer: syz [ 189.440366][ T7] usb 5-1: SerialNumber: syz [ 189.465332][ T7] usb 5-1: config 0 descriptor?? [ 189.672916][ T7] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.099530][ T5505] loop2: detected capacity change from 0 to 32768 [ 190.115079][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.128788][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.145529][ T5505] XFS: attr2 mount option is deprecated. [ 190.146628][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.159862][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.167674][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.175149][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.275785][ T26] audit: type=1326 audit(1775101235.246:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.3.293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac3099c819 code=0x0 [ 190.353055][ T5519] wlan1 speed is unknown, defaulting to 1000 [ 190.359985][ T5505] XFS (loop2): Mounting V5 Filesystem [ 190.480788][ T5505] XFS (loop2): Ending clean mount [ 190.593255][ T5505] XFS (loop2): Quotacheck needed: Please wait. [ 190.729875][ T5505] XFS (loop2): Quotacheck: Done. [ 191.004959][ T4272] XFS (loop2): Unmounting Filesystem [ 191.106896][ T7] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 191.129108][ T7] usb 5-1: USB disconnect, device number 5 [ 191.242171][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 191.248262][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 191.254820][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 191.401775][ T5519] chnl_net:caif_netlink_parms(): no params data found [ 192.234133][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 193.271346][ T4411] device hsr_slave_0 left promiscuous mode [ 193.833122][ T4411] device hsr_slave_1 left promiscuous mode [ 193.880440][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.901525][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.939364][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.997755][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.021208][ T4411] device bridge_slave_1 left promiscuous mode [ 194.050853][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.125019][ T4411] device bridge_slave_0 left promiscuous mode [ 194.131324][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.284042][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 194.294208][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.294261][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345834][ T4411] device veth1_macvtap left promiscuous mode [ 194.345933][ T4411] device veth0_macvtap left promiscuous mode [ 194.346057][ T4411] device veth1_vlan left promiscuous mode [ 194.346146][ T4411] device veth0_vlan left promiscuous mode [ 194.438384][ T5585] loop2: detected capacity change from 0 to 2048 [ 194.506918][ T5585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.713409][ T5595] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 194.714309][ T5595] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 194.714408][ T5595] EXT4-fs (loop2): This should not happen!! Data will be lost [ 194.714408][ T5595] [ 194.714456][ T5595] EXT4-fs (loop2): Total free blocks count 0 [ 194.714498][ T5595] EXT4-fs (loop2): Free/Dirty block details [ 194.714544][ T5595] EXT4-fs (loop2): free_blocks=66060288 [ 194.714588][ T5595] EXT4-fs (loop2): dirty_blocks=48 [ 194.714630][ T5595] EXT4-fs (loop2): Block reservation details [ 194.714673][ T5595] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 194.954020][ T5141] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 195.234672][ T4411] bond1 (unregistering): (slave veth3): Releasing active interface [ 195.635339][ T4411] bond1 (unregistering): Released all slaves [ 195.951084][ T5610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.307'. [ 196.372372][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 196.691500][ T5612] loop5: detected capacity change from 0 to 1024 [ 196.770056][ T5612] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 196.836188][ T5612] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 196.864062][ T5612] EXT4-fs (loop5): orphan cleanup on readonly fs [ 196.903167][ T5612] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.308: Inode bitmap for bg 0 marked uninitialized [ 196.950396][ T5612] EXT4-fs (loop5): Remounting filesystem read-only [ 196.958811][ T5612] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 197.852493][ T4940] EXT4-fs (loop5): unmounting filesystem. [ 198.453057][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 198.623878][ T4411] team0 (unregistering): Port device team_slave_1 removed [ 198.690078][ T4411] team0 (unregistering): Port device team_slave_0 removed [ 198.771550][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.861757][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.132197][ T4310] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 199.193342][ T4411] bond0 (unregistering): Released all slaves [ 199.324113][ T4310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.340737][ T4310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.353216][ T4310] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 199.384026][ T5519] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.391177][ T5519] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.395442][ T4310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.406800][ T5519] device bridge_slave_0 entered promiscuous mode [ 199.435412][ T5519] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.449151][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.461020][ T4310] usb 6-1: config 0 descriptor?? [ 199.467944][ T5519] device bridge_slave_1 entered promiscuous mode [ 199.658723][ T5519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.720654][ T5519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.868569][ T5639] binder: 5635:5639 ioctl 4018620d 0 returned -22 [ 199.916626][ T4310] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 199.938801][ T5641] binder: 5635:5641 ioctl c0306201 0 returned -14 [ 199.948965][ T5641] netlink: 128 bytes leftover after parsing attributes in process `syz.4.315'. [ 199.958847][ T5641] netlink: 56 bytes leftover after parsing attributes in process `syz.4.315'. [ 200.049518][ T5519] team0: Port device team_slave_0 added [ 200.312338][ T4314] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 200.332877][ T5519] team0: Port device team_slave_1 added [ 200.512663][ T4314] usb 4-1: device descriptor read/64, error -71 [ 200.625319][ T4310] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 200.704050][ T4310] cp2112 0003:10C4:EA90.0001: error requesting version [ 200.721086][ T5519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.728725][ T4310] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 200.739341][ T4310] usb 6-1: USB disconnect, device number 2 [ 200.752119][ T5519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.779362][ T5519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.792529][ T5519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.799630][ T5519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.827552][ T5519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.833245][ T4314] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.011565][ T5519] device hsr_slave_0 entered promiscuous mode [ 201.036138][ T5519] device hsr_slave_1 entered promiscuous mode [ 201.062418][ T4314] usb 4-1: device descriptor read/64, error -71 [ 201.139038][ T5519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.160574][ T5519] Cannot create hsr debugfs directory [ 201.184943][ T4314] usb usb4-port1: attempt power cycle [ 201.189834][ T5649] netlink: 76 bytes leftover after parsing attributes in process `syz.4.317'. [ 201.230954][ T5643] fido_id[5643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 201.254041][ T5655] loop2: detected capacity change from 0 to 64 [ 201.364904][ T5655] device vlan2 entered promiscuous mode [ 201.625702][ T4314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 201.682954][ T4314] usb 4-1: device descriptor read/8, error -71 [ 201.952379][ T4314] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 201.995186][ T4314] usb 4-1: device descriptor read/8, error -71 [ 202.337239][ T4314] usb usb4-port1: unable to enumerate USB device [ 202.679552][ T5519] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.726208][ T5671] loop2: detected capacity change from 0 to 2048 [ 202.738699][ T5519] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.818173][ T5519] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.831360][ T5671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 202.845140][ T5519] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.664392][ T5682] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 203.679561][ T5682] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 203.692618][ T5519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.736039][ T5682] EXT4-fs (loop2): This should not happen!! Data will be lost [ 203.736039][ T5682] [ 203.756142][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.769983][ T5682] EXT4-fs (loop2): Total free blocks count 0 [ 203.780324][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.889779][ T5519] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.913628][ T5682] EXT4-fs (loop2): Free/Dirty block details [ 203.921690][ T5682] EXT4-fs (loop2): free_blocks=66060288 [ 203.964458][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.988401][ T5682] EXT4-fs (loop2): dirty_blocks=48 [ 203.996568][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.062603][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.069987][ T4490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.092250][ T5682] EXT4-fs (loop2): Block reservation details [ 204.108163][ T5682] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 204.186156][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.249599][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.294498][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.388820][ T5701] binder: 5698:5701 ioctl 4018620d 0 returned -22 [ 204.453046][ T5702] binder: 5698:5702 ioctl c0306201 0 returned -14 [ 204.462643][ T5702] netlink: 128 bytes leftover after parsing attributes in process `syz.4.326'. [ 204.472979][ T5702] netlink: 56 bytes leftover after parsing attributes in process `syz.4.326'. [ 205.176890][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.184173][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.203206][ T4377] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 205.248749][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.310381][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.407005][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.431824][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.583284][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.632067][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 205.665954][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.726932][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.810978][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.832131][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 205.833287][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.855184][ T5519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.869030][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.931334][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.981865][ T5712] netlink: 76 bytes leftover after parsing attributes in process `syz.4.330'. [ 206.229115][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.232426][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.238095][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.606874][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.732048][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.740126][ T7] usb 4-1: Product: syz [ 206.766460][ T7] usb 4-1: Manufacturer: syz [ 206.787679][ T7] usb 4-1: SerialNumber: syz [ 207.091513][ T7] usb 4-1: 0:2 : does not exist [ 207.118574][ T7] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 207.167181][ T7] usb 4-1: USB disconnect, device number 8 [ 207.222243][ T4889] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.423039][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.442290][ T4889] usb 5-1: Using ep0 maxpacket: 8 [ 207.456810][ T4889] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 207.471589][ T4889] usb 5-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 207.512603][ T4889] usb 5-1: config 65 has 2 interfaces, different from the descriptor's value: 73 [ 207.537543][ T4889] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 207.554714][ T4889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.573156][ T4889] usb 5-1: Product: syz [ 207.577515][ T4889] usb 5-1: Manufacturer: syz [ 207.590402][ T4889] usb 5-1: SerialNumber: syz [ 207.619613][ T5738] device syzkaller0 entered promiscuous mode [ 207.840840][ T4889] snd-usb-audio: probe of 5-1:65.0 failed with error -71 [ 207.907286][ T4889] usb 5-1: USB disconnect, device number 6 [ 208.071909][ T5754] binder: 5751:5754 ioctl 4018620d 0 returned -22 [ 208.137789][ T5755] binder: 5751:5755 ioctl c0306201 0 returned -14 [ 208.150832][ T5755] netlink: 128 bytes leftover after parsing attributes in process `syz.2.339'. [ 208.160132][ T5755] netlink: 56 bytes leftover after parsing attributes in process `syz.2.339'. [ 208.969229][ T5762] loop3: detected capacity change from 0 to 2048 [ 209.020032][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.044456][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.082846][ T5519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.499766][ T5762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.708161][ T5791] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 212.122655][ T5791] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 212.264993][ T5791] EXT4-fs (loop3): This should not happen!! Data will be lost [ 212.264993][ T5791] [ 212.722424][ T5791] EXT4-fs (loop3): Total free blocks count 0 [ 213.117493][ T5791] EXT4-fs (loop3): Free/Dirty block details [ 213.142062][ T5791] EXT4-fs (loop3): free_blocks=66060288 [ 213.168119][ T5791] EXT4-fs (loop3): dirty_blocks=48 [ 213.194942][ T5791] EXT4-fs (loop3): Block reservation details [ 213.231561][ T5791] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 213.386675][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 213.778742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.805620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.812161][ T4315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.272250][ T4315] usb 5-1: Using ep0 maxpacket: 8 [ 214.288169][ T4315] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 214.421034][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.449018][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.459359][ T4315] usb 5-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 214.488718][ T4315] usb 5-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 214.508996][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.522664][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.536290][ T4315] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 214.559050][ T5519] device veth0_vlan entered promiscuous mode [ 214.573437][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.591675][ T4315] usb 5-1: Product: syz [ 214.598305][ T4315] usb 5-1: Manufacturer: syz [ 214.612031][ T4315] usb 5-1: SerialNumber: syz [ 214.727706][ T5519] device veth1_vlan entered promiscuous mode [ 215.274198][ T4315] snd-usb-audio: probe of 5-1:65.0 failed with error -71 [ 215.291438][ T5519] device veth0_macvtap entered promiscuous mode [ 215.337656][ T4315] usb 5-1: USB disconnect, device number 7 [ 215.390756][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.422156][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.466327][ T5519] device veth1_macvtap entered promiscuous mode [ 215.484445][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.496484][ T5849] loop2: detected capacity change from 0 to 16 [ 215.503507][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.527411][ T5849] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 215.592141][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.657445][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.699830][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.745011][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.786456][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.828455][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.849809][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.875231][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.914498][ T5519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.962670][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.002756][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.486295][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.498190][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.508983][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.520266][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.531238][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.566248][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.614256][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.662334][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.687230][ T5519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.712458][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.750422][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.778943][ T5519] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.797893][ T5519] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.816755][ T5519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.829697][ T5519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.623487][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.642023][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.782966][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.855362][ T5884] binder: 5882:5884 ioctl c0306201 0 returned -14 [ 217.915304][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.955548][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.010126][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.768753][ T5895] loop6: detected capacity change from 0 to 512 [ 219.200205][ T5895] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 219.404729][ T5904] loop3: detected capacity change from 0 to 2048 [ 219.478004][ T5904] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.533293][ T4893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 219.945816][ T5909] loop2: detected capacity change from 0 to 2048 [ 220.223261][ T5909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.062096][ T4893] usb 6-1: Using ep0 maxpacket: 8 [ 221.584319][ T5914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.971029][ T4893] usb 6-1: device descriptor read/all, error -71 [ 223.171480][ T5519] EXT4-fs (loop6): unmounting filesystem. [ 223.371274][ T5918] binder: 5916:5918 ioctl 4018620d 0 returned -22 [ 223.479601][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 223.540207][ T5922] binder: 5916:5922 ioctl c0306201 0 returned -14 [ 223.549787][ T5922] netlink: 128 bytes leftover after parsing attributes in process `syz.4.370'. [ 224.862145][ T4348] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 225.052744][ T4348] usb 7-1: Using ep0 maxpacket: 16 [ 225.090711][ T4348] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 225.222148][ T4348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.235351][ T4348] usb 7-1: Product: syz [ 225.239604][ T4348] usb 7-1: Manufacturer: syz [ 225.248894][ T4348] usb 7-1: SerialNumber: syz [ 225.305212][ T4348] usb 7-1: config 0 descriptor?? [ 225.326369][ T5940] binder: 5934:5940 ioctl c0306201 0 returned -14 [ 225.415271][ T5949] loop5: detected capacity change from 0 to 64 [ 225.654308][ T5949] device erspan0 entered promiscuous mode [ 225.732775][ T5949] device vlan2 entered promiscuous mode [ 226.403603][ T124] usb 7-1: USB disconnect, device number 2 [ 227.350840][ T5971] loop3: detected capacity change from 0 to 2048 [ 227.486541][ T5971] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.542190][ T4893] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 227.585388][ T5980] binder: 5977:5980 ioctl 4018620d 0 returned -22 [ 227.652512][ T5981] binder: 5977:5981 ioctl c0306201 0 returned -14 [ 227.661375][ T5981] netlink: 128 bytes leftover after parsing attributes in process `syz.2.385'. [ 228.482022][ T4893] usb 5-1: Using ep0 maxpacket: 8 [ 228.491744][ T4893] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 228.500937][ T4893] usb 5-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 228.510612][ T4893] usb 5-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 228.512317][ T5984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.282353][ T4893] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 230.606376][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 230.676482][ T4893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.708927][ T4893] usb 5-1: Product: syz [ 230.718747][ T4893] usb 5-1: Manufacturer: syz [ 230.723515][ T4893] usb 5-1: SerialNumber: syz [ 231.068253][ T4893] usb 5-1: can't set config #65, error -71 [ 231.086667][ T4893] usb 5-1: USB disconnect, device number 8 [ 231.872055][ T4348] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 232.049999][ T6025] loop5: detected capacity change from 0 to 64 [ 232.072043][ T4348] usb 5-1: Using ep0 maxpacket: 8 [ 232.079383][ T4348] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 232.121801][ T4348] usb 5-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 232.181984][ T4348] usb 5-1: config 65 has 0 interfaces, different from the descriptor's value: 73 [ 232.234922][ T4348] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 232.295050][ T4348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.325691][ T4348] usb 5-1: Product: syz [ 232.329923][ T4348] usb 5-1: Manufacturer: syz [ 232.356094][ T4348] usb 5-1: SerialNumber: syz [ 232.476617][ T6032] loop2: detected capacity change from 0 to 2048 [ 232.612338][ T4348] usb 5-1: USB disconnect, device number 9 [ 232.647172][ T6032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.393034][ T4314] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 234.732265][ T6051] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.772132][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 234.785324][ T4314] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 234.824606][ T4314] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 234.864606][ T4314] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 234.895440][ T4314] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 234.907257][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.915601][ T4314] usb 4-1: Product: syz [ 234.922285][ T4314] usb 4-1: Manufacturer: syz [ 234.927577][ T4314] usb 4-1: SerialNumber: syz [ 235.387603][ T6052] binder: 6049:6052 ioctl 4018620d 0 returned -22 [ 235.461619][ T6054] binder: 6049:6054 ioctl c0306201 0 returned -14 [ 235.473723][ T6054] netlink: 120 bytes leftover after parsing attributes in process `syz.6.403'. [ 235.504730][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 235.854880][ T4314] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 235.987302][ T4314] usb 4-1: USB disconnect, device number 9 [ 237.210352][ T6085] loop2: detected capacity change from 0 to 64 [ 237.222260][ T6085] hfs: unable to parse mount options [ 237.362180][ T4895] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 237.615458][ T4895] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 239.107492][ T4895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.122401][ T6090] loop2: detected capacity change from 0 to 2048 [ 239.180375][ T4895] usb 7-1: Product: syz [ 239.210071][ T4895] usb 7-1: Manufacturer: syz [ 239.258332][ T4895] usb 7-1: SerialNumber: syz [ 239.287082][ T6090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 239.290203][ T4895] usb 7-1: config 0 descriptor?? [ 239.461070][ T6101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.598465][ T4895] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 239.632893][ T4310] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.852356][ T4310] usb 4-1: Using ep0 maxpacket: 8 [ 239.886015][ T4310] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 240.044937][ T4310] usb 4-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 240.175660][ T4310] usb 4-1: config 65 has 1 interface, different from the descriptor's value: 73 [ 240.194015][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 240.229686][ T4310] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 240.279763][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.323155][ T4310] usb 4-1: Product: syz [ 240.327386][ T4310] usb 4-1: Manufacturer: syz [ 240.363073][ T4310] usb 4-1: SerialNumber: syz [ 240.618279][ T4310] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 240.763679][ T4310] usb 4-1: USB disconnect, device number 10 [ 241.019274][ T6116] binder: 6111:6116 ioctl 4018620d 0 returned -22 [ 241.085221][ T6117] binder: 6111:6117 ioctl c0306201 0 returned -14 [ 241.096774][ T6117] netlink: 120 bytes leftover after parsing attributes in process `syz.5.417'. [ 241.273361][ T4895] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 241.791586][ T4895] usb 7-1: USB disconnect, device number 3 [ 242.342266][ T4895] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 242.542175][ T4895] usb 7-1: Using ep0 maxpacket: 8 [ 242.559517][ T4895] usb 7-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 242.569003][ T4895] usb 7-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 242.579564][ T4895] usb 7-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 242.607087][ T4895] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 242.642966][ T4895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.689236][ T4895] usb 7-1: Product: syz [ 242.710645][ T4895] usb 7-1: Manufacturer: syz [ 242.722127][ T4895] usb 7-1: SerialNumber: syz [ 242.989792][ T4895] snd-usb-audio: probe of 7-1:65.0 failed with error -71 [ 243.017551][ T4895] usb 7-1: USB disconnect, device number 4 [ 243.377533][ T6138] loop3: detected capacity change from 0 to 1024 [ 243.705615][ T6138] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.211316][ T6138] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 246.379638][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 246.548710][ T6156] loop6: detected capacity change from 0 to 32768 [ 246.599888][ T6160] device syzkaller0 entered promiscuous mode [ 246.626249][ T6156] JBD2: Ignoring recovery information on journal [ 246.676304][ T6156] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 246.849892][ T6165] loop3: detected capacity change from 0 to 1024 [ 247.332319][ T6165] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256). [ 247.408403][ T6165] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 247.488854][ T6165] EXT4-fs (loop3): mount failed [ 247.503615][ T5519] ocfs2: Unmounting device (7,6) on (node local) [ 247.859084][ T6176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.912087][ T4891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.222118][ T4891] usb 5-1: Using ep0 maxpacket: 8 [ 248.238176][ T4891] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 248.247615][ T4891] usb 5-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 248.384329][ T6178] binder: 6169:6178 ioctl 4018620d 0 returned -22 [ 248.421439][ T4891] usb 5-1: config 65 has 1 interface, different from the descriptor's value: 73 [ 248.454525][ T6179] binder: 6169:6179 ioctl c0306201 0 returned -14 [ 248.463976][ T6179] netlink: 120 bytes leftover after parsing attributes in process `syz.2.431'. [ 248.649352][ T4891] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 248.783078][ T4891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.874773][ T4891] usb 5-1: Product: syz [ 248.879607][ T4891] usb 5-1: Manufacturer: syz [ 248.928687][ T4891] usb 5-1: SerialNumber: syz [ 249.267387][ T4891] usb 5-1: USB disconnect, device number 10 [ 252.202582][ T124] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 252.297210][ T6213] loop6: detected capacity change from 0 to 1024 [ 252.341240][ T6213] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.392103][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 252.399741][ T124] usb 3-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 252.446977][ T124] usb 3-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 252.521211][ T6213] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 252.548050][ T124] usb 3-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 252.663660][ T124] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 252.850773][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.920545][ T124] usb 3-1: Product: syz [ 252.961887][ T124] usb 3-1: Manufacturer: syz [ 252.984833][ T124] usb 3-1: SerialNumber: syz [ 253.006446][ T6221] device syzkaller0 entered promiscuous mode [ 253.243377][ T5519] EXT4-fs (loop6): unmounting filesystem. [ 253.252306][ T124] snd-usb-audio: probe of 3-1:65.0 failed with error -71 [ 253.307302][ T124] usb 3-1: USB disconnect, device number 4 [ 253.492810][ T6226] loop5: detected capacity change from 0 to 1024 [ 253.998513][ T6226] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256). [ 254.004872][ T6226] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 254.148517][ T6226] EXT4-fs (loop5): mount failed [ 254.267692][ T6232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.017617][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 255.731393][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.738744][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.102571][ T6245] device syzkaller0 entered promiscuous mode [ 257.597009][ T6269] loop2: detected capacity change from 0 to 1024 [ 257.597860][ T6267] loop4: detected capacity change from 0 to 2048 [ 257.698653][ T6269] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 257.754628][ T6269] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 257.783114][ T6272] device syzkaller0 entered promiscuous mode [ 257.790297][ T6267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 257.802203][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 257.834299][ T6269] EXT4-fs (loop2): orphan cleanup on readonly fs [ 258.499520][ T6269] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.452: Inode bitmap for bg 0 marked uninitialized [ 258.552316][ T6269] EXT4-fs (loop2): Remounting filesystem read-only [ 258.559102][ T6269] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.955813][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 259.083269][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 259.083842][ T6283] loop3: detected capacity change from 0 to 32768 [ 259.260130][ T6283] JBD2: Ignoring recovery information on journal [ 259.442132][ T4316] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 259.522503][ T6283] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 259.773888][ T4316] usb 6-1: Using ep0 maxpacket: 8 [ 259.845792][ T4316] usb 6-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 260.137645][ T4316] usb 6-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 260.255571][ T4316] usb 6-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 260.266203][ T6297] loop4: detected capacity change from 0 to 1024 [ 260.684495][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 260.739476][ T6297] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256). [ 260.758116][ T4316] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 260.792145][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.800204][ T4316] usb 6-1: Product: syz [ 260.805824][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 260.822113][ T6297] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 261.187729][ T4316] usb 6-1: Manufacturer: syz [ 261.298463][ T4316] usb 6-1: SerialNumber: syz [ 261.302385][ T6297] EXT4-fs (loop4): mount failed [ 261.609700][ T6312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.649492][ T4316] snd-usb-audio: probe of 6-1:65.0 failed with error -71 [ 261.732759][ T4316] usb 6-1: USB disconnect, device number 5 [ 263.624330][ T6342] loop6: detected capacity change from 0 to 2048 [ 263.667707][ T6343] ================================================================== [ 263.675808][ T6343] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 263.684397][ T6343] Read of size 2 at addr ffff8880590379fb by task syz.5.469/6343 [ 263.692107][ T6343] [ 263.694425][ T6343] CPU: 0 PID: 6343 Comm: syz.5.469 Not tainted syzkaller #0 [ 263.702050][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.712244][ T6343] Call Trace: [ 263.715541][ T6343] [ 263.718475][ T6343] dump_stack_lvl+0x188/0x24e [ 263.723181][ T6343] ? __lock_acquire+0x7d10/0x7d10 [ 263.728210][ T6343] ? show_regs_print_info+0x12/0x12 [ 263.733411][ T6343] ? load_image+0x400/0x400 [ 263.737930][ T6343] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 263.743384][ T6343] ? __virt_addr_valid+0x188/0x540 [ 263.748503][ T6343] ? __virt_addr_valid+0x465/0x540 [ 263.753633][ T6343] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 263.759868][ T6343] print_report+0xa8/0x210 [ 263.764369][ T6343] kasan_report+0x10b/0x140 [ 263.768992][ T6343] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 263.775273][ T6343] ieee80211_monitor_select_queue+0x23a/0x240 [ 263.781432][ T6343] ? ieee80211_activate_links_work+0x60/0x60 [ 263.787410][ T6343] netdev_core_pick_tx+0x118/0x340 [ 263.792541][ T6343] __dev_queue_xmit+0xb19/0x37c0 [ 263.797484][ T6343] ? __dev_queue_xmit+0x26b/0x37c0 [ 263.802681][ T6343] ? netdev_core_pick_tx+0x340/0x340 [ 263.807963][ T6343] ? virtio_net_hdr_to_skb+0xac2/0x1290 [ 263.813508][ T6343] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 263.819676][ T6343] ? skb_copy_datagram_from_iter+0x5e0/0x690 [ 263.825658][ T6343] packet_sendmsg+0x3bc3/0x4e60 [ 263.830509][ T6343] ? __schedule+0x119d/0x40e0 [ 263.835187][ T6343] ? __might_sleep+0xd0/0xd0 [ 263.839774][ T6343] ? verify_lock_unused+0x140/0x140 [ 263.844971][ T6343] ? aa_sk_perm+0x81f/0x950 [ 263.849490][ T6343] ? packet_getsockopt+0x9a0/0x9a0 [ 263.854600][ T6343] ? aa_sock_msg_perm+0x94/0x150 [ 263.859554][ T6343] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 263.864837][ T6343] ? security_socket_sendmsg+0x7c/0xa0 [ 263.870295][ T6343] ? packet_getsockopt+0x9a0/0x9a0 [ 263.875404][ T6343] ____sys_sendmsg+0x5be/0x970 [ 263.880190][ T6343] ? __sys_sendmsg_sock+0x30/0x30 [ 263.885225][ T6343] ? __import_iovec+0x315/0x500 [ 263.890171][ T6343] ? import_iovec+0x6f/0xa0 [ 263.894776][ T6343] ___sys_sendmsg+0x2a2/0x360 [ 263.899450][ T6343] ? try_to_wake_up+0x6ae/0x1080 [ 263.904403][ T6343] ? __sys_sendmsg+0x290/0x290 [ 263.909177][ T6343] __se_sys_sendmsg+0x1bb/0x2a0 [ 263.914026][ T6343] ? __x64_sys_sendmsg+0x80/0x80 [ 263.918978][ T6343] ? lockdep_hardirqs_on+0x94/0x140 [ 263.924183][ T6343] do_syscall_64+0x4c/0xa0 [ 263.928600][ T6343] ? clear_bhb_loop+0x60/0xb0 [ 263.933272][ T6343] ? clear_bhb_loop+0x60/0xb0 [ 263.937947][ T6343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.943836][ T6343] RIP: 0033:0x7f974979c819 [ 263.948246][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.967906][ T6343] RSP: 002b:00007f974a6bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.976330][ T6343] RAX: ffffffffffffffda RBX: 00007f9749a15fa0 RCX: 00007f974979c819 [ 263.984381][ T6343] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 263.992355][ T6343] RBP: 00007f9749832c91 R08: 0000000000000000 R09: 0000000000000000 [ 264.000319][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.008316][ T6343] R13: 00007f9749a16038 R14: 00007f9749a15fa0 R15: 00007ffd87de8b48 [ 264.016298][ T6343] [ 264.019319][ T6343] [ 264.021643][ T6343] The buggy address belongs to the physical page: [ 264.028077][ T6343] page:ffffea0001640dc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59037 [ 264.038597][ T6343] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 264.045734][ T6343] raw: 00fff00000000000 ffffea0000a5f748 ffffea0001f0dd88 0000000000000000 [ 264.054347][ T6343] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 264.062930][ T6343] page dumped because: kasan: bad access detected [ 264.069342][ T6343] page_owner tracks the page as freed [ 264.074715][ T6343] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 259493890642, free_ts 261482570744 [ 264.092467][ T6343] post_alloc_hook+0x173/0x1a0 [ 264.097319][ T6343] get_page_from_freelist+0x1a1e/0x1ab0 [ 264.102864][ T6343] __alloc_pages+0x1ec/0x4f0 [ 264.107470][ T6343] __alloc_pages_bulk+0x49a/0x920 [ 264.112512][ T6343] __vmalloc_node_range+0x70f/0x13b0 [ 264.117810][ T6343] dup_task_struct+0x3d3/0x6b0 [ 264.122586][ T6343] copy_process+0x5fa/0x4030 [ 264.127171][ T6343] kernel_clone+0x24b/0x900 [ 264.131667][ T6343] kernel_thread+0x118/0x180 [ 264.136253][ T6343] kthreadd+0x555/0x700 [ 264.140408][ T6343] ret_from_fork+0x1f/0x30 [ 264.144824][ T6343] page last free stack trace: [ 264.149487][ T6343] free_unref_page_prepare+0x8b4/0x9a0 [ 264.154972][ T6343] free_unref_page+0x2e/0x3f0 [ 264.159681][ T6343] __vunmap+0x856/0xa00 [ 264.163854][ T6343] free_work+0x56/0x80 [ 264.167917][ T6343] process_one_work+0x8a2/0x1160 [ 264.172851][ T6343] worker_thread+0xaa2/0x1270 [ 264.177529][ T6343] kthread+0x29d/0x330 [ 264.181590][ T6343] ret_from_fork+0x1f/0x30 [ 264.186087][ T6343] [ 264.188406][ T6343] Memory state around the buggy address: [ 264.194139][ T6343] ffff888059037880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 264.202290][ T6343] ffff888059037900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 264.210338][ T6343] >ffff888059037980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 264.218407][ T6343] ^ [ 264.226390][ T6343] ffff888059037a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 264.234467][ T6343] ffff888059037a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 264.242534][ T6343] ================================================================== [ 264.250834][ T6343] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 264.258019][ T6343] CPU: 0 PID: 6343 Comm: syz.5.469 Not tainted syzkaller #0 [ 264.265346][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.275396][ T6343] Call Trace: [ 264.278670][ T6343] [ 264.281597][ T6343] dump_stack_lvl+0x188/0x24e [ 264.286278][ T6343] ? memcpy+0x3c/0x60 [ 264.290390][ T6343] ? show_regs_print_info+0x12/0x12 [ 264.295621][ T6343] ? load_image+0x400/0x400 [ 264.300131][ T6343] panic+0x2e5/0x730 [ 264.304054][ T6343] ? asm_common_interrupt+0x22/0x40 [ 264.309281][ T6343] ? bpf_jit_dump+0xd0/0xd0 [ 264.313787][ T6343] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 264.319695][ T6343] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 264.325614][ T6343] ? _raw_spin_unlock+0x40/0x40 [ 264.330462][ T6343] check_panic_on_warn+0x80/0xa0 [ 264.335421][ T6343] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 264.341666][ T6343] end_report+0x66/0x110 [ 264.345908][ T6343] kasan_report+0x118/0x140 [ 264.350417][ T6343] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 264.356809][ T6343] ieee80211_monitor_select_queue+0x23a/0x240 [ 264.362897][ T6343] ? ieee80211_activate_links_work+0x60/0x60 [ 264.368920][ T6343] netdev_core_pick_tx+0x118/0x340 [ 264.374036][ T6343] __dev_queue_xmit+0xb19/0x37c0 [ 264.379061][ T6343] ? __dev_queue_xmit+0x26b/0x37c0 [ 264.384181][ T6343] ? netdev_core_pick_tx+0x340/0x340 [ 264.389569][ T6343] ? virtio_net_hdr_to_skb+0xac2/0x1290 [ 264.395118][ T6343] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 264.401450][ T6343] ? skb_copy_datagram_from_iter+0x5e0/0x690 [ 264.407441][ T6343] packet_sendmsg+0x3bc3/0x4e60 [ 264.412300][ T6343] ? __schedule+0x119d/0x40e0 [ 264.417066][ T6343] ? __might_sleep+0xd0/0xd0 [ 264.421756][ T6343] ? verify_lock_unused+0x140/0x140 [ 264.426987][ T6343] ? aa_sk_perm+0x81f/0x950 [ 264.431498][ T6343] ? packet_getsockopt+0x9a0/0x9a0 [ 264.436611][ T6343] ? aa_sock_msg_perm+0x94/0x150 [ 264.441581][ T6343] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 264.446899][ T6343] ? security_socket_sendmsg+0x7c/0xa0 [ 264.452386][ T6343] ? packet_getsockopt+0x9a0/0x9a0 [ 264.457529][ T6343] ____sys_sendmsg+0x5be/0x970 [ 264.462355][ T6343] ? __sys_sendmsg_sock+0x30/0x30 [ 264.467408][ T6343] ? __import_iovec+0x315/0x500 [ 264.472282][ T6343] ? import_iovec+0x6f/0xa0 [ 264.476791][ T6343] ___sys_sendmsg+0x2a2/0x360 [ 264.481471][ T6343] ? try_to_wake_up+0x6ae/0x1080 [ 264.486414][ T6343] ? __sys_sendmsg+0x290/0x290 [ 264.491197][ T6343] __se_sys_sendmsg+0x1bb/0x2a0 [ 264.496074][ T6343] ? __x64_sys_sendmsg+0x80/0x80 [ 264.501015][ T6343] ? lockdep_hardirqs_on+0x94/0x140 [ 264.506234][ T6343] do_syscall_64+0x4c/0xa0 [ 264.510651][ T6343] ? clear_bhb_loop+0x60/0xb0 [ 264.515413][ T6343] ? clear_bhb_loop+0x60/0xb0 [ 264.520181][ T6343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.526091][ T6343] RIP: 0033:0x7f974979c819 [ 264.530513][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.550307][ T6343] RSP: 002b:00007f974a6bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.558725][ T6343] RAX: ffffffffffffffda RBX: 00007f9749a15fa0 RCX: 00007f974979c819 [ 264.566693][ T6343] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 264.574674][ T6343] RBP: 00007f9749832c91 R08: 0000000000000000 R09: 0000000000000000 [ 264.582646][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.590608][ T6343] R13: 00007f9749a16038 R14: 00007f9749a15fa0 R15: 00007ffd87de8b48 [ 264.598576][ T6343] [ 264.601722][ T6343] Kernel Offset: disabled [ 264.606067][ T6343] Rebooting in 86400 seconds..