last executing test programs: 3m51.514272056s ago: executing program 2 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0xb, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001380)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "2fbadf94d83ff57b6b90d2d38eeeb700"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "78a31718895680661a1732bcc69c6a99"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m51.004432061s ago: executing program 2 (id=24): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0xb89, 0xffffffff, 0x10000, 0x44, "1ae34e06264233a5bd00", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 3m50.771544273s ago: executing program 2 (id=27): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read$FUSE(r3, 0x0, 0x0) accept$netrom(r1, 0x0, 0x0) 3m49.79391686s ago: executing program 2 (id=39): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008402, &(0x7f0000000240), 0x1, 0x55e, &(0x7f0000000440)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x83, 0x5, 0x0, {0x0, 0x0, 0x4000000000000, 0x2}}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x141800, 0xc) 3m49.219171159s ago: executing program 2 (id=44): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x2, @loopback, 0x62d}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x20040492) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000001740)='e', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3m47.731348592s ago: executing program 2 (id=52): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3m47.657625416s ago: executing program 32 (id=52): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 26.816007383s ago: executing program 3 (id=632): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x4, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket(0x10, 0x3, 0x0) 25.326664526s ago: executing program 3 (id=635): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b48, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) getrlimit(0xa, &(0x7f0000000140)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)=@deltaction={0xe0, 0x32, 0x201, 0x0, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xffffffffffffffcf, 0x1, 'connmark\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2000006}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x280841e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x240, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x1, 0xef, 0x556f, 0x4, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8000000000000001, 0x4}, &(0x7f0000000100)) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) 21.511022544s ago: executing program 4 (id=639): accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', 0x0) 18.058790573s ago: executing program 3 (id=646): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x3, 0x1}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40008c4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{}, {0x0, "ad44abb9fe57a899"}}}}, 0xf) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) readv(r2, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f0000000640)=""/115, 0x73}, {&(0x7f00000006c0)=""/77, 0x4d}], 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 15.191133464s ago: executing program 3 (id=654): socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8100) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x1802400, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1a87416, 0x0, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000202030a000000000000000002000009300002802c00018014000300fc00000000000000000000030000000014000400fe8000"], 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x24000000) mount(0x0, 0x0, 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x800, 0xb0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1000000000008005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000004c00d300e6d602000000000000000000000001", [0x9]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$vga_arbiter(r6, &(0x7f0000000380)=@other={'lock', ' ', 'mem'}, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0x6, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1db3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x0, 0x9, 0x1}, {0x2, 0x448fb5d2ba34cfda, 0x6d1, 0x7, 0xfffd, 0xed4}, 0x8, 0x1, 0x1fcd}}, @TCA_TBF_BURST={0x8, 0x6, 0xafc5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x220000e0}, 0x4890) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f0000000180)="2be0", 0x2, 0x10, &(0x7f0000000200)={0x11, 0x15, r7, 0x1, 0x5, 0x6, @remote}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13.315322386s ago: executing program 4 (id=659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80004, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.328196894s ago: executing program 1 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x29}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x4814) 12.231793139s ago: executing program 4 (id=663): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x2, 0x6, {0x0}, {0xee00}, 0x1, 0x5}) prlimit64(r0, 0xf, &(0x7f0000000040)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000140)={0x3, 0x2}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000080)={0x1, "7bc7b0eb07939da1ee8efc70c96ced7db5515f1f455fd01ec5750310cb20fa5e"}) socketpair(0x2a, 0x2, 0x100000, &(0x7f0000000e40)={0xffffffffffffffff}) fsopen(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) bind$802154_dgram(r5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 10.916212284s ago: executing program 3 (id=664): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004"], 0x44}}, 0x0) io_uring_setup(0x1ca1, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r5) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, &(0x7f0000000580), 0x0}, 0x20) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup3(r7, r9, 0x80000) 10.817031429s ago: executing program 1 (id=666): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.176327699s ago: executing program 4 (id=668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_io_uring_setup(0x11bc, &(0x7f00000001c0)={0x0, 0xfaea, 0x1482, 0x3, 0x38a}, &(0x7f0000000140), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280), 0x4117) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a3, &(0x7f0000000200)='bridge0\x00') 8.399984278s ago: executing program 1 (id=670): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a000000030000000000", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000300"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000008100), 0x4) socket$igmp(0x2, 0x3, 0x2) 6.890082692s ago: executing program 1 (id=672): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071101c0000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0xc00, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f00000067c0)={0x0, 0x0, 0x7fffffff}) gettid() syz_clone3(&(0x7f0000001ac0)={0x10000, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0xffffffffffffffff], 0x1}, 0x58) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = memfd_create(&(0x7f0000000300)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\x7fZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\x1a\xf3\x97\xc4\x9a\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = dup(r4) write$binfmt_elf32(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e0300006c0000010000010097700000fe03200001"], 0x79) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.288215721s ago: executing program 5 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80004, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.264170902s ago: executing program 0 (id=674): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x24, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = syz_open_procfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x4, 0x2) getdents64(r3, 0xffffffffffffffff, 0x43) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 5.989192546s ago: executing program 5 (id=675): open_tree(0xffffffffffffff9c, 0x0, 0x81000) socket$inet(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x1a404bc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="ebbd4140", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES16, @ANYBLOB="e1d1b255b4eb5f7ce5cabfaa8a31fcb491915ed1121629c89803e5ee0c991af7d1459747a51bb4aefcb8ab7d721d76eb99ad97e1d70adc338da072ec3b49b23a8da3dd31ccbdfab2467a077078b50ca51139d4713acb42fa9e8f4d08e7c178f538b5dfefb4964e01a0cfa9ed7a636921161338dadfdfd055a5d651d68194e6239be784a880c61ab050a82dbc95daba03a8a48f6f55ed615d6bb4c4ab6df5c1a7c85cddb187bbcce01a5b2d86e17ff68d9a4044a8338d754c9daba97c34f55696b542b457505b868bf8cd3e9a7c03b72acd99dcd68362366226f2a78bcaa8ba0e7d33285a9fbfa4c2a70dd915d4a7959e08a8c592", @ANYRES16], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x40, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r3, 0x5, 0x0, @val=@tracing={0x0, 0x8000000000000000}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 4.714575338s ago: executing program 0 (id=676): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x1000}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$snapshot(r1, 0x0, 0xffffffbf) read$FUSE(r1, 0x0, 0x0) 3.829249462s ago: executing program 5 (id=677): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.770726375s ago: executing program 4 (id=678): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x1000}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$snapshot(r1, 0x0, 0xffffffbf) read$FUSE(r1, 0x0, 0x0) 3.718343497s ago: executing program 0 (id=679): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e00000016400655800649078020000000400000002"], 0x8a) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ef", 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6], 0x6f4}}, 0x0) 3.562390675s ago: executing program 0 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x29}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x4814) 3.561795235s ago: executing program 5 (id=681): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r1 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, 0x0, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xd0745000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$rds(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) getrlimit(0x6, &(0x7f00000001c0)) setsockopt$inet_int(r6, 0x0, 0xf, 0x0, 0x0) bind$inet6(r6, 0x0, 0x0) capset(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000fe00000007"], 0x2241c2) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f00000002c0)={0x4, @output={0x1000, 0x3a894e59a1455476, {0xfffffffe, 0x2}, 0x2, 0x4}}) 2.859502369s ago: executing program 1 (id=682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80004, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.386279322s ago: executing program 4 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x1000}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$snapshot(r4, 0x0, 0xffffffbf) 2.369085763s ago: executing program 5 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x1000}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$snapshot(r4, 0x0, 0xffffffbf) 2.149229874s ago: executing program 0 (id=685): r0 = io_uring_setup(0x32de, &(0x7f0000000240)={0x0, 0x8dd3, 0x1, 0x3f, 0x235}) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000001340)='pkcs7_test\x00', &(0x7f0000001380)={'syz', 0x3}, &(0x7f00000013c0)='(\x00', 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x880) syz_open_dev$MSR(&(0x7f0000000080), 0x8, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="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", 0x148) syz_usb_connect(0x3, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb010203010902340001fb0000007905ae0a7b6f6be35bfd318bd69cb912d0c7d35a22503763de921ab60e7a8cc373d9aed7e8b23b9e46443727ae6b4c463653f884f49d67e9b57c0a0a000f7c5bac2219dfcd71e7c2438f89a50016e67f7cf1076a701d4ab22776a11a4872e667da7c237409b95b92572a0db50442f568355446ca8a85447a2adcb25bb3998ddf354dd26984b7b14111bd58ba51b4bd2ae3d9525ed63ec3dbcea320b927ecc71190442a4d11f5ae143985dd5490e596bea01c5d5f4ff35e67c101605e9e5733b889e1c63cdb7d48181359c94a59d48602b4"], 0x0) 681.819316ms ago: executing program 1 (id=686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x29}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x4814) 558.854342ms ago: executing program 0 (id=687): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x2009, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaac5aaaaaa001c2c00fe8000000000000000000000000000bbfc01000000fa000000000000000000390187000000000000000000ff", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r7, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x2f, 0x9}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16=r9, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x40, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 18.680408ms ago: executing program 5 (id=688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=689): signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x18a, &(0x7f0000000080)={0x0, 0x86d5, 0x10, 0x2, 0x2bc}, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) syz_usbip_server_init(0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 55.675517][ T4173] cgroup: Unknown subsys name 'net' [ 55.784053][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.058466][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.572215][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.613065][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 58.659255][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.685573][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 58.737603][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 58.780514][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.788459][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.798370][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.831990][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.842791][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.853481][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.917553][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.927804][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.939333][ T4194] device bridge_slave_0 entered promiscuous mode [ 58.949510][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.968827][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.989448][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.998686][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.007734][ T4194] device bridge_slave_1 entered promiscuous mode [ 59.061724][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.069631][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.078239][ T4187] device bridge_slave_0 entered promiscuous mode [ 59.093213][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.102594][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.111348][ T4187] device bridge_slave_1 entered promiscuous mode [ 59.119967][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.128215][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.137614][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.154107][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.167309][ T4186] team0: Port device team_slave_0 added [ 59.175520][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.192366][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.199890][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.209387][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.218051][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.225956][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.234882][ T4198] device bridge_slave_0 entered promiscuous mode [ 59.252087][ T4186] team0: Port device team_slave_1 added [ 59.281861][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.289708][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.300444][ T4198] device bridge_slave_1 entered promiscuous mode [ 59.316941][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.328438][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.336129][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.364736][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.394040][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.410079][ T4194] team0: Port device team_slave_0 added [ 59.419949][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.433192][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.441401][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.475356][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.499548][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.516807][ T4194] team0: Port device team_slave_1 added [ 59.536170][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.577751][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.595418][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.604506][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.638799][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.657578][ T4187] team0: Port device team_slave_0 added [ 59.688896][ T4185] team0: Port device team_slave_0 added [ 59.697878][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.706632][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.740217][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.757228][ T4187] team0: Port device team_slave_1 added [ 59.797423][ T4185] team0: Port device team_slave_1 added [ 59.807416][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.816666][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.847511][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.863325][ T4198] team0: Port device team_slave_0 added [ 59.874123][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.882264][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.905817][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.913101][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.942305][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.958102][ T4198] team0: Port device team_slave_1 added [ 59.976244][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.988198][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.026629][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.042854][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.054162][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.085471][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.153443][ T4194] device hsr_slave_0 entered promiscuous mode [ 60.161876][ T4194] device hsr_slave_1 entered promiscuous mode [ 60.170109][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.179067][ T4194] Cannot create hsr debugfs directory [ 60.205402][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.213769][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.226666][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 60.250907][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 60.260558][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.273842][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 60.297435][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 60.306266][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 60.333827][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.353514][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.395287][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.425386][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.434078][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.442672][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.452485][ T4185] Cannot create hsr debugfs directory [ 60.462533][ T4187] device hsr_slave_0 entered promiscuous mode [ 60.471853][ T4187] device hsr_slave_1 entered promiscuous mode [ 60.479909][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.491744][ T4187] Cannot create hsr debugfs directory [ 60.626602][ T4198] device hsr_slave_0 entered promiscuous mode [ 60.635537][ T4198] device hsr_slave_1 entered promiscuous mode [ 60.643785][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.653413][ T4198] Cannot create hsr debugfs directory [ 60.866124][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.890142][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.901265][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.924305][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.972243][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.989225][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.009685][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.021475][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.080476][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.092002][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.126413][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.166322][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.229956][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.248806][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.257280][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.280854][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.298507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.312388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.331380][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.341057][ T4198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.360154][ T4198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.371095][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.382530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.392230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.407309][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.428733][ T4198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.441007][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.456349][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.468077][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.481307][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.492642][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.513659][ T4198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.540320][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.551212][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.562395][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.577393][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.585539][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.595087][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.606767][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.619229][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.628352][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.643206][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.652681][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.680215][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.689614][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.699389][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.707055][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.741535][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.757956][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.781048][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.813610][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.843972][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.861940][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.872790][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.883981][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.894589][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.905785][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.914673][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.925346][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.934273][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.944159][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.954501][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.969290][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.980324][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.991035][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.001216][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.011213][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.020743][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.035096][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.048022][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.068554][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.081948][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.106390][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.116338][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.126285][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.136457][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.146393][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.154941][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.164540][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.175990][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.188613][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.196823][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.205555][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.214856][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.224368][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.234950][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.288959][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.307944][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 62.323780][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.332349][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 62.349598][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.358584][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 62.380269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.395730][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 62.403062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.403351][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 62.422268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.434355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.444141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.460629][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.480325][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.491157][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.513714][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.532681][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.566915][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.574519][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.586126][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.599031][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.611232][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.624228][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.635223][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.644241][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.652367][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.663397][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.674318][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.683220][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.691915][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.700988][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.712713][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.722707][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.740067][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.750318][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.762631][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.798908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.815746][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.833551][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.841971][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.852867][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.863543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.873179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.883666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.894901][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.903864][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.914849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.924128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.965956][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.974208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.985528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.004085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.015821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.024930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.035324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.044442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.054086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.064133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.073522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.084363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.094302][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.104763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.115436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.126193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.135543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.144074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.152748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.163634][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.177680][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.189608][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.218888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.231633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.247434][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.257819][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.268349][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.301047][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.350668][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.368355][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.382929][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.399776][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.442173][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.456382][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.481648][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.500549][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.527732][ T4186] device veth0_vlan entered promiscuous mode [ 63.538983][ T4185] device veth0_vlan entered promiscuous mode [ 63.563007][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.573358][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.583798][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.595955][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.605991][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.617041][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.628673][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.637515][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.645926][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.654821][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.684991][ T4185] device veth1_vlan entered promiscuous mode [ 63.703875][ T4186] device veth1_vlan entered promiscuous mode [ 63.723842][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.737319][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.767025][ T4194] device veth0_vlan entered promiscuous mode [ 63.775641][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.794417][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.812671][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.823933][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.835732][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.850844][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.863109][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.877991][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.903374][ T4194] device veth1_vlan entered promiscuous mode [ 63.929987][ T4185] device veth0_macvtap entered promiscuous mode [ 63.947330][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.960416][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.972434][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.989834][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.002321][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.017940][ T4186] device veth0_macvtap entered promiscuous mode [ 64.031586][ T4185] device veth1_macvtap entered promiscuous mode [ 64.066979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.087861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.098395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.109059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.132568][ T4186] device veth1_macvtap entered promiscuous mode [ 64.166468][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.174658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.183881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.193559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.204268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.214761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.224380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.236051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.249362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.258801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.275095][ T4194] device veth0_macvtap entered promiscuous mode [ 64.291706][ T4198] device veth0_vlan entered promiscuous mode [ 64.304981][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.317128][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.341309][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.354895][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.363762][ T4194] device veth1_macvtap entered promiscuous mode [ 64.380803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.390475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.399307][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 64.400239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.411913][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 64.416879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.422049][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 64.432672][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.448287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.458414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.469466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.478948][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 64.484141][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.487183][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 64.504650][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.518193][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.532727][ T4198] device veth1_vlan entered promiscuous mode [ 64.543738][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.560724][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.571452][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.583424][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.597657][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.606021][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.616442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.627027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.637634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.648134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.668380][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.679689][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.689444][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.699115][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.716450][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.726110][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.736436][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.747194][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.773407][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.784895][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.797442][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.810672][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.824072][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.841512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.853696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.863761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.878821][ T4187] device veth0_vlan entered promiscuous mode [ 64.893270][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.904470][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.915709][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.925979][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.960672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.970777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.983138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.992867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.048912][ T4187] device veth1_vlan entered promiscuous mode [ 65.146853][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.158591][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.167689][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.177533][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.190182][ T4198] device veth0_macvtap entered promiscuous mode [ 65.239382][ T4198] device veth1_macvtap entered promiscuous mode [ 65.256925][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.262061][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.267852][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.287260][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.294736][ T4187] device veth0_macvtap entered promiscuous mode [ 65.302255][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.308403][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.324778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.334958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.347844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.356892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.365105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.373916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.384266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.393967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.438059][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.451096][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.469035][ T4187] device veth1_macvtap entered promiscuous mode [ 65.483204][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.494906][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.506531][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.518659][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.532558][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.545867][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.558517][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.576506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.587107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.596983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.607111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.628949][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.629218][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.650536][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.651661][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.662570][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.681399][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.692053][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.703656][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.715016][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.726654][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.737661][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.748864][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.759475][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.782991][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.797576][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.818170][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.832471][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.844356][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.856057][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.881530][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.893312][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.904683][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.920421][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.931552][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.943031][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.953661][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.964669][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.977790][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.019617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.040126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.071999][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.083762][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.097133][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.108719][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.121189][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.133566][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.147156][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.160858][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.172353][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.189989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.219129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.270803][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.283225][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.331214][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.362583][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.416671][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.442632][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.477061][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 66.490781][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.494032][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 66.505546][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.527550][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 66.556713][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 66.563532][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 66.598917][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.633462][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.669562][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.671661][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.698051][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.748009][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.770459][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.784342][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.815622][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 66.828315][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.858882][ T4285] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.958459][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.995635][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.093129][ T4230] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 67.322473][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.327776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 67.389802][ T4301] loop4: detected capacity change from 0 to 256 [ 67.412489][ T4230] usb 3-1: config 0 descriptor?? [ 68.739083][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 68.779328][ T4301] exfat: Deprecated parameter 'utf8' [ 68.805731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 68.855844][ T4301] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 68.982776][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.027627][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.037358][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.047375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.093690][ T4309] loop3: detected capacity change from 0 to 8192 [ 69.128843][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.137008][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.144793][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.152717][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.161178][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x3 [ 69.169240][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.205675][ T4309] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 69.216670][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.224304][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.254497][ T4311] 0x000000004002-0x000000004009 : "" [ 69.266466][ T4309] REISERFS (device loop3): using ordered data mode [ 69.273667][ T4309] reiserfs: using flush barriers [ 69.291157][ T4309] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.315112][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.320428][ T4309] REISERFS (device loop3): checking transaction log (loop3) [ 69.343357][ T4309] REISERFS (device loop3): Using r5 hash to sort names [ 69.355007][ T4309] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 69.367181][ T4311] ftl_cs: FTL header corrupt! [ 69.385449][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.410815][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.445475][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.475007][ T4230] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 69.512756][ T4230] koneplus 0003:1E7D:2E22.0001: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 69.563883][ T4230] usb 3-1: USB disconnect, device number 2 [ 69.730077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.989150][ T4323] fido_id[4323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 70.136462][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 70.264867][ T4336] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET) [ 70.504434][ T4346] loop1: detected capacity change from 0 to 164 [ 70.521536][ T4350] loop3: detected capacity change from 0 to 512 [ 70.615254][ T4350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 70.636935][ T4346] ======================================================= [ 70.636935][ T4346] WARNING: The mand mount option has been deprecated and [ 70.636935][ T4346] and is ignored by this kernel. Remove the mand [ 70.636935][ T4346] option from the mount to silence this warning. [ 70.636935][ T4346] ======================================================= [ 70.656313][ T4350] System zones: 1-12 [ 70.701508][ T4350] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.17: corrupted in-inode xattr [ 70.718712][ T4350] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.17: couldn't read orphan inode 15 (err -117) [ 70.826661][ T4346] Unable to read rock-ridge attributes [ 70.841913][ T4350] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 71.004829][ T4346] Unable to read rock-ridge attributes [ 71.029801][ T4346] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.101447][ T4346] Unable to read rock-ridge attributes [ 71.130258][ T4346] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.219553][ T4369] serio: Serial port ttyprintk [ 71.250242][ T4350] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.17: Unrecognised inode hash code 4 [ 71.266978][ T4366] Unable to read rock-ridge attributes [ 71.294941][ T4350] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.17: Corrupt directory, running e2fsck is recommended [ 71.304006][ T4366] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.314723][ T4350] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.17: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=3, inode=16780288, rec_len=11778, size=1024 fake=0 [ 71.348626][ T4346] Unable to read rock-ridge attributes [ 71.366739][ T4346] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.410127][ T4346] Unable to read rock-ridge attributes [ 71.447260][ T4346] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.752793][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.760179][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.150010][ T4398] loop2: detected capacity change from 0 to 1024 [ 72.302376][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.729169][ T4185] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 72.783459][ T4185] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 73.077470][ T4423] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 73.665518][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 74.088366][ T1279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.241830][ T1279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.374480][ T1279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.486974][ T1279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.711260][ T4441] chnl_net:caif_netlink_parms(): no params data found [ 74.856644][ T4453] binder: BINDER_SET_CONTEXT_MGR already set [ 74.881485][ T4453] binder: 4451:4453 ioctl 4018620d 200000004a80 returned -16 [ 74.910610][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.918377][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.931868][ T4441] device bridge_slave_0 entered promiscuous mode [ 74.941648][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.953809][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.962930][ T4441] device bridge_slave_1 entered promiscuous mode [ 75.039370][ T4441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.098184][ T4441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.170688][ T4457] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.264926][ T4441] team0: Port device team_slave_0 added [ 75.278256][ T4441] team0: Port device team_slave_1 added [ 75.339325][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.361130][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.451198][ T4441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.493743][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.517803][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.552907][ T4441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.638778][ T4441] device hsr_slave_0 entered promiscuous mode [ 75.647562][ T4476] capability: warning: `syz.3.59' uses 32-bit capabilities (legacy support in use) [ 75.659277][ T4441] device hsr_slave_1 entered promiscuous mode [ 75.668225][ T4441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.678120][ T4441] Cannot create hsr debugfs directory [ 75.741177][ T4479] loop0: detected capacity change from 0 to 128 [ 75.826157][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 75.941063][ T4484] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 76.163542][ T4495] serio: Serial port ttyprintk [ 76.466910][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 76.615972][ T4441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.706779][ T4509] loop0: detected capacity change from 0 to 256 [ 76.771281][ T4509] exfat: Deprecated parameter 'utf8' [ 76.859417][ T4509] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 77.182291][ T4441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.370403][ T4441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.423162][ T4441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.521988][ T4517] loop1: detected capacity change from 0 to 2048 [ 77.523054][ T4520] process 'syz.0.69' launched '/dev/fd/6' with NULL argv: empty string added [ 77.610613][ T4517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.669915][ T1279] device hsr_slave_0 left promiscuous mode [ 77.693412][ T1279] device hsr_slave_1 left promiscuous mode [ 77.716412][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.765325][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.786103][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.826081][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.860140][ T1279] device bridge_slave_1 left promiscuous mode [ 77.882409][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.931001][ T1279] device bridge_slave_0 left promiscuous mode [ 77.953946][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.013099][ T1279] device veth1_macvtap left promiscuous mode [ 78.021607][ T1279] device veth0_macvtap left promiscuous mode [ 78.029888][ T1279] device veth1_vlan left promiscuous mode [ 78.038529][ T1279] device veth0_vlan left promiscuous mode [ 78.440467][ T4517] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1438: i_size: 237568 lbcount: 241664 extent 129+241152 [ 78.518106][ T1279] team0 (unregistering): Port device team_slave_1 removed [ 78.537962][ T1279] team0 (unregistering): Port device team_slave_0 removed [ 78.562417][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 78.600915][ T1279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.654847][ T1279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.856639][ T1279] bond0 (unregistering): Released all slaves [ 78.994788][ T4531] device vlan2 entered promiscuous mode [ 79.028617][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 79.060819][ T4505] loop4: detected capacity change from 0 to 131072 [ 79.123012][ T4505] F2FS-fs (loop4): invalid crc value [ 79.182785][ T4505] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.330384][ T4441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.361809][ T4505] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.390658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.406084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.451184][ T4441] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.480833][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.546630][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.566525][ T4546] 9pnet: p9_client_clunk (4546): Trying to clunk with invalid fid [ 79.580183][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.588699][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.604711][ T4546] CPU: 1 PID: 4546 Comm: syz.3.74 Not tainted syzkaller #0 [ 79.612420][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.623713][ T4546] Call Trace: [ 79.627700][ T4546] [ 79.631014][ T4546] dump_stack_lvl+0x188/0x250 [ 79.636195][ T4546] ? show_regs_print_info+0x20/0x20 [ 79.642220][ T4546] ? load_image+0x400/0x400 [ 79.647522][ T4546] ? v9fs_fid_find+0x2d1/0x320 [ 79.652692][ T4546] p9_client_clunk+0x2b3/0x380 [ 79.657684][ T4546] v9fs_statfs+0x1b7/0x380 [ 79.662921][ T4546] ? v9fs_drop_inode+0x130/0x130 [ 79.668537][ T4546] ? ovl_mount_dir+0x1f6/0x2b0 [ 79.673609][ T4546] ? kfree+0xef/0x2a0 [ 79.677986][ T4546] vfs_statfs+0x13d/0x2c0 [ 79.682810][ T4546] ovl_get_upper+0x1c0/0x600 [ 79.687831][ T4546] ? ovl_fill_super+0x2a30/0x2a30 [ 79.693194][ T4546] ovl_fill_super+0x160c/0x2a30 [ 79.698649][ T4546] ? ovl_mount+0x30/0x30 [ 79.703375][ T4546] ? sget+0x427/0x440 [ 79.707791][ T4546] ? free_anon_bdev+0x20/0x20 [ 79.712598][ T4546] ? ovl_mount+0x30/0x30 [ 79.717054][ T4546] mount_nodev+0x52/0xe0 [ 79.721882][ T4546] legacy_get_tree+0xe6/0x180 [ 79.726673][ T4546] ? virtio_fs_zero_page_range+0x120/0x120 [ 79.732883][ T4546] vfs_get_tree+0x88/0x270 [ 79.737493][ T4546] do_new_mount+0x24a/0xa40 [ 79.742222][ T4546] __se_sys_mount+0x2e3/0x3d0 [ 79.747125][ T4546] ? __x64_sys_mount+0xc0/0xc0 [ 79.752506][ T4546] ? lockdep_hardirqs_on+0x94/0x140 [ 79.758176][ T4546] ? __x64_sys_mount+0x1c/0xc0 [ 79.763982][ T4546] do_syscall_64+0x4c/0xa0 [ 79.768791][ T4546] ? clear_bhb_loop+0x30/0x80 [ 79.773988][ T4546] ? clear_bhb_loop+0x30/0x80 [ 79.778989][ T4546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.785038][ T4546] RIP: 0033:0x7f12cb95c799 [ 79.789959][ T4546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.811579][ T4546] RSP: 002b:00007f12c9bb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.820471][ T4546] RAX: ffffffffffffffda RBX: 00007f12cbbd5fa0 RCX: 00007f12cb95c799 [ 79.829281][ T4546] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 79.838378][ T4546] RBP: 00007f12cb9f2c99 R08: 0000200000000180 R09: 0000000000000000 [ 79.846645][ T4546] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 79.855185][ T4546] R13: 00007f12cbbd6038 R14: 00007f12cbbd5fa0 R15: 00007ffe9d75ef68 [ 79.863463][ T4546] [ 79.881807][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.904381][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.924259][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.947952][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.955493][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.032880][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.047163][ T4546] overlayfs: statfs failed on './file0' [ 80.047573][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.117318][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.146999][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.166324][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.199266][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.221245][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.318827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.336210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.366736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.414567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.468618][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.546229][ T4258] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.633085][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 80.665091][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 80.894135][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.951788][ T4258] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.988177][ T4258] usb 1-1: config 0 has no interface number 0 [ 81.022988][ T4258] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 81.023330][ T4569] loop1: detected capacity change from 0 to 32768 [ 81.071914][ T4569] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 81.082412][ T4258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.089150][ T4569] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 81.148172][ T4569] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: filesystem consistency error [ 81.148172][ T4569] inode = 1 19 [ 81.148172][ T4569] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 81.171721][ T4569] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: about to withdraw this file system [ 81.182652][ T4569] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: Journal recovery skipped for jid 0 until next mount. [ 81.195614][ T4569] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: Glock dequeues delayed: 0 [ 81.208318][ T4569] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: File system withdrawn [ 81.218446][ T4569] CPU: 1 PID: 4569 Comm: syz.1.78 Not tainted syzkaller #0 [ 81.226033][ T4569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.236719][ T4569] Call Trace: [ 81.240683][ T4569] [ 81.244066][ T4569] dump_stack_lvl+0x188/0x250 [ 81.249031][ T4569] ? kobject_uevent_env+0x371/0x890 [ 81.254609][ T4569] ? show_regs_print_info+0x20/0x20 [ 81.260029][ T4569] ? load_image+0x400/0x400 [ 81.264753][ T4569] ? kobject_uevent_env+0x371/0x890 [ 81.270364][ T4569] gfs2_withdraw+0x1149/0x1490 [ 81.275832][ T4569] ? gfs2_lm+0x240/0x240 [ 81.280313][ T4569] ? _raw_spin_unlock+0x24/0x40 [ 81.285724][ T4569] ? gfs2_glock_nq+0xcb0/0x1550 [ 81.291101][ T4569] ? gfs2_consist_inode_i+0xc0/0xe0 [ 81.296744][ T4569] gfs2_jdesc_check+0x137/0x290 [ 81.301721][ T4569] init_journal+0xd02/0x22f0 [ 81.306727][ T4569] ? end_bio_io_page+0x100/0x100 [ 81.312266][ T4569] ? vsnprintf+0x1b21/0x1c20 [ 81.317096][ T4569] ? snprintf+0xe5/0x140 [ 81.321548][ T4569] ? init_journal+0x74d/0x22f0 [ 81.326522][ T4569] ? vscnprintf+0x80/0x80 [ 81.330974][ T4569] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 81.336298][ T4569] init_inodes+0xdb/0x320 [ 81.340763][ T4569] gfs2_fill_super+0x16b2/0x1f00 [ 81.345934][ T4569] ? gfs2_reconfigure+0xd30/0xd30 [ 81.351453][ T4569] ? gfs2_glock_nq_num+0x82/0x1b0 [ 81.357080][ T4569] ? sb_set_blocksize+0xa5/0xe0 [ 81.362745][ T4569] get_tree_bdev+0x3f1/0x610 [ 81.368385][ T4569] ? gfs2_reconfigure+0xd30/0xd30 [ 81.373978][ T4569] gfs2_get_tree+0x4d/0x1e0 [ 81.378446][ T4258] usb 1-1: config 0 descriptor?? [ 81.378704][ T4569] vfs_get_tree+0x88/0x270 [ 81.388308][ T4569] do_new_mount+0x24a/0xa40 [ 81.393206][ T4569] __se_sys_mount+0x2e3/0x3d0 [ 81.398175][ T4569] ? __x64_sys_mount+0xc0/0xc0 [ 81.403087][ T4569] ? lockdep_hardirqs_on+0x94/0x140 [ 81.408665][ T4569] ? __x64_sys_mount+0x1c/0xc0 [ 81.414063][ T4569] do_syscall_64+0x4c/0xa0 [ 81.418703][ T4569] ? clear_bhb_loop+0x30/0x80 [ 81.423728][ T4569] ? clear_bhb_loop+0x30/0x80 [ 81.428663][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.434729][ T4569] RIP: 0033:0x7f6040ca8a0a [ 81.439609][ T4569] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.460780][ T4569] RSP: 002b:00007f603eedfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.469313][ T4569] RAX: ffffffffffffffda RBX: 00007f603eedfee0 RCX: 00007f6040ca8a0a [ 81.477644][ T4569] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f603eedfea0 [ 81.486141][ T4569] RBP: 0000200000000000 R08: 00007f603eedfee0 R09: 000000000000881d [ 81.494650][ T4569] R10: 000000000000881d R11: 0000000000000246 R12: 0000200000000040 [ 81.503423][ T4569] R13: 00007f603eedfea0 R14: 000000000001272b R15: 00002000000001c0 [ 81.511794][ T4569] [ 81.516131][ T4569] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5 [ 81.595066][ T4258] usb 1-1: selecting invalid altsetting 1 [ 81.637463][ T4258] dvb_ttusb_budget: ttusb_init_controller: error [ 81.665918][ T4258] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 81.957183][ T4258] DVB: Unable to find symbol cx22700_attach() [ 81.997201][ T1111] cfg80211: failed to load regulatory.db [ 82.055073][ T4258] DVB: Unable to find symbol tda10046_attach() [ 82.077617][ T4258] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 82.155867][ T4258] usb 1-1: USB disconnect, device number 2 [ 82.315887][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.345550][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.710202][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 83.092064][ T4577] tipc: Started in network mode [ 83.102211][ T4577] tipc: Node identity 4246, cluster identity 4711 [ 83.117994][ T4577] tipc: Node number set to 16966 [ 83.321794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.362785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.388921][ T4606] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 83.448877][ T4606] team0: Device vxcan1 is of different type [ 83.492311][ T4441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.512274][ T4605] device syzkaller0 entered promiscuous mode [ 83.529894][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fdbbc00: rx timeout, send abort [ 83.923075][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.946558][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.030642][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bb80000: rx timeout, send abort [ 84.039646][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fdbbc00: abort rx timeout. Force session deactivation [ 84.065973][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.090552][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.123056][ T4441] device veth0_vlan entered promiscuous mode [ 84.171873][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.200656][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.539317][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bb80000: abort rx timeout. Force session deactivation [ 84.907060][ T4441] device veth1_vlan entered promiscuous mode [ 85.062701][ T4441] device veth0_macvtap entered promiscuous mode [ 85.083551][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.183227][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.255553][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.272062][ T4441] device veth1_macvtap entered promiscuous mode [ 85.313119][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.454239][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.559222][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.782977][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.970106][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.991591][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.049679][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.086159][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.125115][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.138808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.159237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.186941][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.203293][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.223179][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.336147][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.346537][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.362615][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.379917][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.394468][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.410175][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.424623][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.433730][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.530215][ T4671] Zero length message leads to an empty skb [ 87.052475][ T4441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.102916][ T4441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.115819][ T4441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.129922][ T4441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.287137][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.352166][ T26] audit: type=1326 audit(1774447433.628:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.3.100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12cb95c799 code=0x0 [ 87.352774][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.086568][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.150986][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.197419][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.247143][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.445446][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.725278][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 88.865393][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.895252][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.946861][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.987343][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.051749][ T21] usb 2-1: config 0 descriptor?? [ 89.116799][ T21] hub 2-1:0.0: USB hub found [ 89.325412][ T21] hub 2-1:0.0: 1 port detected [ 89.695436][ T21] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 89.702989][ T21] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 89.866115][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 89.872597][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 89.946251][ T21] usb 2-1: USB disconnect, device number 2 [ 90.345256][ T4258] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 90.385759][ T4229] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 90.906087][ T4258] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.958250][ T4258] usb 5-1: config 0 has no interface number 0 [ 91.114022][ T4258] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.818371][ T4258] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.862149][ T4258] usb 5-1: config 0 interface 1 has no altsetting 0 [ 91.894353][ T4258] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 91.924364][ T4258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.982286][ T4258] usb 5-1: config 0 descriptor?? [ 92.115180][ C1] sched: RT throttling activated [ 92.491774][ T4229] usb 6-1: Using ep0 maxpacket: 32 [ 92.655819][ T4229] usb 6-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 92.675221][ T4229] usb 6-1: config 45 has 0 interfaces, different from the descriptor's value: 1 [ 92.876657][ T4229] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 92.933785][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.000488][ T4229] usb 6-1: Product: syz [ 93.021861][ T4229] usb 6-1: Manufacturer: syz [ 93.045087][ T4229] usb 6-1: SerialNumber: syz [ 93.056408][ T4258] uclogic 0003:2179:0053.0002: pen parameters not found [ 93.075335][ T4258] uclogic 0003:2179:0053.0002: interface is invalid, ignoring [ 93.095544][ T4229] usb 6-1: can't set config #45, error -71 [ 93.141917][ T4229] usb 6-1: USB disconnect, device number 2 [ 93.327195][ T4230] usb 5-1: USB disconnect, device number 2 [ 93.603003][ T4229] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 93.875232][ T4229] usb 6-1: Using ep0 maxpacket: 8 [ 94.155613][ T4229] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 94.186018][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.195430][ T4229] usb 6-1: Product: syz [ 94.210191][ T4229] usb 6-1: Manufacturer: syz [ 94.230470][ T4229] usb 6-1: SerialNumber: syz [ 94.275621][ T4229] usb 6-1: config 0 descriptor?? [ 94.554452][ T4813] loop0: detected capacity change from 0 to 40427 [ 94.561999][ T4229] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 94.591561][ T4813] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 94.635629][ T4813] F2FS-fs (loop0): invalid crc value [ 94.645951][ T4813] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.803875][ T4813] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.239773][ T26] audit: type=1800 audit(1774447442.518:3): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.124" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 96.311062][ T4853] attempt to access beyond end of device [ 96.311062][ T4853] loop0: rw=2049, want=45104, limit=40427 [ 96.325751][ T4229] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 96.368615][ T4229] usb 6-1: USB disconnect, device number 3 [ 96.394242][ T4813] attempt to access beyond end of device [ 96.394242][ T4813] loop0: rw=34817, want=77952, limit=40427 [ 96.541082][ T4861] kvm: emulating exchange as write [ 96.586797][ T4186] attempt to access beyond end of device [ 96.586797][ T4186] loop0: rw=2049, want=45112, limit=40427 [ 98.235677][ T4879] loop0: detected capacity change from 0 to 256 [ 98.306538][ T4879] exfat: Deprecated parameter 'utf8' [ 98.325866][ T4879] exfat: Unexpected value for 'utf8' [ 98.430188][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.5.144'. [ 99.822916][ T4909] device syzkaller0 entered promiscuous mode [ 100.943322][ T4923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.067753][ T4953] device syzkaller0 entered promiscuous mode [ 101.118051][ T4956] loop5: detected capacity change from 0 to 1024 [ 101.162056][ T4956] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 101.206593][ T4956] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 101.408942][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.436082][ T4965] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.464574][ T4965] lo: Caught tx_queue_len zero misconfig [ 101.473963][ T4965] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.261823][ T4956] syz.5.156 (4956) used greatest stack depth: 19952 bytes left [ 103.312581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 103.325342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 103.336151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 104.635968][ T21] usb 5-1: unable to read config index 0 descriptor/all [ 104.644295][ T21] usb 5-1: can't read configurations, error -71 [ 105.569806][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.579073][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.587949][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.618661][ T5113] device batadv_slave_0 entered promiscuous mode [ 109.687703][ T5115] device syzkaller1 entered promiscuous mode [ 109.713761][ T5115] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 109.755061][ T5112] pit: kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 109.825890][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.197'. [ 109.967008][ T5133] loop3: detected capacity change from 0 to 256 [ 110.044074][ T5133] exfat: Deprecated parameter 'utf8' [ 110.061986][ T5131] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 110.075370][ T5133] exfat: Unexpected value for 'utf8' [ 110.129562][ T5131] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.529498][ T5149] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 111.736034][ T5147] loop4: detected capacity change from 0 to 1024 [ 112.359304][ T5147] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.391478][ T5149] team0: Port device dummy0 added [ 112.441150][ T5154] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 112.616397][ T5147] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,delalloc,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x0000000000000005,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 112.844307][ T5154] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.935254][ T5154] team0: Port device dummy0 removed [ 114.889640][ T5147] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 114.913029][ T5147] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.930872][ T5154] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.358030][ T5180] fuse: Bad value for 'fd' [ 116.695696][ T5198] device syzkaller0 entered promiscuous mode [ 117.685851][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 118.861479][ T5232] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.123610][ T5238] device syzkaller0 entered promiscuous mode [ 119.295428][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 121.506146][ T5263] loop3: detected capacity change from 0 to 4096 [ 121.555342][ T4258] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 122.298946][ T5275] syz.0.233 (5275) used greatest stack depth: 16560 bytes left [ 123.635603][ T4258] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.675280][ T4258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.724825][ T4258] usb 6-1: Product: syz [ 123.730782][ T4258] usb 6-1: Manufacturer: syz [ 123.743984][ T4258] usb 6-1: SerialNumber: syz [ 123.760069][ T4258] usb 6-1: config 0 descriptor?? [ 124.018155][ T4194] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 124.026851][ T4258] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 124.166673][ T4194] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 124.885481][ T5302] binder: BINDER_SET_CONTEXT_MGR already set [ 124.904846][ T5302] binder: 5300:5302 ioctl 4018620d 200000000100 returned -16 [ 126.246968][ T5338] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.341218][ T5341] device syzkaller0 entered promiscuous mode [ 126.507435][ T5350] loop1: detected capacity change from 0 to 1024 [ 126.525669][ T4258] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 126.639303][ T4258] usb 6-1: USB disconnect, device number 4 [ 126.718729][ T5350] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 126.735379][ T5350] System zones: 0-1, 3-36 [ 126.760852][ T5350] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.248: bad orphan inode 134217728 [ 126.780638][ T5350] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 126.819421][ T26] audit: type=1800 audit(1774447985.102:4): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.248" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 126.938510][ T26] audit: type=1804 audit(1774447985.102:5): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.248" name="/newroot/48/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 128.334886][ T5376] loop4: detected capacity change from 0 to 1024 [ 128.429413][ T5376] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 128.623228][ T5376] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 129.848477][ T5410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.454756][ T5426] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.017018][ T5451] loop1: detected capacity change from 0 to 256 [ 133.128431][ T5456] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 133.137894][ T5456] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 133.147088][ T5456] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 133.187945][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194570][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.273815][ T5462] comedi comedi3: board detection failed [ 138.882235][ T5490] loop4: detected capacity change from 0 to 2048 [ 140.481512][ T5506] fuse: Bad value for 'fd' [ 140.612802][ T5508] fuse: Bad value for 'fd' [ 140.648519][ T5510] tipc: Enabling of bearer rejected, failed to enable media [ 140.681925][ T5511] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.244179][ T26] audit: type=1804 audit(1774447999.522:6): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.283" name="/newroot/53/file0/bus" dev="loop4" ino=19 res=1 errno=0 [ 145.215249][ T4232] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 145.465430][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 145.585750][ T4232] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 145.595105][ T4232] usb 6-1: config 0 has no interface number 0 [ 146.125651][ T4232] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 146.147783][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.195700][ T4232] usb 6-1: Product: syz [ 146.204291][ T4232] usb 6-1: Manufacturer: syz [ 146.217975][ T4232] usb 6-1: SerialNumber: syz [ 146.274065][ T4232] usb 6-1: config 0 descriptor?? [ 146.328116][ T4232] hub 6-1:0.132: bad descriptor, ignoring hub [ 146.353708][ T4232] hub: probe of 6-1:0.132 failed with error -5 [ 146.437881][ T4232] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input5 [ 146.510061][ T5569] loop0: detected capacity change from 0 to 128 [ 146.592733][ T5569] FAT-fs (loop0): bogus number of reserved sectors [ 146.727791][ T5569] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 146.911855][ T5569] FAT-fs (loop0): Can't find a valid FAT filesystem [ 149.637460][ T3547] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 150.241026][ T3547] usb 6-1: device firmware changed [ 150.377006][ T4232] usb 6-1: USB disconnect, device number 5 [ 151.925262][ T4232] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 152.056302][ T5612] device syzkaller0 entered promiscuous mode [ 152.167038][ T5612] tipc: Started in network mode [ 152.194596][ T5612] tipc: Node identity 9e547455eba4, cluster identity 4711 [ 152.203745][ T5612] tipc: Enabled bearer , priority 0 [ 152.218494][ T5611] tipc: Resetting bearer [ 152.244962][ T5611] tipc: Disabling bearer [ 152.356423][ T4232] usb 6-1: device not accepting address 6, error -71 [ 152.525252][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.775312][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 153.938903][ T4230] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 153.947383][ T4230] usb 5-1: config 0 has no interface number 0 [ 154.005357][ T1108] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 154.145678][ T4230] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 154.165260][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.194745][ T4230] usb 5-1: Product: syz [ 154.204708][ T4230] usb 5-1: Manufacturer: syz [ 154.221358][ T4230] usb 5-1: SerialNumber: syz [ 154.286752][ T4230] usb 5-1: config 0 descriptor?? [ 154.374512][ T4230] hub 5-1:0.132: bad descriptor, ignoring hub [ 154.395643][ T1108] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 154.402870][ T4230] hub: probe of 5-1:0.132 failed with error -5 [ 154.421718][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.445315][ T4230] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input6 [ 154.467478][ T1108] usb 4-1: config 0 has no interface number 0 [ 154.513743][ T1108] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 154.570758][ T1108] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.640191][ T1108] usb 4-1: config 0 interface 52 has no altsetting 0 [ 154.668027][ T13] usb 5-1: USB disconnect, device number 5 [ 154.735479][ T1108] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 154.756918][ T1108] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 154.787401][ T1108] usb 4-1: Manufacturer: syz [ 154.997176][ T1108] usb 4-1: config 0 descriptor?? [ 155.529050][ T1108] hub 4-1:0.52: bad descriptor, ignoring hub [ 155.546544][ T1108] hub: probe of 4-1:0.52 failed with error -5 [ 155.985035][ T1108] usb 4-1: Can not set alternate setting to 1, error: -71 [ 156.037088][ T5649] loop3: detected capacity change from 0 to 256 [ 156.039633][ T1108] synaptics_usb: probe of 4-1:0.52 failed with error -71 [ 156.096792][ T1108] usb 4-1: USB disconnect, device number 2 [ 160.991618][ T5675] loop5: detected capacity change from 0 to 2048 [ 161.220842][ T5675] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 161.305257][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.033137][ T5675] NILFS (loop5): mounting unchecked fs [ 162.070259][ T5675] NILFS (loop5): recovery complete [ 162.095320][ T5684] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.235335][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 162.305342][ T4280] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 165.595465][ T1108] usb 5-1: unable to read config index 0 descriptor/all [ 165.602947][ T1108] usb 5-1: can't read configurations, error -71 [ 165.816752][ T5704] loop1: detected capacity change from 0 to 512 [ 166.587462][ T5711] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.708961][ T5704] EXT4-fs (loop1): Ignoring removed bh option [ 167.365035][ T5704] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 167.907383][ T5704] EXT4-fs (loop1): 1 truncate cleaned up [ 167.915480][ T5704] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 168.000442][ T5725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.009242][ T5725] IPv6: NLM_F_CREATE should be set when creating new route [ 168.091742][ T5727] loop5: detected capacity change from 0 to 256 [ 168.106633][ T5704] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.342: bg 0: block 465: padding at end of block bitmap is not set [ 168.205011][ T26] audit: type=1800 audit(1774448026.482:7): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.342" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 168.326514][ T5734] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.342: invalid indirect mapped block 234881024 (level 0) [ 168.883169][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.891152][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.396166][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.454476][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.073942][ T5728] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.090847][ T5728] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.101217][ T5728] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.116604][ T5728] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.624561][ T5784] loop3: detected capacity change from 0 to 512 [ 172.887689][ T5784] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 173.024774][ T5784] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.444036][ T5784] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 173.465938][ T5784] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.665210][ T26] audit: type=1804 audit(1774448031.942:8): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.362" name="/newroot/77/file1" dev="fuse" ino=1 res=1 errno=0 [ 176.484820][ T5840] device syzkaller0 entered promiscuous mode [ 177.041838][ T5843] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 177.049205][ T5843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.058780][ T5843] vhci_hcd vhci_hcd.0: Device attached [ 177.405397][ T5845] vhci_hcd: connection closed [ 177.409847][ T154] vhci_hcd: stop threads [ 177.946104][ T5850] loop3: detected capacity change from 0 to 2048 [ 177.954861][ T154] vhci_hcd: release socket [ 177.960136][ T154] vhci_hcd: disconnect device [ 178.053653][ T5850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.255965][ T5858] befs: (nullb0): invalid magic header [ 178.469567][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 178.504565][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 178.562374][ T5865] device syzkaller0 entered promiscuous mode [ 178.598222][ T5865] 0: reclassify loop, rule prio 0, protocol 800 [ 179.277943][ T5880] loop5: detected capacity change from 0 to 256 [ 179.629482][ T5889] device syzkaller0 entered promiscuous mode [ 180.343917][ T5880] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 180.602025][ T26] audit: type=1800 audit(1774448038.882:9): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.380" name="file2" dev="loop5" ino=1048593 res=0 errno=0 [ 181.594221][ T1337] Bluetooth: hci1: command 0x0406 tx timeout [ 181.603402][ T1337] Bluetooth: hci2: command 0x0406 tx timeout [ 181.610364][ T1337] Bluetooth: hci3: command 0x0406 tx timeout [ 181.617485][ T1337] Bluetooth: hci4: command 0x0406 tx timeout [ 181.753890][ T5909] device syzkaller0 entered promiscuous mode [ 181.856842][ T5909] 0: reclassify loop, rule prio 0, protocol 800 [ 183.585387][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 183.798338][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 183.909905][ T5926] device syzkaller0 entered promiscuous mode [ 184.223939][ T1337] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 186.103013][ T5693] Bluetooth: hci5: command 0x1001 tx timeout [ 186.126290][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 188.439789][ T4230] Bluetooth: hci5: command 0x1009 tx timeout [ 188.498454][ T5960] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 188.505288][ T5960] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.513698][ T5960] vhci_hcd vhci_hcd.0: Device attached [ 188.827017][ T5961] vhci_hcd: connection closed [ 188.831036][ T4974] vhci_hcd: stop threads [ 188.841535][ T4230] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 188.924231][ T4974] vhci_hcd: release socket [ 189.035917][ T4974] vhci_hcd: disconnect device [ 189.425377][ T1337] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 189.570861][ T5967] device syzkaller0 entered promiscuous mode [ 189.644546][ T5967] 0: reclassify loop, rule prio 0, protocol 800 [ 189.835267][ T1337] usb 5-1: Using ep0 maxpacket: 16 [ 190.645373][ T1337] usb 5-1: unable to read config index 0 descriptor/all [ 190.654508][ T1337] usb 5-1: can't read configurations, error -71 [ 190.948842][ T1337] usb usb5-port1: attempt power cycle [ 194.229442][ T4230] vhci_hcd: vhci_device speed not set [ 194.340810][ T5996] device syzkaller0 entered promiscuous mode [ 194.676173][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.683722][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.247120][ T6008] device syzkaller0 entered promiscuous mode [ 195.754471][ T6017] binder: BINDER_SET_CONTEXT_MGR already set [ 195.765473][ T6017] binder: 6016:6017 ioctl 4018620d 2000000002c0 returned -16 [ 195.852177][ T6025] netlink: 52 bytes leftover after parsing attributes in process `syz.3.418'. [ 196.691483][ T6031] device syzkaller0 entered promiscuous mode [ 196.895934][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 197.723727][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 198.359070][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 200.100882][ T6090] device syzkaller0 entered promiscuous mode [ 200.446315][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.450'. [ 201.009263][ T6104] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 201.215455][ T6104] bond1: (slave vcan0): Error -22 calling dev_set_mtu [ 201.307523][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 201.434363][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 204.501239][ T6171] loop1: detected capacity change from 0 to 128 [ 204.727723][ T6171] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ" or missing value [ 207.070190][ T6204] loop0: detected capacity change from 0 to 512 [ 208.567334][ T6195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.590343][ T6204] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 208.601050][ T6204] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 208.609140][ T6204] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 208.619707][ T6204] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 208.630782][ T6204] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 208.682108][ T6204] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 208.691132][ T6204] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 208.699643][ T6204] EXT4-fs (loop0): failed to initialize system zone (-117) [ 208.707936][ T6204] EXT4-fs (loop0): mount failed [ 208.865375][ T6219] device syzkaller0 entered promiscuous mode [ 208.947509][ T6222] tipc: Enabled bearer , priority 0 [ 209.341774][ T6227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.014935][ T6218] tipc: Resetting bearer [ 210.614771][ T6226] ODEBUG: Out of memory. ODEBUG disabled [ 210.646933][ T6218] tipc: Disabling bearer [ 211.422084][ T1337] tipc: Node number set to 1978692693 [ 211.862168][ T6245] loop3: detected capacity change from 0 to 40427 [ 211.897724][ T6226] syz.0.469 (6226): drop_caches: 2 [ 212.030534][ T6245] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 212.038787][ T6245] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 212.053583][ T6245] F2FS-fs (loop3): invalid crc value [ 212.073013][ T6245] F2FS-fs (loop3): Found nat_bits in checkpoint [ 212.105959][ T6253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.254780][ T6245] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 212.262541][ T6245] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 214.838944][ T6274] loop4: detected capacity change from 0 to 40427 [ 214.964059][ T6274] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 214.972478][ T6274] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 214.999225][ T6274] F2FS-fs (loop4): invalid crc value [ 215.092455][ T6274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 215.184601][ T6274] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 215.192052][ T6274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 217.659242][ T6307] device syzkaller0 entered promiscuous mode [ 218.807552][ T6317] loop3: detected capacity change from 0 to 1024 [ 219.248459][ T4280] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 220.179752][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 220.387743][ T4643] hfsplus: b-tree write err: -5, ino 25 [ 220.425292][ T4643] hfsplus: b-tree write err: -5, ino 4 [ 220.467608][ T4643] hfsplus: b-tree write err: -5, ino 2 [ 221.077847][ T6344] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 221.125726][ T4280] usb 2-1: config 0 has no interfaces? [ 221.296046][ T4280] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.465382][ T6347] tipc: Enabled bearer , priority 0 [ 221.477320][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.491073][ T4280] usb 2-1: Product: syz [ 221.496090][ T4280] usb 2-1: Manufacturer: syz [ 221.502825][ T4280] usb 2-1: config 0 descriptor?? [ 221.527604][ T6347] device syzkaller0 entered promiscuous mode [ 221.593791][ T6347] tipc: Resetting bearer [ 221.622500][ T6346] tipc: Resetting bearer [ 221.651738][ T6346] tipc: Disabling bearer [ 221.778559][ T4280] usb 2-1: USB disconnect, device number 3 [ 221.979204][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.999271][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.008472][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.613469][ T6385] loop5: detected capacity change from 0 to 1024 [ 227.731721][ T1236] hfsplus: b-tree write err: -5, ino 25 [ 227.748440][ T1236] hfsplus: b-tree write err: -5, ino 4 [ 227.754669][ T1236] hfsplus: b-tree write err: -5, ino 2 [ 227.939782][ T1236] hfsplus: b-tree write err: -5, ino 26 [ 230.130765][ T6445] loop5: detected capacity change from 0 to 1024 [ 230.296822][ T6445] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,grpid,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 232.255680][ T6457] overlayfs: failed to resolve './file0': -2 [ 232.957325][ T6471] loop1: detected capacity change from 0 to 16 [ 232.999158][ T6471] erofs: (device loop1): mounted with root inode @ nid 36. [ 233.014585][ T6471] attempt to access beyond end of device [ 233.014585][ T6471] loop1: rw=524288, want=1072, limit=16 [ 233.032974][ T4203] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 233.195374][ T26] audit: type=1800 audit(1774448091.472:10): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.528" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 234.431923][ T6485] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 234.656415][ T6484] device syzkaller0 entered promiscuous mode [ 237.997626][ T6513] netlink: 76 bytes leftover after parsing attributes in process `syz.1.538'. [ 238.074599][ T6509] device syzkaller0 entered promiscuous mode [ 238.086884][ T6510] device syzkaller0 entered promiscuous mode [ 238.107189][ T6510] TC_ACT_REPEAT abuse ? [ 239.875849][ T6538] netlink: 180 bytes leftover after parsing attributes in process `syz.4.542'. [ 240.500727][ T6528] sctp: failed to load transform for md5: -2 [ 241.842549][ T6573] device syzkaller0 entered promiscuous mode [ 241.878738][ T6573] 0: reclassify loop, rule prio 0, protocol 800 [ 241.879533][ T6576] device syzkaller0 entered promiscuous mode [ 243.324277][ T6582] device syzkaller0 entered promiscuous mode [ 243.842715][ T6601] hub 9-0:1.0: USB hub found [ 243.854265][ T6601] hub 9-0:1.0: 1 port detected [ 244.557780][ T6609] device syzkaller0 entered promiscuous mode [ 244.964826][ T6622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.728556][ T26] audit: type=1326 audit(1774448104.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.1.564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6040ca7799 code=0x0 [ 251.688993][ T6697] loop0: detected capacity change from 0 to 512 [ 251.713173][ T6687] loop3: detected capacity change from 0 to 1024 [ 251.970413][ T6687] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.996587][ T6697] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.584: invalid indirect mapped block 256 (level 2) [ 252.380783][ T6697] EXT4-fs (loop0): 2 truncates cleaned up [ 252.424446][ T6697] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 252.728203][ T26] audit: type=1800 audit(1774448110.942:12): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.584" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 253.556908][ T6696] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.584: bg 0: block 5: invalid block bitmap [ 253.609389][ T6696] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 253.623927][ T6696] EXT4-fs (loop0): This should not happen!! Data will be lost [ 253.623927][ T6696] [ 253.634561][ T6696] EXT4-fs (loop0): Total free blocks count 0 [ 253.641977][ T6696] EXT4-fs (loop0): Free/Dirty block details [ 253.648168][ T6696] EXT4-fs (loop0): free_blocks=0 [ 253.653424][ T6696] EXT4-fs (loop0): dirty_blocks=32 [ 253.658757][ T6696] EXT4-fs (loop0): Block reservation details [ 253.665301][ T6696] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 254.513772][ T6730] loop3: detected capacity change from 0 to 1024 [ 254.814253][ T6739] tipc: Started in network mode [ 254.903054][ T6739] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 254.925476][ T6739] tipc: Enabled bearer , priority 10 [ 255.816054][ T6730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.987899][ T21] tipc: Node number set to 10136234 [ 256.077725][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.084594][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.088744][ T6759] device syzkaller0 entered promiscuous mode [ 256.931828][ T6770] loop1: detected capacity change from 0 to 40427 [ 256.979961][ T6770] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 256.988639][ T6770] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 256.999668][ T6770] F2FS-fs (loop1): invalid crc value [ 258.022780][ T6770] F2FS-fs (loop1): Found nat_bits in checkpoint [ 258.116218][ T6770] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 258.123879][ T6770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 260.201069][ T6811] loop0: detected capacity change from 0 to 1024 [ 260.372493][ T6811] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,grpid,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 264.940044][ T6837] loop5: detected capacity change from 0 to 1024 [ 265.244808][ T6837] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.440203][ T6868] device syzkaller0 entered promiscuous mode [ 269.485702][ T6898] befs: (nullb0): invalid magic header [ 269.606180][ T6885] loop1: detected capacity change from 0 to 1024 [ 270.051434][ T6897] tipc: Enabled bearer , priority 0 [ 270.098527][ T6897] device syzkaller0 entered promiscuous mode [ 270.952375][ T6885] EXT4-fs: failed to create workqueue [ 270.952387][ T6885] EXT4-fs (loop1): mount failed [ 272.087113][ T6912] loop5: detected capacity change from 0 to 32768 [ 272.436322][ T6912] read_mapping_page failed! [ 272.442526][ T6912] ERROR: (device loop5): txCommit: [ 272.442526][ T6912] [ 273.043981][ T4441] ERROR: (device loop5): diFree: numfree > numinos [ 273.043981][ T4441] [ 273.975486][ T6892] tipc: Resetting bearer [ 274.149933][ T6892] tipc: Disabling bearer [ 275.322790][ T6956] hub 8-0:1.0: USB hub found [ 275.329773][ T6956] hub 8-0:1.0: 1 port detected [ 277.941159][ T6972] loop3: detected capacity change from 0 to 256 [ 279.072650][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 280.798758][ T6972] FAT-fs (loop3): Directory bread(block 64) failed [ 280.867934][ T6995] ax25_connect(): syz.0.650 uses autobind, please contact jreuter@yaina.de [ 281.423555][ T6972] FAT-fs (loop3): Directory bread(block 65) failed [ 281.797061][ T6972] FAT-fs (loop3): Directory bread(block 66) failed [ 282.018649][ T6972] FAT-fs (loop3): Directory bread(block 67) failed [ 282.044254][ T6972] FAT-fs (loop3): Directory bread(block 68) failed [ 282.105249][ T6972] FAT-fs (loop3): Directory bread(block 69) failed [ 282.263138][ T6972] FAT-fs (loop3): Directory bread(block 70) failed [ 283.005511][ T6972] FAT-fs (loop3): Directory bread(block 71) failed [ 283.013954][ T6972] FAT-fs (loop3): Directory bread(block 72) failed [ 283.075964][ T7014] netlink: 276 bytes leftover after parsing attributes in process `syz.5.643'. [ 283.117668][ T7015] loop1: detected capacity change from 0 to 256 [ 283.128071][ T6972] FAT-fs (loop3): Directory bread(block 73) failed [ 283.216205][ T7017] loop5: detected capacity change from 0 to 16 [ 283.385786][ T7017] erofs: (device loop5): mounted with root inode @ nid 36. [ 283.794767][ T7015] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 284.955254][ T7031] attempt to access beyond end of device [ 284.955254][ T7031] loop1: rw=0, want=34359738496, limit=256 [ 285.592011][ T26] audit: type=1800 audit(1774448143.022:13): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="file1" dev="loop1" ino=1048597 res=0 errno=0 [ 285.613475][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.537093][ T7042] loop5: detected capacity change from 0 to 2048 [ 286.624795][ T7046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.667131][ T7042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.740837][ T7049] loop0: detected capacity change from 0 to 512 [ 287.476241][ T7063] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.655'. [ 287.618547][ T7049] EXT4-fs (loop0): Test dummy encryption mode enabled [ 287.655379][ T7049] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 287.705403][ T7049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.852049][ T7049] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.653: bad orphan inode 131083 [ 288.443364][ T7049] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 288.660778][ T7085] tipc: Started in network mode [ 288.679403][ T7085] tipc: Node identity e64f302d9b59, cluster identity 4711 [ 288.721341][ T7053] loop3: detected capacity change from 0 to 40427 [ 288.764068][ T7085] tipc: Enabled bearer , priority 0 [ 288.813178][ T7053] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 288.822246][ T7089] device syzkaller0 entered promiscuous mode [ 288.863257][ T7053] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 288.899021][ T7091] tipc: Resetting bearer [ 288.920324][ T7087] tipc: Started in network mode [ 288.925904][ T7087] tipc: Node identity 2e3fca54e1d9, cluster identity 4711 [ 288.986112][ T7087] tipc: Enabled bearer , priority 0 [ 288.995325][ T7053] F2FS-fs (loop3): Found nat_bits in checkpoint [ 289.045421][ T7092] device syzkaller0 entered promiscuous mode [ 289.085562][ T7049] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 289.145704][ T7081] tipc: Resetting bearer [ 289.161858][ T7081] tipc: Disabling bearer [ 289.218374][ T7053] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 289.239310][ T7053] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 289.254395][ T7099] tipc: Resetting bearer [ 289.368479][ T7099] tipc: Disabling bearer [ 290.197866][ T4280] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 290.207434][ T4280] Bluetooth: hci3: Injecting HCI hardware error event [ 290.222880][ T7114] befs: (nullb0): invalid magic header [ 290.232379][ T4203] Bluetooth: hci3: hardware error 0x00 [ 292.288107][ T7118] loop1: detected capacity change from 0 to 2048 [ 292.603175][ T7118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.280691][ T7134] loop0: detected capacity change from 0 to 512 [ 293.511305][ T7134] EXT4-fs (loop0): Mount option "delalloc" incompatible with ext3 [ 294.400275][ T7142] tipc: Enabled bearer , priority 0 [ 294.939606][ T7147] device syzkaller0 entered promiscuous mode [ 295.001176][ T7154] vivid-001: disconnect [ 295.036041][ T7142] tipc: Resetting bearer [ 295.303509][ T7139] tipc: Resetting bearer [ 295.372919][ T7159] binder: 7152:7159 ioctl 400c620e 2000000067c0 returned -22 [ 295.382710][ T7139] tipc: Disabling bearer [ 295.655884][ T7164] tipc: Enabled bearer , priority 0 [ 295.691490][ T7163] tipc: Disabling bearer [ 296.294302][ T7149] vivid-001: reconnect [ 297.214091][ T7173] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 297.214091][ T7173] program syz.0.676 not setting count and/or reply_len properly [ 298.110904][ T7182] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 298.110904][ T7182] program syz.4.678 not setting count and/or reply_len properly [ 298.164530][ T7184] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.679'. [ 298.534805][ T7189] device syzkaller0 entered promiscuous mode [ 299.352331][ T7194] device syzkaller0 entered promiscuous mode [ 299.760393][ T7205] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 299.760393][ T7205] program syz.5.684 not setting count and/or reply_len properly [ 301.069183][ T7209] device syzkaller0 entered promiscuous mode [ 302.146470][ C0] ================================================================== [ 302.155754][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 302.164016][ C0] Read of size 2 at addr ffff88807953742a by task syz.0.687/7215 [ 302.172927][ C0] [ 302.175358][ C0] CPU: 0 PID: 7215 Comm: syz.0.687 Not tainted syzkaller #0 [ 302.183287][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.196298][ C0] Call Trace: [ 302.200873][ C0] [ 302.208045][ C0] dump_stack_lvl+0x188/0x250 [ 302.214124][ C0] ? show_regs_print_info+0x20/0x20 [ 302.220568][ C0] ? _printk+0xda/0x130 [ 302.229247][ C0] ? rose_timer_expiry+0x470/0x490 [ 302.235028][ C0] ? load_image+0x400/0x400 [ 302.240423][ C0] print_address_description+0x60/0x2d0 [ 302.247984][ C0] ? rose_timer_expiry+0x470/0x490 [ 302.256980][ C0] kasan_report+0xdf/0x130 [ 302.264117][ C0] ? rose_timer_expiry+0x470/0x490 [ 302.270968][ C0] rose_timer_expiry+0x470/0x490 [ 302.276340][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 302.282264][ C0] call_timer_fn+0x17b/0x540 [ 302.288396][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 302.296734][ C0] ? __run_timers+0x800/0x800 [ 302.301910][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 302.307479][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 302.313114][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 302.319163][ C0] __run_timers+0x53e/0x800 [ 302.324790][ C0] ? detach_timer+0x2b0/0x2b0 [ 302.330365][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 302.338045][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 302.344903][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 302.352929][ C0] run_timer_softirq+0x63/0xf0 [ 302.358614][ C0] handle_softirqs+0x339/0x830 [ 302.364727][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 302.370838][ C0] ? do_softirq+0x210/0x210 [ 302.377109][ C0] __irq_exit_rcu+0x13b/0x230 [ 302.384857][ C0] ? irq_exit_rcu+0x20/0x20 [ 302.390299][ C0] irq_exit_rcu+0x5/0x20 [ 302.396139][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 302.402862][ C0] [ 302.406848][ C0] [ 302.409794][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 302.417073][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 302.423839][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 302.447797][ C0] RSP: 0018:ffffc900043978d8 EFLAGS: 00000206 [ 302.455064][ C0] RAX: ac38d9bd42d94f00 RBX: ffff88802a888000 RCX: ac38d9bd42d94f00 [ 302.464257][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 302.473681][ C0] RBP: 0000000000000000 R08: ffffc90004397b37 R09: ffffc90004397b00 [ 302.484113][ C0] R10: dffffc0000000000 R11: fffff52000872f67 R12: dffffc0000000000 [ 302.493815][ C0] R13: 0000000000000246 R14: ffffffff8c31eb00 R15: 00000000ffffffff [ 302.502986][ C0] ___might_sleep+0x9b/0x610 [ 302.507790][ C0] ? __might_sleep+0xf0/0xf0 [ 302.512779][ C0] ? verify_lock_unused+0x140/0x140 [ 302.518898][ C0] __might_fault+0x6b/0x110 [ 302.523916][ C0] _copy_from_user+0x29/0x170 [ 302.529550][ C0] ___sys_recvmsg+0x173/0x5c0 [ 302.534536][ C0] ? __sys_recvmsg+0x280/0x280 [ 302.539426][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 302.544901][ C0] ? __might_fault+0xb3/0x110 [ 302.550047][ C0] do_recvmmsg+0x382/0x850 [ 302.554845][ C0] ? __sys_recvmmsg+0x290/0x290 [ 302.560820][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 302.566866][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 302.572908][ C0] ? do_recvmmsg+0x850/0x850 [ 302.579477][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 302.586750][ C0] do_syscall_64+0x4c/0xa0 [ 302.592765][ C0] ? clear_bhb_loop+0x30/0x80 [ 302.598984][ C0] ? clear_bhb_loop+0x30/0x80 [ 302.604056][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.610752][ C0] RIP: 0033:0x7ff7faca2799 [ 302.616020][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.637906][ C0] RSP: 002b:00007ff7f8edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 302.647955][ C0] RAX: ffffffffffffffda RBX: 00007ff7faf1c090 RCX: 00007ff7faca2799 [ 302.657609][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 302.666642][ C0] RBP: 00007ff7fad38c99 R08: 0000000000000000 R09: 0000000000000000 [ 302.675553][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 302.684491][ C0] R13: 00007ff7faf1c128 R14: 00007ff7faf1c090 R15: 00007ffc22b25688 [ 302.692895][ C0] [ 302.696504][ C0] [ 302.699557][ C0] Allocated by task 5254: [ 302.704413][ C0] __kasan_kmalloc+0xb5/0xf0 [ 302.709370][ C0] rose_add_node+0x227/0xdb0 [ 302.714804][ C0] rose_rt_ioctl+0xa2b/0xe70 [ 302.720191][ C0] rose_ioctl+0x2a7/0x7d0 [ 302.725188][ C0] sock_do_ioctl+0xfb/0x320 [ 302.730302][ C0] sock_ioctl+0x4d2/0x710 [ 302.734998][ C0] __se_sys_ioctl+0xfa/0x170 [ 302.740214][ C0] do_syscall_64+0x4c/0xa0 [ 302.745080][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.751337][ C0] [ 302.754022][ C0] The buggy address belongs to the object at ffff888079537400 [ 302.754022][ C0] which belongs to the cache kmalloc-512 of size 512 [ 302.771296][ C0] The buggy address is located 42 bytes inside of [ 302.771296][ C0] 512-byte region [ffff888079537400, ffff888079537600) [ 302.786967][ C0] The buggy address belongs to the page: [ 302.793389][ C0] page:ffffea0001e54d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079537400 pfn:0x79534 [ 302.806536][ C0] head:ffffea0001e54d00 order:2 compound_mapcount:0 compound_pincount:0 [ 302.815941][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 302.825105][ C0] raw: 00fff00000010200 ffffea000186cb08 ffffea000078f208 ffff888016c41c80 [ 302.835246][ C0] raw: ffff888079537400 0000000000100008 00000001ffffffff 0000000000000000 [ 302.845103][ C0] page dumped because: kasan: bad access detected [ 302.851659][ C0] page_owner tracks the page as allocated [ 302.858424][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4198, ts 61534919273, free_ts 61421947583 [ 302.882928][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 302.889544][ C0] __alloc_pages+0x1ee/0x480 [ 302.894766][ C0] new_slab+0xc0/0x4b0 [ 302.898940][ C0] ___slab_alloc+0x80a/0xdd0 [ 302.904669][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 302.911266][ C0] pskb_expand_head+0x127/0x10f0 [ 302.916471][ C0] netlink_trim+0x180/0x220 [ 302.921257][ C0] netlink_broadcast_filtered+0x7c/0x1170 [ 302.927726][ C0] nlmsg_notify+0xec/0x1a0 [ 302.932702][ C0] fib_table_insert+0xd36/0x1bb0 [ 302.938633][ C0] fib_magic+0x2e1/0x3c0 [ 302.943170][ C0] fib_add_ifaddr+0x3f7/0x5e0 [ 302.948467][ C0] fib_netdev_event+0x35c/0x480 [ 302.954021][ C0] raw_notifier_call_chain+0xcb/0x160 [ 302.960019][ C0] __dev_notify_flags+0x194/0x300 [ 302.965613][ C0] dev_change_flags+0xe3/0x1a0 [ 302.971087][ C0] page last free stack trace: [ 302.976109][ C0] free_unref_page_prepare+0x637/0x6c0 [ 302.982351][ C0] free_unref_page+0x8f/0x2a0 [ 302.987566][ C0] __unfreeze_partials+0x1a5/0x200 [ 302.993241][ C0] put_cpu_partial+0x12d/0x190 [ 302.998381][ C0] qlist_free_all+0x35/0x90 [ 303.003307][ C0] kasan_quarantine_reduce+0x150/0x160 [ 303.008964][ C0] __kasan_slab_alloc+0x2f/0xd0 [ 303.014547][ C0] slab_post_alloc_hook+0x4c/0x380 [ 303.020250][ C0] kmem_cache_alloc_node+0x12d/0x2d0 [ 303.026235][ C0] __alloc_skb+0xf4/0x750 [ 303.030743][ C0] netlink_ack+0x372/0xb50 [ 303.035501][ C0] netlink_rcv_skb+0x27a/0x440 [ 303.040357][ C0] netlink_unicast+0x774/0x920 [ 303.045793][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 303.050645][ C0] __sys_sendto+0x46d/0x620 [ 303.055774][ C0] __x64_sys_sendto+0xda/0xf0 [ 303.061068][ C0] [ 303.063373][ C0] Memory state around the buggy address: [ 303.069423][ C0] ffff888079537300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.078979][ C0] ffff888079537380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.088586][ C0] >ffff888079537400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.097566][ C0] ^ [ 303.105087][ C0] ffff888079537480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.114046][ C0] ffff888079537500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.122617][ C0] ================================================================== [ 303.131617][ C0] Disabling lock debugging due to kernel taint [ 303.138595][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 303.146208][ C0] CPU: 0 PID: 7215 Comm: syz.0.687 Tainted: G B syzkaller #0 [ 303.155327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.165548][ C0] Call Trace: [ 303.168906][ C0] [ 303.171833][ C0] dump_stack_lvl+0x188/0x250 [ 303.176668][ C0] ? show_regs_print_info+0x20/0x20 [ 303.182041][ C0] ? load_image+0x400/0x400 [ 303.186814][ C0] panic+0x2e5/0x810 [ 303.190866][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 303.195904][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 303.202336][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 303.208743][ C0] ? _raw_spin_unlock+0x40/0x40 [ 303.214072][ C0] ? print_memory_metadata+0x314/0x400 [ 303.219821][ C0] ? rose_timer_expiry+0x470/0x490 [ 303.225127][ C0] check_panic_on_warn+0x80/0xa0 [ 303.230539][ C0] ? rose_timer_expiry+0x470/0x490 [ 303.235991][ C0] end_report+0x6d/0xf0 [ 303.240395][ C0] kasan_report+0x102/0x130 [ 303.245671][ C0] ? rose_timer_expiry+0x470/0x490 [ 303.251264][ C0] rose_timer_expiry+0x470/0x490 [ 303.256636][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 303.261859][ C0] call_timer_fn+0x17b/0x540 [ 303.266794][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 303.271986][ C0] ? __run_timers+0x800/0x800 [ 303.277598][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 303.283142][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 303.288412][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 303.294258][ C0] __run_timers+0x53e/0x800 [ 303.298928][ C0] ? detach_timer+0x2b0/0x2b0 [ 303.304099][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 303.310877][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 303.316188][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 303.322011][ C0] run_timer_softirq+0x63/0xf0 [ 303.327133][ C0] handle_softirqs+0x339/0x830 [ 303.332153][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 303.337539][ C0] ? do_softirq+0x210/0x210 [ 303.342203][ C0] __irq_exit_rcu+0x13b/0x230 [ 303.347552][ C0] ? irq_exit_rcu+0x20/0x20 [ 303.352788][ C0] irq_exit_rcu+0x5/0x20 [ 303.357347][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 303.363741][ C0] [ 303.367116][ C0] [ 303.370228][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 303.377510][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 303.385019][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 303.407016][ C0] RSP: 0018:ffffc900043978d8 EFLAGS: 00000206 [ 303.413161][ C0] RAX: ac38d9bd42d94f00 RBX: ffff88802a888000 RCX: ac38d9bd42d94f00 [ 303.422407][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 303.430480][ C0] RBP: 0000000000000000 R08: ffffc90004397b37 R09: ffffc90004397b00 [ 303.439068][ C0] R10: dffffc0000000000 R11: fffff52000872f67 R12: dffffc0000000000 [ 303.448078][ C0] R13: 0000000000000246 R14: ffffffff8c31eb00 R15: 00000000ffffffff [ 303.456785][ C0] ___might_sleep+0x9b/0x610 [ 303.461893][ C0] ? __might_sleep+0xf0/0xf0 [ 303.466835][ C0] ? verify_lock_unused+0x140/0x140 [ 303.472206][ C0] __might_fault+0x6b/0x110 [ 303.477140][ C0] _copy_from_user+0x29/0x170 [ 303.481978][ C0] ___sys_recvmsg+0x173/0x5c0 [ 303.486645][ C0] ? __sys_recvmsg+0x280/0x280 [ 303.491664][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 303.497176][ C0] ? __might_fault+0xb3/0x110 [ 303.502130][ C0] do_recvmmsg+0x382/0x850 [ 303.507154][ C0] ? __sys_recvmmsg+0x290/0x290 [ 303.512263][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 303.517590][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 303.522950][ C0] ? do_recvmmsg+0x850/0x850 [ 303.527612][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 303.533301][ C0] do_syscall_64+0x4c/0xa0 [ 303.538118][ C0] ? clear_bhb_loop+0x30/0x80 [ 303.543237][ C0] ? clear_bhb_loop+0x30/0x80 [ 303.548306][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.555327][ C0] RIP: 0033:0x7ff7faca2799 [ 303.560088][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.581783][ C0] RSP: 002b:00007ff7f8edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 303.590535][ C0] RAX: ffffffffffffffda RBX: 00007ff7faf1c090 RCX: 00007ff7faca2799 [ 303.599355][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 303.607787][ C0] RBP: 00007ff7fad38c99 R08: 0000000000000000 R09: 0000000000000000 [ 303.616404][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 303.625343][ C0] R13: 00007ff7faf1c128 R14: 00007ff7faf1c090 R15: 00007ffc22b25688 [ 303.634207][ C0] [ 303.638323][ C0] Kernel Offset: disabled [ 303.644167][ C0] Rebooting in 86400 seconds..