last executing test programs: 12.347982359s ago: executing program 1 (id=147): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(r0) 11.635517596s ago: executing program 1 (id=150): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") openat$pfkey(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 10.755821117s ago: executing program 4 (id=153): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) 10.473261374s ago: executing program 1 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c917", 0x9f, 0xffffffffffffffff) 6.051346092s ago: executing program 3 (id=168): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='>', 0x1}], 0x1}}], 0x1, 0x4c800) sendmmsg$alg(r1, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000005c0)="9c", 0x1}], 0x1, &(0x7f0000001600)=[@iv={0x28, 0x117, 0x2, 0x10, "40b600acc45410c2d5f1f7b3576047a6"}], 0x28}], 0x1, 0x20008090) 6.025183033s ago: executing program 0 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8004, &(0x7f00000000c0)={[{@shortname_win95}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@rodir}, {@fat=@discard}, {@shortname_winnt}]}, 0xfc, 0x259, &(0x7f0000000540)="$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") syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) capset(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 5.950622164s ago: executing program 4 (id=170): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x530, &(0x7f0000000e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 5.794824948s ago: executing program 0 (id=172): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, 0x0, 0x5, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8044) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000001, 0x3, 0x9, 0x11, 0x1, 0x6, 0xfc, 0x0, 0x4f, 0x0, 0x0, 0x6, 0xff, 0x2, 0x5}}) 5.70868781s ago: executing program 3 (id=173): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r1, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8407c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 5.613832572s ago: executing program 1 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) accept(r1, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x68}}, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r5 = socket$inet_smc(0x2b, 0x1, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 5.392108728s ago: executing program 4 (id=175): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x183201, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x1) 5.391770828s ago: executing program 0 (id=176): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0xb, 0x4000004, 0xff, 0x67aa27dfee1eef9f, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4001, 0xfffffffc}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c93012000e00050014fd0a00"], 0x17) syz_open_dev$dvb_dvr(0x0, 0x0, 0x800) 5.390968798s ago: executing program 3 (id=177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) 4.576273808s ago: executing program 3 (id=178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) 4.564619449s ago: executing program 2 (id=179): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) 4.375577123s ago: executing program 1 (id=180): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 4.325083104s ago: executing program 4 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) openat$uhid(0xffffff9c, &(0x7f00000002c0), 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000480)={&(0x7f0000000380)=""/207, 0xcf}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 3.792303317s ago: executing program 1 (id=182): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 3.792094847s ago: executing program 0 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) 3.160661532s ago: executing program 4 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c917", 0x9f, 0xffffffffffffffff) 3.110116314s ago: executing program 3 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000004, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x17, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x8100}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x5dba, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffff8, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x10000000, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xff, 0x9, 0x0, 0x10800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6c4e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x10000, 0x850, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 3.060511675s ago: executing program 2 (id=186): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x1b, 0x4, 0x105, 0x0}) 2.85135957s ago: executing program 0 (id=187): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000002500)=""/4096, 0x1000) 2.101518128s ago: executing program 2 (id=188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) 1.159603431s ago: executing program 2 (id=189): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x59}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.033127055s ago: executing program 2 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) accept(r1, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x68}}, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r5 = socket$inet_smc(0x2b, 0x1, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 980.353466ms ago: executing program 4 (id=191): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xef1e3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 193.230845ms ago: executing program 0 (id=192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xbc40) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 88.061867ms ago: executing program 2 (id=193): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r1, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001", 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=194): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2b, 0x1, 0x1) getpeername$packet(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x14, 0x200, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. syzkaller login: [ 57.785660][ T4175] cgroup: Unknown subsys name 'net' [ 57.912104][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.113112][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.752572][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 60.799064][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.867714][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.903123][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.973236][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.980449][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.988694][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.997051][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.004118][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.012356][ T4200] device bridge_slave_0 entered promiscuous mode [ 61.022843][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.034551][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.041880][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.049565][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.057371][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.064552][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.072464][ T4200] device bridge_slave_1 entered promiscuous mode [ 61.127974][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.135040][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.143632][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.157399][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.168276][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.184152][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.191388][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.199565][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.212737][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.229516][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.248637][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.255698][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.263822][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.279914][ T4200] team0: Port device team_slave_0 added [ 61.302442][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.313310][ T4200] team0: Port device team_slave_1 added [ 61.320271][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.327634][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.335325][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.359719][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.388999][ T4193] team0: Port device team_slave_0 added [ 61.396284][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.423464][ T4193] team0: Port device team_slave_1 added [ 61.430785][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.445267][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.452815][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.461513][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.469576][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.477110][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.503142][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.521238][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.528239][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.554257][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.573723][ T4188] team0: Port device team_slave_0 added [ 61.579828][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.587299][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.595249][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.617731][ T4188] team0: Port device team_slave_1 added [ 61.625067][ T4189] team0: Port device team_slave_0 added [ 61.633304][ T4189] team0: Port device team_slave_1 added [ 61.644001][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.651267][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.677354][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.690162][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.697203][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.723349][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.781241][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.797636][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.804780][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.831434][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.843037][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.850371][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.881866][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.896215][ T4200] device hsr_slave_0 entered promiscuous mode [ 61.903185][ T4200] device hsr_slave_1 entered promiscuous mode [ 61.917957][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.927629][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.934575][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.961170][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.972634][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.979867][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.005962][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.062903][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.069595][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.076173][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.084378][ T4193] Cannot create hsr debugfs directory [ 62.104293][ T4187] team0: Port device team_slave_0 added [ 62.120159][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.127449][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.134119][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.141869][ T4188] Cannot create hsr debugfs directory [ 62.155352][ T4187] team0: Port device team_slave_1 added [ 62.171588][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.178823][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.185819][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.193479][ T4189] Cannot create hsr debugfs directory [ 62.235643][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.242717][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.270258][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.285132][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.292263][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.318282][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.419479][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.426208][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.433092][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.441175][ T4187] Cannot create hsr debugfs directory [ 62.497899][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 62.507150][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 62.507555][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 62.545042][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 62.577042][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 62.652296][ T4200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.673983][ T4200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.682883][ T4200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.693003][ T4200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.722864][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.736195][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.754900][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.764093][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.811075][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.822732][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.864050][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.872918][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.918208][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.942446][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.965179][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.977685][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.999350][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.015260][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.058135][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.078148][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.088733][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.100548][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.108259][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.122597][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.134976][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.144925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.153358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.161798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.171043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.183925][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.198198][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.208800][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.218590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.229869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.239822][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.247127][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.255640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.264616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.273490][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.280596][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.288605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.298851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.307310][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.314576][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.322331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.331728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.340265][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.347663][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.355562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.364527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.406230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.420189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.429716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.438645][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.445724][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.456259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.465480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.474950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.484301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.493445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.503292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.511919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.521291][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.528396][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.536230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.550030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.558879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.566653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.575607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.613073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.622828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.631995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.641493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.650313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.659558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.668864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.677607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.686154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.694883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.705796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.714502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.732564][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.746616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.757374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.765883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.775194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.788544][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.810422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.818490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.827137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.835645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.844463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.855709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.864533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.875259][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.888974][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.915400][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.930626][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.945833][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.966380][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.009324][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.043097][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.052537][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.059663][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.069988][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.079289][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.088474][ T3065] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.095640][ T3065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.135541][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.147524][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.164423][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.174352][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.184548][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.198546][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.209565][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.223776][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.244480][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.252642][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.264238][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.273204][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.281258][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.290147][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.298510][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.306139][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.313941][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.321535][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.346769][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.358542][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.366277][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.377020][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.385369][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.392486][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.402424][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.411408][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.420455][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.429408][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.438153][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.445221][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.455650][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.486244][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.501358][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.513295][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.529412][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.540380][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.549194][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.556638][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.564235][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.577197][ T4247] Bluetooth: hci1: command 0x041b tx timeout [ 64.580787][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.590418][ T4247] Bluetooth: hci0: command 0x041b tx timeout [ 64.590627][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 64.596510][ T4247] Bluetooth: hci2: command 0x041b tx timeout [ 64.625863][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.636618][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.649472][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.657979][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 64.665392][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.675630][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.685979][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.694910][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.703832][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.712752][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.721799][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.733556][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.770924][ T4200] device veth0_vlan entered promiscuous mode [ 64.783322][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.791435][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.799745][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.809888][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.819666][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.828265][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.845103][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.873253][ T4200] device veth1_vlan entered promiscuous mode [ 64.892337][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.901247][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.909848][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.919125][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.928992][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.938456][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.946761][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.955351][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.965560][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.975910][ T4193] device veth0_vlan entered promiscuous mode [ 64.996100][ T4189] device veth0_vlan entered promiscuous mode [ 65.013514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.023445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.033717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.043550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.064423][ T4200] device veth0_macvtap entered promiscuous mode [ 65.079726][ T4193] device veth1_vlan entered promiscuous mode [ 65.091530][ T4189] device veth1_vlan entered promiscuous mode [ 65.107169][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.115363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.126323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.136169][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.148248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.159510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.172485][ T4200] device veth1_macvtap entered promiscuous mode [ 65.193562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.201833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.211590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.219362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.250334][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.260510][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.271632][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.281500][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.290999][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.301000][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.311027][ T4188] device veth0_vlan entered promiscuous mode [ 65.328356][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.353054][ T4189] device veth0_macvtap entered promiscuous mode [ 65.365647][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.375602][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.391387][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.401227][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.410418][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.419814][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.429968][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.444197][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.453226][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.462623][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.471951][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.486011][ T4189] device veth1_macvtap entered promiscuous mode [ 65.506016][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.515020][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.526165][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.547778][ T4188] device veth1_vlan entered promiscuous mode [ 65.557779][ T4193] device veth0_macvtap entered promiscuous mode [ 65.612055][ T4193] device veth1_macvtap entered promiscuous mode [ 65.634913][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.647673][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.655974][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.664499][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.672958][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.682398][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.705506][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.714644][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.725711][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.736800][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.750743][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.760421][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.771609][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.782517][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.794229][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.806193][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.816563][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.830613][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.841931][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.850442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.859891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.869113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.878145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.887719][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.896316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.907049][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.918164][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.928246][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.940643][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.952412][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.966424][ T4188] device veth0_macvtap entered promiscuous mode [ 65.982482][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.992350][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.001520][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.011810][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.028471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.038081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.048201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.057553][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.065721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.074303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.083199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.102549][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.111723][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.120645][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.130923][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.158758][ T4188] device veth1_macvtap entered promiscuous mode [ 66.186533][ T4187] device veth0_vlan entered promiscuous mode [ 66.200722][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.212955][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.235927][ T4187] device veth1_vlan entered promiscuous mode [ 66.257293][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.269197][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.281664][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.293473][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.305536][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.315926][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.326521][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.338936][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.371988][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.383700][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.395715][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.409006][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.420413][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.432150][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.442036][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.454280][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.465434][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.476361][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.485599][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.495098][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.505657][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.544895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.553974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.564969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.575334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.610671][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.619110][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.636551][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.644603][ T4187] device veth0_macvtap entered promiscuous mode [ 66.645356][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.659535][ T4187] device veth1_macvtap entered promiscuous mode [ 66.667364][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 66.675212][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 66.680334][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.686158][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 66.690492][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.698360][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 66.708934][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.721199][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.741723][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.748683][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 66.766167][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.780030][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.792794][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.803591][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.814576][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.824846][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.836043][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.846434][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.857842][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.873489][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.889504][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.891281][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.910687][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.920160][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.931085][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.947086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.968507][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.980964][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.991614][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.002547][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.029550][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.041463][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.046148][ T4269] Zero length message leads to an empty skb [ 67.052778][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.071462][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.083405][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.095842][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.105391][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.115016][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.124853][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.258201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.279030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.305511][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.407732][ T4274] ODEBUG: Out of memory. ODEBUG disabled [ 68.010916][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.079241][ T4274] syz.0.1 (4274): drop_caches: 2 [ 68.082267][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.112947][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.134984][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.150480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.266154][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 68.336286][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.357149][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.369399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.411329][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.447374][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.454936][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.468624][ T4287] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.492936][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.524003][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.542100][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.893108][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 69.040175][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 69.196918][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 69.207956][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 69.342165][ T4300] dummy_hcd dummy_hcd.0: remove, state 4 [ 69.353177][ T4300] usb usb1: USB disconnect, device number 1 [ 69.462279][ T4300] dummy_hcd dummy_hcd.0: stopped [ 69.467674][ T4304] loop4: detected capacity change from 0 to 128 [ 69.475575][ T4300] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 69.985169][ T4306] syz.1.14 (4306): drop_caches: 2 [ 70.144658][ T4304] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.300995][ T4304] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.865165][ T4340] netlink: 92 bytes leftover after parsing attributes in process `syz.2.28'. [ 70.874741][ T4340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.28'. [ 70.896216][ T4304] overlayfs: missing 'lowerdir' [ 71.384758][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.391525][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726300][ T4352] loop1: detected capacity change from 0 to 2048 [ 71.932501][ T4352] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 72.081342][ T4352] EXT4-fs (loop1): shut down requested (2) [ 73.087062][ T4247] syzkaller0: tun_net_xmit 76 [ 73.095606][ T4247] syzkaller0: tun_net_xmit 48 [ 73.107121][ T4230] syzkaller0: tun_net_xmit 76 [ 73.213910][ T4362] netlink: 27 bytes leftover after parsing attributes in process `syz.0.33'. [ 73.263033][ T4368] syz.3.35 (4368): drop_caches: 2 [ 73.609041][ T4384] mmap: syz.3.41 (4384) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 73.707388][ T4384] loop3: detected capacity change from 0 to 512 [ 74.716547][ T4384] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 75.121273][ T4384] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.503611][ T4421] loop1: detected capacity change from 0 to 128 [ 76.513985][ T4417] loop3: detected capacity change from 0 to 512 [ 76.627321][ T4421] ======================================================= [ 76.627321][ T4421] WARNING: The mand mount option has been deprecated and [ 76.627321][ T4421] and is ignored by this kernel. Remove the mand [ 76.627321][ T4421] option from the mount to silence this warning. [ 76.627321][ T4421] ======================================================= [ 76.770762][ T4230] syzkaller0: tun_net_xmit 76 [ 76.776154][ T4230] syzkaller0: tun_net_xmit 48 [ 76.809938][ T21] syzkaller0: tun_net_xmit 76 [ 78.605378][ T4468] loop4: detected capacity change from 0 to 128 [ 78.613016][ T4467] loop0: detected capacity change from 0 to 512 [ 78.743727][ T4467] EXT4-fs (loop0): Unrecognized mount option "uid>00000000000000000000" or missing value [ 78.786266][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 78.840954][ T4468] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.129922][ T4476] syz.4.63 (4476) used greatest stack depth: 21040 bytes left [ 80.066789][ C1] sched: RT throttling activated [ 83.035018][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 83.051862][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 83.062003][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 83.072540][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 83.082594][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 83.124870][ T4531] loop1: detected capacity change from 0 to 512 [ 83.582298][ T4535] loop0: detected capacity change from 0 to 1024 [ 83.600492][ T4531] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.613935][ T4531] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.663067][ T4531] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 2: comm syz.1.76: invalid block [ 83.675262][ T4531] EXT4-fs (loop1): Remounting filesystem read-only [ 83.682288][ T4531] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.76: couldn't read orphan inode 11 (err -117) [ 83.696344][ T4531] EXT4-fs (loop1): Remounting filesystem read-only [ 83.702956][ T4531] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,block_validity,. Quota mode: none. [ 83.779177][ T4535] overlayfs: upper fs does not support tmpfile. [ 85.092925][ T4559] loop4: detected capacity change from 0 to 128 [ 85.105247][ T4560] loop2: detected capacity change from 0 to 512 [ 85.890516][ T4564] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.957577][ T4559] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.239472][ T4559] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 86.296759][ T4559] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.624629][ T4581] loop3: detected capacity change from 0 to 128 [ 86.673480][ T4560] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 86.696990][ T4560] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.739275][ T1108] cfg80211: failed to load regulatory.db [ 86.935146][ T4560] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.85: corrupted xattr block 33 [ 86.978105][ T4594] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.013285][ T4560] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 87.069292][ T4597] loop3: detected capacity change from 0 to 256 [ 87.131609][ T4597] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 87.356469][ T4602] loop1: detected capacity change from 0 to 512 [ 87.894498][ T4602] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.952633][ T4602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.95: bg 0: block 63: padding at end of block bitmap is not set [ 88.948495][ T4602] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.95: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 89.076614][ T4602] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.95: ea_inode dec ref err=-117 [ 89.122949][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 89.159963][ T4602] EXT4-fs (loop1): 1 orphan inode deleted [ 89.165732][ T4602] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,data_err=ignore,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 90.792820][ T4637] syz.3.103 (4637) used greatest stack depth: 19728 bytes left [ 92.255318][ T4657] capability: warning: `syz.4.106' uses deprecated v2 capabilities in a way that may be insecure [ 92.396993][ T4656] loop1: detected capacity change from 0 to 512 [ 92.861914][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.102880][ T4656] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.915535][ T4666] capability: warning: `syz.3.108' uses 32-bit capabilities (legacy support in use) [ 93.958577][ T4670] loop1: detected capacity change from 0 to 1024 [ 94.009190][ T4670] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 94.797776][ T4684] infiniband syz2: set down [ 94.802601][ T4684] infiniband syz2: added ipvlan0 [ 94.835070][ T4684] infiniband syz2: Couldn't open port 1 [ 94.875646][ T4684] RDS/IB: syz2: added [ 94.880224][ T4684] smc: adding ib device syz2 with port count 1 [ 94.886649][ T4684] smc: ib device syz2 port 1 has pnetid [ 95.895863][ T4691] device syzkaller0 entered promiscuous mode [ 96.095396][ T4694] loop3: detected capacity change from 0 to 4096 [ 96.534253][ T4702] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 97.135295][ T4711] loop0: detected capacity change from 0 to 256 [ 97.141982][ T4709] loop9: detected capacity change from 0 to 524287936 [ 97.163481][ T4694] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: writeback. [ 97.219874][ T4711] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.237230][ T4715] loop4: detected capacity change from 0 to 128 [ 97.331919][ T4715] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 97.396656][ T4715] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.517696][ T4725] loop2: detected capacity change from 0 to 512 [ 97.653675][ T4728] ptrace attach of ""[4729] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4728] [ 98.235180][ T4725] EXT4-fs (loop2): Unrecognized mount option "uid>00000000000000000000" or missing value [ 98.505040][ T26] audit: type=1800 audit(1785281192.844:2): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.118" name="file1" dev="loop0" ino=1048591 res=0 errno=0 [ 98.526050][ T26] audit: type=1800 audit(1785281192.874:3): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.118" name="file1" dev="loop0" ino=1048591 res=0 errno=0 [ 99.032198][ T3853] device veth1_vlan left promiscuous mode [ 99.099155][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.345670][ T4744] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.084878][ T4759] netlink: 48 bytes leftover after parsing attributes in process `syz.3.130'. [ 100.175230][ T4766] loop4: detected capacity change from 0 to 128 [ 100.311717][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 100.329238][ T4759] loop3: detected capacity change from 0 to 512 [ 100.385387][ T4766] FAT-fs (loop4): Filesystem has been set read-only [ 100.519466][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 100.752954][ T4759] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 101.001094][ T4759] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 101.029738][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.040076][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.049047][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.058014][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.069504][ T4759] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.130: Corrupt directory, running e2fsck is recommended [ 101.117659][ T4759] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 101.126155][ T4759] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.130: corrupted in-inode xattr [ 101.131312][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.182481][ T4782] loop2: detected capacity change from 0 to 512 [ 101.223837][ T4759] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.130: couldn't read orphan inode 15 (err -117) [ 101.264705][ T4759] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 101.288455][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.302296][ T4782] EXT4-fs (loop2): Unrecognized mount option "uid>00000000000000000000" or missing value [ 101.347075][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.497241][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.564569][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.609407][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.679651][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.811443][ T4798] loop1: detected capacity change from 0 to 512 [ 102.196129][ T4803] syz.3.139 (4803): drop_caches: 2 [ 102.384108][ T4798] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 102.566927][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.622638][ T4807] SET target dimension over the limit! [ 102.647092][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.670671][ T4798] EXT4-fs (loop1): failed to initialize system zone (-117) [ 102.687333][ T4798] EXT4-fs (loop1): mount failed [ 102.712865][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.736378][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.823094][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.883186][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.087746][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.450849][ T4823] loop2: detected capacity change from 0 to 128 [ 103.545535][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.554583][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.581635][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.640946][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.652460][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.661731][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.670824][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.679840][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 103.703447][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.077123][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.182376][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.216118][ T4836] loop1: detected capacity change from 0 to 2048 [ 104.268798][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.363613][ T4836] Alternate GPT is invalid, using primary GPT. [ 104.365571][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.386519][ T4836] loop1: p1 p2 p3 [ 104.548671][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.557578][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.566511][ T4766] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 104.576969][ T26] audit: type=1800 audit(1785281198.924:4): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.124" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 104.585964][ T4846] loop0: detected capacity change from 0 to 512 [ 104.599188][ T4842] syz.1.150 uses obsolete (PF_INET,SOCK_PACKET) [ 104.667778][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 104.680641][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 104.691282][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 104.702412][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 104.712627][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 104.749605][ T4847] loop2: detected capacity change from 0 to 512 [ 104.879862][ T4847] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.919486][ T4846] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.026540][ T4847] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 2: comm syz.2.149: invalid block [ 105.039056][ T4847] EXT4-fs (loop2): Remounting filesystem read-only [ 105.045841][ T4847] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.149: couldn't read orphan inode 11 (err -117) [ 105.066023][ T4847] EXT4-fs (loop2): Remounting filesystem read-only [ 105.072650][ T4847] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,block_validity,. Quota mode: none. [ 105.104011][ T3560] Alternate GPT is invalid, using primary GPT. [ 105.110413][ T3560] loop1: p1 p2 p3 [ 105.124482][ T4846] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.138747][ T4846] EXT4-fs (loop0): 1 truncate cleaned up [ 105.145288][ T4846] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 106.082824][ T4862] loop2: detected capacity change from 0 to 7 [ 106.105132][ T4189] Dev loop2: unable to read RDB block 7 [ 106.117446][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 106.130950][ T4592] udevd[4592]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 106.140400][ T4189] loop2: AHDI p1 p2 p3 [ 106.149155][ T4189] loop2: partition table partially beyond EOD, truncated [ 106.158948][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 106.211492][ T4189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 106.232854][ T4189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 106.393513][ T4862] Dev loop2: unable to read RDB block 7 [ 106.428685][ T4862] loop2: AHDI p1 p2 p3 [ 106.486207][ T4862] loop2: partition table partially beyond EOD, truncated [ 106.526022][ T4862] loop2: p1 start 1601398130 is beyond EOD, truncated [ 106.624871][ T4862] loop2: p2 start 1702059890 is beyond EOD, truncated [ 106.672560][ T3560] Dev loop2: unable to read RDB block 7 [ 106.722578][ T3560] loop2: AHDI p1 p2 p3 [ 106.852095][ T3560] loop2: partition table partially beyond EOD, truncated [ 106.952484][ T3560] loop2: p1 start 1601398130 is beyond EOD, truncated [ 106.964510][ T3560] loop2: p2 start 1702059890 is beyond EOD, truncated [ 108.240551][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 108.253282][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 108.263436][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 108.273815][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 108.283197][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.918893][ T4901] device bridge1 entered promiscuous mode [ 109.989199][ T4903] loop0: detected capacity change from 0 to 128 [ 110.078928][ T4910] loop4: detected capacity change from 0 to 512 [ 110.165311][ T4910] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 110.198155][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 110.274203][ T4910] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.170: iget: bad i_size value: 360287970189639680 [ 110.354606][ T4910] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.170: couldn't read orphan inode 15 (err -117) [ 110.377562][ T4910] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.433434][ T4910] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.170: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 110.494510][ T4913] team0: Port device team_slave_0 removed [ 113.806816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 113.834387][ T4969] loop0: detected capacity change from 0 to 4096 [ 113.836831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 113.911375][ T4969] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.060369][ T4969] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.812708][ T4969] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 115.052240][ T4986] loop4: detected capacity change from 0 to 512 [ 115.065493][ T4969] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 115.752714][ T4986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.815005][ T4986] EXT4-fs (loop4): 1 truncate cleaned up [ 115.826791][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 115.846687][ T4986] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 115.976824][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 115.996814][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 116.006800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 116.016800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 116.026797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 116.036803][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 116.108089][ T4996] gadgetfs: bound to dummy_udc driver [ 116.113943][ T4996] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 116.125891][ T4996] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 116.135038][ T4996] CPU: 0 PID: 4996 Comm: syz.2.193 Not tainted syzkaller #0 [ 116.142332][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.152419][ T4996] RIP: 0010:dummy_udc_start+0xb7/0x1d0 [ 116.157902][ T4996] Code: 00 00 ff 24 c5 c0 3f d5 8a e8 f5 8e 42 fb eb 13 e8 ee 8e 42 fb eb 0c e8 e7 8e 42 fb eb 05 e8 e0 8e 42 fb 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 8a b1 87 fb 4d 8b 36 4c 89 f7 e8 [ 116.177718][ T4996] RSP: 0018:ffffc900033bfb00 EFLAGS: 00010246 [ 116.183773][ T4996] RAX: 0000000000000000 RBX: ffffffff8cf23920 RCX: 0000000000080000 [ 116.191731][ T4996] RDX: ffffc9000ec5d000 RSI: 0000000000009bc6 RDI: 0000000000009bc7 [ 116.199688][ T4996] RBP: ffffffff863671f0 R08: ffff888028dd3b80 R09: 0000000000000004 [ 116.207653][ T4996] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 116.215612][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 116.223574][ T4996] FS: 00007f98cb2566c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 116.232539][ T4996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.239113][ T4996] CR2: 00007f954f2dc000 CR3: 00000000592e6000 CR4: 00000000003506f0 [ 116.247098][ T4996] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.255053][ T4996] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.263024][ T4996] Call Trace: [ 116.266298][ T4996] [ 116.269230][ T4996] udc_bind_to_driver+0x2b5/0x5f0 [ 116.269261][ T4996] usb_gadget_probe_driver+0x1fb/0x380 [ 116.269281][ T4996] dev_config+0xe3c/0x1250 [ 116.269300][ T4996] ? rcu_read_lock_any_held+0xb0/0x130 [ 116.269319][ T4996] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 116.269335][ T4996] ? end_current_label_crit_section+0x14b/0x170 [ 116.269353][ T4996] ? ep0_read+0x1870/0x1870 [ 116.269369][ T4996] ? common_file_perm+0x171/0x1c0 [ 116.269387][ T4996] ? ep0_read+0x1870/0x1870 [ 116.269403][ T4996] vfs_write+0x304/0xd70 [ 116.269421][ T4996] ? file_end_write+0x250/0x250 [ 116.269442][ T4996] ? mutex_lock_nested+0x17/0x20 [ 116.269460][ T4996] ? __fdget_pos+0x2bf/0x370 [ 116.269475][ T4996] ? ksys_write+0x70/0x260 [ 116.269491][ T4996] ksys_write+0x153/0x260 [ 116.269507][ T4996] ? __ia32_sys_read+0x80/0x80 [ 116.269525][ T4996] ? lockdep_hardirqs_on+0x94/0x140 [ 116.269545][ T4996] do_syscall_64+0x4c/0xa0 [ 116.269559][ T4996] ? clear_bhb_loop+0x30/0x80 [ 116.269575][ T4996] ? clear_bhb_loop+0x30/0x80 [ 116.269591][ T4996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.269608][ T4996] RIP: 0033:0x7f98cd01ee99 [ 116.269623][ T4996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.269636][ T4996] RSP: 002b:00007f98cb256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.269655][ T4996] RAX: ffffffffffffffda RBX: 00007f98cd2a7090 RCX: 00007f98cd01ee99 [ 116.269667][ T4996] RDX: 000000000000001f RSI: 0000200000005c40 RDI: 0000000000000005 [ 116.269678][ T4996] RBP: 00007f98cd0b4eaf R08: 0000000000000000 R09: 0000000000000000 [ 116.269688][ T4996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.269698][ T4996] R13: 00007f98cd2a7128 R14: 00007f98cd2a7090 R15: 00007ffe2ce90d48 [ 116.269715][ T4996] [ 116.269732][ T4996] Modules linked in: [ 116.299107][ T4996] ---[ end trace 1383b99aed8bf39a ]--- [ 116.299123][ T4996] RIP: 0010:dummy_udc_start+0xb7/0x1d0 [ 116.299149][ T4996] Code: 00 00 ff 24 c5 c0 3f d5 8a e8 f5 8e 42 fb eb 13 e8 ee 8e 42 fb eb 0c e8 e7 8e 42 fb eb 05 e8 e0 8e 42 fb 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 8a b1 87 fb 4d 8b 36 4c 89 f7 e8 [ 116.299163][ T4996] RSP: 0018:ffffc900033bfb00 EFLAGS: 00010246 [ 116.299184][ T4996] RAX: 0000000000000000 RBX: ffffffff8cf23920 RCX: 0000000000080000 [ 116.299205][ T4996] RDX: ffffc9000ec5d000 RSI: 0000000000009bc6 RDI: 0000000000009bc7 [ 116.299217][ T4996] RBP: ffffffff863671f0 R08: ffff888028dd3b80 R09: 0000000000000004 [ 116.299229][ T4996] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 116.299241][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 116.299252][ T4996] FS: 00007f98cb2566c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 116.299268][ T4996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.299280][ T4996] CR2: 00007f98cb235d58 CR3: 00000000592e6000 CR4: 00000000003506f0 [ 116.299293][ T4996] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.299400][ T4996] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.299421][ T4996] Kernel panic - not syncing: Fatal exception [ 116.299753][ T4996] Kernel Offset: disabled [ 116.612166][ T4996] Rebooting in 86400 seconds..