last executing test programs: 3m33.959603755s ago: executing program 0 (id=61): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) kexec_load(0x8, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000497000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x7) 3m32.309417806s ago: executing program 0 (id=62): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x2000c000) syz_open_procfs$userns(0xffffffffffffffff, 0x0) sysinfo(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) fremovexattr(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffff3d4, 0x200ffffd, 0x8, 0xfffffff2, 0x9, "4deb5c000020000000000001002000", 0x8}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 3m23.905970546s ago: executing program 0 (id=76): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0x40045613, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x824800, &(0x7f0000000d40)={[{@nodelalloc}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@i_version}, {@test_dummy_encryption}, {@lazytime}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x5}}, {@resuid}, {@i_version}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(r0, 0x0, 0x1b9c03, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183042, 0x25) mount(0x0, 0x0, &(0x7f00000001c0)='ecryptfs\x00', 0x7042c, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x198, 0x3b0, 0x198, 0x0, 0x230, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x2a}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x40}}}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x2, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 3m19.185853434s ago: executing program 0 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0}, 0x0) poll(0x0, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r4, 0x1) 3m15.683037711s ago: executing program 0 (id=85): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/llc/socket\x00') getdents64(r2, &(0x7f0000000000)=""/64, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000014c0)={0xc, {"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", 0x1000}}, 0x1006) 3m9.048298307s ago: executing program 0 (id=90): sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20040000) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0) 2m53.770954569s ago: executing program 32 (id=90): sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20040000) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0) 20.886113838s ago: executing program 2 (id=307): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, 0x0) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) 18.299528393s ago: executing program 4 (id=310): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff7fff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) brk(0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) 16.677763973s ago: executing program 3 (id=311): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x640b1}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), 0x0}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000e0000002000000000000000000003730e3ccd3f7aaa877550000000107144e2300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001000000000000000000480003006465666c61746500"/219], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) 16.43219402s ago: executing program 4 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) sched_setparam(r0, &(0x7f0000000000)=0x401) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x7a680000) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_clone(0x91902000, &(0x7f0000000300)="2a3ea9481b6c115f4a66e5969cd1cf956faf99ab7f966e079c83b28c2f08925572172bdac88510de2b4ad2db5fced5408af82269045d43e43ef3e51f100b797ed7f96e69ffc9e994586f1797b751443af718a6fcf7dc0965967650286a33ddcd42390405", 0x64, &(0x7f0000000380), &(0x7f00000003c0), 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r5, 0x0) 14.967620556s ago: executing program 3 (id=313): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) fcntl$setflags(r0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(0x0) r3 = fanotify_init(0x200, 0x48801) fanotify_mark(r3, 0x1, 0x1001, 0xffffffffffffffff, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 14.940738217s ago: executing program 4 (id=315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4c880) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.172043671s ago: executing program 4 (id=316): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x40601) r4 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) read$char_usb(0xffffffffffffffff, &(0x7f0000000480)=""/244, 0xf4) r5 = fsmount(r4, 0x0, 0x6) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r6, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x2}, {r6, 0x1}], 0x2, 0x0, 0x0, 0x0) fchdir(r5) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 11.716315908s ago: executing program 2 (id=318): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0) read$watch_queue(r4, &(0x7f00000002c0)=""/37, 0x25) add_key(&(0x7f0000000440)='pkcs7_test\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) fcntl$notify(r0, 0x402, 0x22) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) 10.731624872s ago: executing program 1 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) syz_emit_ethernet(0xbd, &(0x7f0000000240)={@local, @random="003f1546fb7c", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0xaf, 0x2, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9b, 0x0, @wg=@data={0x4, 0x400, 0x0, "6d9c3e40ae4379539de05d7dcf3176edda1112f1f2354068fddcfe7f9da5e4c31672b2a5e5f25c8e69a15ec528081309d4ebef1b9492a201882ba0fe6622e2f737023f34fc479e293d81dd900c0806be2977aa9cf41210385b821212eea6126916fdaef40b73879de5085dde6f3481a3111045d0ddf49f189a6575563959b252c5a9b3"}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x80000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "a81ef5037a313d882834a7e8543a38267bdcc88850c8d70b5b795116fd55e6a21c2eec400941ac9bb951f967a050f260b917f60c9304e1cba8fb5cd69d56a69f", 0x2a}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffd, r6, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000440)={0xfffffffe, 0x2, {0x3, 0x0, 0x401, 0x3, 0xfffffff9}, 0x7}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r9 = fcntl$dupfd(r8, 0x406, r8) write$tun(r9, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_GET_PACK_ID(r9, 0x227c, &(0x7f0000000100)) 10.607918025s ago: executing program 3 (id=320): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmmsg$inet_sctp(r0, &(0x7f00000064c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="cd", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000000000000ac1414aa00000000"], 0x18}], 0x1, 0x0) 9.758361926s ago: executing program 1 (id=321): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockname$packet(r7, 0x0, 0x0) bind$alg(r5, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) accept$alg(r5, 0x0, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$FE_READ_SIGNAL_STRENGTH(0xffffffffffffffff, 0x80026f47, 0x0) 8.733138442s ago: executing program 2 (id=322): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000228000022bbd7000fcdbdf250a1080050900000516000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20008001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x800) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x3, 0x6, 0x34325241, 0x7, 0x6571, 0x6, 0x0, 0x2, 0x1, 0x3, 0x0, 0x4}}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000140)) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x0, 0x58, 0xff}, 0x10) setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, 0x0, 0x0) 7.299505808s ago: executing program 2 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, 0x0, 0x10ada85e65c25359, 0x70bd25, 0x25dfdbfd, {{0x6b}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x2004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x240008c4) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x20000044) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 7.299303988s ago: executing program 3 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x401}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x20, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) tkill(r4, 0x27) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x20, 0x1, 0x7ff, 0x6, 0x0, 0x9, 0x0, 0x7fff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) symlink(0x0, &(0x7f0000003400)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f00000002c0)={0x1, 0x8, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "deb926b282d41302f26892ddb0671d8b"}) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 7.294557718s ago: executing program 1 (id=325): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f0000000ac0)='\x02\x00\x00\x06\xd7\xb5\xe9\xc4\xee\xb0\x89c\'\xba\xb1\x81\xc1v\xbb\xb43O\x8a\x00\x80f\xa5\x13\x04S?;\x83\xe6\x9c\x0e \xfa9\xceH\xa5\xf3E\x15\x96&\x81\x81\x83\'.\xe7\xfa\x83\x0fvh\xac&\x92\x11N\x8bn\x9d\x94\xdb^\xa9q\xd5-.\xef8c\xc4|\x1c\x86]m\xe4H>K\x85\xc7\xd0_\x7f\xb50\x97\xa2\x99\xe6\xd4\xcf\xcapi\xf5\xfe!\xdb\xbeh\xf9x\xe8(\xcbg\xacH\x9b\x9br\x17\xa7\x95\x8a\xad\xfb\xca\x87\x04\xe6\xb0\xe6\xbe\xf28\xc9\f\xb1\xfaWr0\xb9:\n?\x8a\x82\x9bq\xad\x89\xd9\x88QY\xb5\xb5\xa3\xd71\xd6\xff\xac\xdc\xf8L\x8e\xf6\x8d\x9a3\xf0w\xc0\x89\xeb\xfb\x9e-\xf1=\x10\xc2\xff\xdb\x9d\xe4[\x90q\a\xc8\xeb\x1c\x1d\xa6\x8dL@!\xd2}E\x93\xf5\xb0\x1au?\xdf\x03b\x11\x8e\xb0\x91*\xad{Pdg\xe0uk}\x8f\x8c\xfe\xf7\xb4\xf8\x1at*\x98\x90\xc3\xd09b)p\xc6]\b-') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x47, [0x7ffe, 0x9, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x2000000, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x1, 0x2, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x0, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x5, 0x7, 0x10001, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0xfffffffc, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x20000a, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x7, 0xbb31, 0x3, 0xb, 0x80005, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0x7, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0x93d]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x180000) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0xfd, 0x6, @multicast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x2400000c}, 0x4048855) close(0xffffffffffffffff) 5.896446603s ago: executing program 1 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0xf7e, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x200, 0x0, 0x0) getsockname(r3, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r4, &(0x7f0000000180)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000180), &(0x7f0000000080), 0x0) 5.232404089s ago: executing program 2 (id=327): r0 = socket$rxrpc(0x21, 0x2, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80003, 0xff) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x6, 0x7fffffffffffffff}) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setresgid(0xee00, 0xee01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) recvfrom(r2, 0x0, 0x0, 0x2002, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x4000, 0x35ce9dbc6723c08f, &(0x7f0000000080)) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000010000000100000002000000ae508e486f8cadaf5b12953a54abe82dfc18b7cbf388635bc2b5ee773ca25264e94e8907a093d832532296658ac7240534"], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$kcm(r6, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=ANY=[], 0x2560}, 0x20000880) 3.61725365s ago: executing program 1 (id=328): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0xffff, 0x2]) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)="7a67b6", 0x3}], 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000340)=ANY=[]) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090408000000000d0000000000000008000f0001000000", 0x24) 3.455888544s ago: executing program 4 (id=329): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000006c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) listen(r1, 0x400021) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x810) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', r4, r5) write(r3, &(0x7f0000000380)='file0', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000002640)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x86) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x18) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x1, 0x1000, 0xc, 0x0, 0x58, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000206d0427c200000000000109022d00010000300909040000020300020009214005fc01221500090581031000068102090502"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r6) r7 = openat(r2, &(0x7f00000025c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x400200, 0xa1) write(r7, 0x0, 0x0) 3.424109974s ago: executing program 3 (id=331): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = shmget(0x0, 0x1000, 0x2, &(0x7f0000871000/0x1000)=nil) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000000000000000a00"], 0x24}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xfffff073) shmctl$IPC_INFO(r7, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) getsockname$packet(r0, 0x0, &(0x7f00000003c0)) 2.321969912s ago: executing program 3 (id=332): r0 = socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') exit(0xffff) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 1.063966184s ago: executing program 4 (id=333): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) socket(0x1e, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000453000/0x1000)=nil, 0x1000, 0x12) madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x3450, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000700000000000000000000800c00078008001200000000000500010006000000050005000a00000005000400000000000900020073797a31000000001100030068"], 0x58}, 0x1, 0x0, 0x0, 0x40845}, 0x8404) r4 = syz_open_dev$sndctrl(0x0, 0xba, 0x28c102) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000500)={0x9, 0x80000001, 0xbd, 0x2, '\x00', '\x00', '\x00', 0x9, 0x80000001, 0x7, 0x100, "65a2506851b13540ecd55d6dcb0dd9c6"}) madvise(&(0x7f0000bc0000/0x3000)=nil, 0x3000, 0xc) keyctl$session_to_parent(0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) 0s ago: executing program 1 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 74.615964][ T4260] cgroup: Unknown subsys name 'net' [ 74.719891][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.278724][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.101482][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.111407][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.119357][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.127925][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.136786][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.141362][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.145670][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.152105][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.160145][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.166236][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.173803][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.181652][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.187568][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.194089][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.201724][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.216110][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.217315][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.230864][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.239090][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.239805][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.246899][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.254140][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.260914][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.268910][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.275256][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.282387][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.288670][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.303417][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.310851][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.347951][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.737192][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 78.848216][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 78.893547][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.901415][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.910018][ T4276] device bridge_slave_0 entered promiscuous mode [ 78.924476][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.932290][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.940703][ T4276] device bridge_slave_1 entered promiscuous mode [ 78.955352][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 78.996050][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 79.020537][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.041125][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 79.055476][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.122517][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.129649][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.137804][ T4273] device bridge_slave_0 entered promiscuous mode [ 79.158077][ T4276] team0: Port device team_slave_0 added [ 79.173682][ T4276] team0: Port device team_slave_1 added [ 79.191980][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.199226][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.208297][ T4273] device bridge_slave_1 entered promiscuous mode [ 79.263602][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.270817][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.279004][ T4279] device bridge_slave_0 entered promiscuous mode [ 79.287843][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.298569][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.325035][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.355563][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.362986][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.374164][ T4279] device bridge_slave_1 entered promiscuous mode [ 79.382004][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.389493][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.416300][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.428062][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.437833][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.446305][ T4275] device bridge_slave_0 entered promiscuous mode [ 79.456704][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.468450][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.498495][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.505842][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.514002][ T4275] device bridge_slave_1 entered promiscuous mode [ 79.543668][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.587183][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.596113][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.606793][ T4282] device bridge_slave_0 entered promiscuous mode [ 79.617425][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.631476][ T4276] device hsr_slave_0 entered promiscuous mode [ 79.638338][ T4276] device hsr_slave_1 entered promiscuous mode [ 79.647172][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.660160][ T4273] team0: Port device team_slave_0 added [ 79.666900][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.674479][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.683198][ T4282] device bridge_slave_1 entered promiscuous mode [ 79.705981][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.716647][ T4273] team0: Port device team_slave_1 added [ 79.768983][ T4279] team0: Port device team_slave_0 added [ 79.786204][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.806657][ T4279] team0: Port device team_slave_1 added [ 79.827288][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.834420][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.868278][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.881570][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.905641][ T4275] team0: Port device team_slave_0 added [ 79.919041][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.927873][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.955522][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.980522][ T4275] team0: Port device team_slave_1 added [ 79.994557][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.004903][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.031350][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.057243][ T4282] team0: Port device team_slave_0 added [ 80.069517][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.076982][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.103339][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.126762][ T4282] team0: Port device team_slave_1 added [ 80.133837][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.141339][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.167959][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.209273][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.216529][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.242984][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.285785][ T4273] device hsr_slave_0 entered promiscuous mode [ 80.298007][ T4273] device hsr_slave_1 entered promiscuous mode [ 80.306195][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.314393][ T4273] Cannot create hsr debugfs directory [ 80.331768][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 80.331790][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 80.338236][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.351743][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.377782][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.393240][ T4279] device hsr_slave_0 entered promiscuous mode [ 80.401483][ T4279] device hsr_slave_1 entered promiscuous mode [ 80.408427][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.416228][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 80.422645][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 80.422936][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 80.430994][ T4279] Cannot create hsr debugfs directory [ 80.469924][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.477515][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.504132][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.601750][ T4275] device hsr_slave_0 entered promiscuous mode [ 80.608660][ T4275] device hsr_slave_1 entered promiscuous mode [ 80.615652][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.623570][ T4275] Cannot create hsr debugfs directory [ 80.677333][ T4282] device hsr_slave_0 entered promiscuous mode [ 80.684584][ T4282] device hsr_slave_1 entered promiscuous mode [ 80.691674][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.699287][ T4282] Cannot create hsr debugfs directory [ 80.907253][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.934999][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.965181][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.985942][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.027390][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.038074][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.058390][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.076041][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.145876][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.178551][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.190466][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.222570][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.267676][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.304835][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.322549][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.339720][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.352031][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.366721][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.387753][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.400351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.413621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.443385][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.452660][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.468211][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.492601][ T4282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.521779][ T4282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.531978][ T4282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.543002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.552669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.562384][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.569620][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.578288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.589368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.598221][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.605365][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.613393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.622716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.633228][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.640417][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.648202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.657526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.666534][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.673708][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.681725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.690831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.699050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.725490][ T4282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.739597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.777057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.786807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.797603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.807436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.816457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.825868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.834548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.843741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.874470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.884834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.894743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.904105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.921425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.930253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.940448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.949545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.966860][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.982786][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.993238][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.007166][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.019955][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.042452][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.052496][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.069593][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.077764][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.104792][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.141744][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.155076][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.176366][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.196284][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.212974][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.220247][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.236604][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.279610][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.310139][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.326729][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.334075][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.356816][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.372478][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.392778][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.407201][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.414947][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 82.420738][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 82.441752][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.459308][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.472846][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.491004][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 82.497182][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 82.504082][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 82.549762][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.573385][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.590538][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.600036][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.635113][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.653025][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.671709][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.680177][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.703433][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.741599][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.750415][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.760367][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.767671][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.777051][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.786369][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.795160][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.802321][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.809893][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.818102][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.828643][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.837393][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.865823][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.875756][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.888835][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.899545][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.913867][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.931062][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.955625][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.993603][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.008630][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.028586][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.038593][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.047892][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.057465][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.064652][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.072526][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.081844][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.090220][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.097345][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.106530][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.114594][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.128319][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.138920][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.174061][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.192017][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.278701][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.288351][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.305291][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.315415][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.326073][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.336989][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.346621][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.355776][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.366172][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.385067][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.395079][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.404851][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.415120][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.441931][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.462427][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.476180][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.486589][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.496243][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.504732][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.514151][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.523348][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.532831][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.541922][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.550026][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.559760][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.571644][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.579544][ T4273] device veth0_vlan entered promiscuous mode [ 83.589212][ T4276] device veth0_vlan entered promiscuous mode [ 83.598964][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.636186][ T4273] device veth1_vlan entered promiscuous mode [ 83.645910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.663807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.677514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.700295][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.719640][ T4276] device veth1_vlan entered promiscuous mode [ 83.789914][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.800004][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.822330][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.841090][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.859537][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.887605][ T4273] device veth0_macvtap entered promiscuous mode [ 83.937729][ T4276] device veth0_macvtap entered promiscuous mode [ 83.952310][ T4273] device veth1_macvtap entered promiscuous mode [ 83.963336][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.977960][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.989836][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.007354][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.035501][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.056133][ T4276] device veth1_macvtap entered promiscuous mode [ 84.106360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.142318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.151774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.176480][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.194672][ T4279] device veth0_vlan entered promiscuous mode [ 84.206322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.216832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.225678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.241719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.251269][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.263913][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.276650][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.300214][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.311741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.322285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.333640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.342168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.349804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.359060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.378815][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.390109][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.403904][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.414110][ T4279] device veth1_vlan entered promiscuous mode [ 84.432980][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.445770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.468543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.478312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.487350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.491341][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 84.495774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.500972][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 84.518860][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.528289][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.537192][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.546196][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.559785][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.569051][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.578693][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 84.584868][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 84.591163][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 84.597378][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.607166][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.638954][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.746633][ T4279] device veth0_macvtap entered promiscuous mode [ 84.778489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.789116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.799576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.809621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.818661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.852007][ T4279] device veth1_macvtap entered promiscuous mode [ 84.863986][ T4275] device veth0_vlan entered promiscuous mode [ 84.876603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.889252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.909629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.927790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.938174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.952818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.027096][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.070508][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.081218][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.091859][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.104080][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.113240][ T4275] device veth1_vlan entered promiscuous mode [ 85.149148][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.160426][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.177650][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.188790][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.208175][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.238334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.249267][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.261866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.264228][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.284618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.296220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.306274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.332174][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.342305][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.354503][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.364130][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.389159][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.407703][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.417434][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.426194][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.459705][ T4275] device veth0_macvtap entered promiscuous mode [ 85.466853][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.486341][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.487072][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.502819][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.512223][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.521565][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.547632][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.565474][ T4282] device veth0_vlan entered promiscuous mode [ 85.587097][ T4275] device veth1_macvtap entered promiscuous mode [ 85.597567][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.615823][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.632056][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.644839][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.653203][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.676418][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.685065][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.697916][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.715948][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.726863][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.741630][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.752141][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.763744][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.776962][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.815041][ T4282] device veth1_vlan entered promiscuous mode [ 85.833450][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.854063][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.873340][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.882791][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.893844][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.905079][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.915867][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.951789][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.968360][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.980337][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.000391][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.041959][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.062214][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.077644][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.108130][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.138020][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.153823][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.571197][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 86.578121][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 86.652117][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 86.652915][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 86.666199][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 86.992236][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.018735][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.052544][ T128] cfg80211: failed to load regulatory.db [ 87.107172][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.157919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.176441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.843234][ T4365] sched: RT throttling activated [ 88.863283][ T4282] device veth0_macvtap entered promiscuous mode [ 89.695004][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.757123][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.763826][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.861673][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.888383][ T4282] device veth1_macvtap entered promiscuous mode [ 90.000172][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.084304][ T4370] xt_CT: No such helper "netbios-ns" [ 90.084360][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.120907][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.153608][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.186930][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.199944][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.217408][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.229671][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.259133][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.359614][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.415393][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.486143][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.692167][ T4384] loop0: detected capacity change from 0 to 512 [ 90.710762][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.768006][ T4384] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.1: Unrecognised inode hash code 255 [ 90.833814][ T4390] UBIFS error (pid: 4390): cannot open "", error -22 [ 91.450797][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.490285][ T4384] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 91.513939][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.547545][ T4384] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 91.560759][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.596756][ T4384] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1: corrupted in-inode xattr [ 91.608809][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.649540][ T4384] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 91.661488][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.693381][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.708074][ T4384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.758059][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.929374][ T4394] loop2: detected capacity change from 0 to 256 [ 91.948579][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.988696][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.010751][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.020539][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.059567][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.116172][ T4394] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 92.122569][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.149508][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.214903][ T4397] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.1: Unrecognised inode hash code 255 [ 92.226911][ T4397] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 92.241217][ T4397] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 4: comm syz.0.1: path /0/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 92.562388][ T26] audit: type=1800 audit(1785817204.492:2): pid=4387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 92.583309][ T4387] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 92.655619][ T4387] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 92.660666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 92.681026][ T4387] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.705505][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.719269][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 92.810637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 92.830627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 92.840622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 92.850627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 92.860624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 92.870630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 92.960988][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.405618][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.464322][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.510935][ T4387] syz.1.7 (4387) used greatest stack depth: 20160 bytes left [ 93.651288][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.133757][ T4402] can0: slcan on ttyS3. [ 94.922143][ T4415] Zero length message leads to an empty skb [ 94.932999][ T4401] can0 (unregistered): slcan off ttyS3. [ 95.033229][ T4417] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 95.033229][ T4417] The task syz.1.13 (4417) triggered the difference, watch for misbehavior. [ 95.994877][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.049348][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.140902][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.171954][ T4425] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.189017][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.201592][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.209668][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.270502][ T4427] loop0: detected capacity change from 0 to 2048 [ 96.393312][ T1157] block nbd3: Attempted send on invalid socket [ 96.400206][ T1157] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.420684][ T4431] FAT-fs (nbd3): unable to read boot sector [ 96.448223][ T4432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15'. [ 96.575305][ T4427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.470425][ T4439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.020639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 98.030651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 98.040626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 98.216157][ T4443] loop4: detected capacity change from 0 to 1024 [ 98.232166][ T4443] ======================================================= [ 98.232166][ T4443] WARNING: The mand mount option has been deprecated and [ 98.232166][ T4443] and is ignored by this kernel. Remove the mand [ 98.232166][ T4443] option from the mount to silence this warning. [ 98.232166][ T4443] ======================================================= [ 99.174910][ T4443] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.187629][ T4443] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.010722][ T4450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 102.294084][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 102.330705][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 103.961229][ T4477] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 104.808828][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 104.821075][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 106.529946][ T4497] Bluetooth: MGMT ver 1.22 [ 108.528300][ T4516] device syzkaller0 entered promiscuous mode [ 108.847418][ T4523] loop2: detected capacity change from 0 to 512 [ 110.332643][ T4523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.342217][ T4523] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.007470][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 111.320977][ T4288] Bluetooth: hci3: Malformed LE Event: 0x1d [ 112.421704][ T53] block nbd2: Attempted send on invalid socket [ 113.120985][ T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.130538][ T4535] efs: cannot read volume header [ 115.733420][ T4551] loop3: detected capacity change from 0 to 8192 [ 115.793349][ T4551] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 115.900986][ T4551] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 115.910442][ T4551] REISERFS (device loop3): using ordered data mode [ 115.927865][ T4551] reiserfs: using flush barriers [ 115.936496][ T4551] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.954450][ T4551] REISERFS (device loop3): checking transaction log (loop3) [ 116.001480][ T4551] REISERFS (device loop3): Using r5 hash to sort names [ 116.041370][ T4551] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 116.985288][ T4577] loop1: detected capacity change from 0 to 4096 [ 117.067302][ T4577] EXT4-fs (loop1): Test dummy encryption mode enabled [ 117.168817][ T4589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.172660][ T4577] EXT4-fs (loop1): DAX unsupported by block device. [ 118.463590][ T4588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.454746][ T4620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.52'. [ 120.685651][ T4616] binder: 4612:4616 ioctl c018620b 0 returned -14 [ 120.963197][ T4633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.55'. [ 123.331126][ T4656] syz.0.59 (4656) used greatest stack depth: 17072 bytes left [ 127.254508][ T4671] kvm [4670]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 127.447991][ T4693] loop3: detected capacity change from 0 to 1024 [ 127.487191][ T4693] EXT4-fs: Invalid want_extra_isize 7 [ 128.470515][ T4697] syz.2.68 (4697): drop_caches: 2 [ 133.145021][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.152283][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.679444][ T4731] hub 8-0:1.0: USB hub found [ 134.243547][ T4731] hub 8-0:1.0: 1 port detected [ 137.991902][ T4747] netlink: 96 bytes leftover after parsing attributes in process `syz.4.77'. [ 139.848058][ T4288] Bluetooth: hci4: link tx timeout [ 139.853924][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.460652][ T4285] Bluetooth: hci4: link tx timeout [ 141.465851][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.951608][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 144.214552][ T4786] loop3: detected capacity change from 0 to 512 [ 144.461794][ T4786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.512035][ T4786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.212231][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 147.428972][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 151.923257][ T4895] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 153.240727][ T4895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.547419][ T4899] bond1: (slave syz_tun): making interface the new active one [ 153.620389][ T4899] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 153.821253][ T4902] device bond1 entered promiscuous mode [ 153.826930][ T4902] device syz_tun entered promiscuous mode [ 154.852290][ T4923] loop4: detected capacity change from 0 to 8192 [ 154.936382][ T4923] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.121561][ T4923] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 155.202673][ T4923] REISERFS (device loop4): using ordered data mode [ 155.219571][ T4923] reiserfs: using flush barriers [ 155.260818][ T4923] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.808121][ T4923] REISERFS (device loop4): checking transaction log (loop4) [ 156.935030][ T4923] REISERFS (device loop4): Using r5 hash to sort names [ 157.026671][ T4923] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 164.719029][ T4991] sctp: failed to load transform for md5: -2 [ 165.041478][ T5009] tipc: Started in network mode [ 165.046923][ T5009] tipc: Node identity 86fef22610c5, cluster identity 4711 [ 165.283653][ T5009] tipc: Enabled bearer , priority 0 [ 165.631177][ T5014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.686032][ T5013] device syzkaller0 entered promiscuous mode [ 165.927703][ T5009] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 166.049733][ T5009] tipc: Resetting bearer [ 166.257681][ T5008] tipc: Resetting bearer [ 168.270823][ T5008] tipc: Disabling bearer [ 169.422453][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.876896][ T4658] tipc: Node number set to 2520511014 [ 170.450712][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.462386][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.472082][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.479682][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.500804][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.570770][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 174.650685][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 177.579586][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 179.026504][ T4377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.700351][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 180.953590][ T4377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.642531][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 181.649179][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 181.675057][ T4377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.730998][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 181.780701][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 181.837881][ T5103] ceph: No mds server is up or the cluster is laggy [ 181.935017][ T4377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.655550][ T5038] chnl_net:caif_netlink_parms(): no params data found [ 182.758621][ T5119] loop2: detected capacity change from 0 to 8192 [ 182.860969][ T5119] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.089742][ T5038] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.600059][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.873588][ T5038] device bridge_slave_0 entered promiscuous mode [ 184.907964][ T5038] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.969004][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.977675][ T5038] device bridge_slave_1 entered promiscuous mode [ 186.817457][ T5038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.093125][ T5038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.302161][ T5038] team0: Port device team_slave_0 added [ 190.949236][ T5206] UBIFS error (pid: 5206): cannot open "", error -22 [ 192.248298][ T5038] team0: Port device team_slave_1 added [ 192.347841][ T4880] Process accounting resumed [ 192.738005][ T5038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.755446][ T5038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.846831][ T4833] Bluetooth: hci4: Frame reassembly failed (-84) [ 193.859299][ T5038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.912075][ T5213] loop3: detected capacity change from 0 to 32768 [ 194.259824][ T5038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.271718][ T5038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.860941][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.867427][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.880664][ T4288] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 197.959772][ T5213] XFS (loop3): Mounting V5 Filesystem [ 198.036985][ T5213] XFS (loop3): log mount failed [ 198.540626][ T5038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.802549][ T5241] process 'syz.1.156' launched './file2' with NULL argv: empty string added [ 201.853403][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 201.853421][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 201.870610][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 201.877970][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 204.519363][ T5038] device hsr_slave_0 entered promiscuous mode [ 204.655713][ T5038] device hsr_slave_1 entered promiscuous mode [ 204.690914][ T5038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.710012][ T5038] Cannot create hsr debugfs directory [ 207.631744][ T4377] device hsr_slave_0 left promiscuous mode [ 207.653875][ T4377] device hsr_slave_1 left promiscuous mode [ 207.692386][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.700031][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.769728][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.796384][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.854760][ T4377] device bridge_slave_1 left promiscuous mode [ 207.868445][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.950300][ T4377] device bridge_slave_0 left promiscuous mode [ 207.960825][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.168265][ T4377] device veth1_macvtap left promiscuous mode [ 208.201020][ T4377] device veth0_macvtap left promiscuous mode [ 208.207226][ T4377] device veth1_vlan left promiscuous mode [ 208.251436][ T4377] device veth0_vlan left promiscuous mode [ 213.656620][ T5323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 214.231319][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 214.241338][ T4289] CPU: 0 PID: 4289 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 214.249180][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.259348][ T4289] Workqueue: hci0 hci_rx_work [ 214.264074][ T4289] Call Trace: [ 214.267376][ T4289] [ 214.270333][ T4289] dump_stack_lvl+0x188/0x24e [ 214.275053][ T4289] ? show_regs_print_info+0x12/0x12 [ 214.280286][ T4289] ? load_image+0x410/0x410 [ 214.284848][ T4289] sysfs_create_dir_ns+0x26a/0x290 [ 214.290008][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 214.295081][ T4289] ? sysfs_warn_dup+0xa0/0xa0 [ 214.299799][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 214.305068][ T4289] kobject_add_internal+0x617/0xca0 [ 214.310853][ T4289] kobject_add+0x160/0x230 [ 214.315936][ T4289] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 214.321708][ T4289] ? kobject_init+0x1c0/0x1c0 [ 214.326520][ T4289] ? get_device_parent+0x3c7/0x3e0 [ 214.331776][ T4289] ? get_device_parent+0x121/0x3e0 [ 214.336949][ T4289] device_add+0x470/0x1050 [ 214.341686][ T4289] hci_conn_add_sysfs+0xd1/0x1e0 [ 214.346762][ T4289] le_conn_complete_evt+0xfac/0x15c0 [ 214.352099][ T4289] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 214.358375][ T4289] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 214.364053][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 214.369298][ T4289] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 214.374973][ T4289] ? skb_pull_data+0xec/0x1f0 [ 214.379774][ T4289] hci_le_conn_complete_evt+0x183/0x440 [ 214.385375][ T4289] ? hci_remote_host_features_evt+0x230/0x230 [ 214.391578][ T4289] hci_event_packet+0x7b3/0x1290 [ 214.396590][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 214.401665][ T4289] ? bis_list+0x280/0x280 [ 214.406218][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.412325][ T4289] ? kcov_remote_start+0x4b0/0x7e0 [ 214.417557][ T4289] ? do_machine_check+0x380/0x750 [ 214.422637][ T4289] ? hci_send_to_monitor+0x9c/0x4a0 [ 214.427872][ T4289] hci_rx_work+0x3eb/0xd40 [ 214.432419][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 214.437310][ T4289] ? process_one_work+0x7b4/0x1160 [ 214.442541][ T4289] process_one_work+0x8ab/0x1160 [ 214.447531][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 214.453203][ T4289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 214.458255][ T4289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 214.464005][ T4289] ? wq_worker_running+0x97/0x190 [ 214.469085][ T4289] worker_thread+0xaf5/0x12a0 [ 214.474011][ T4289] kthread+0x29d/0x330 [ 214.478119][ T4289] ? worker_clr_flags+0x1a0/0x1a0 [ 214.483207][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 214.487860][ T4289] ret_from_fork+0x1f/0x30 [ 214.492442][ T4289] [ 214.513370][ T4289] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 214.528253][ T4289] Bluetooth: hci0: failed to register connection device [ 215.748831][ T5338] No such timeout policy "syz1" [ 216.580648][ T4289] Bluetooth: hci0: command 0x2016 tx timeout [ 218.394026][ T4377] team0 (unregistering): Port device team_slave_1 removed [ 218.455923][ T4377] team0 (unregistering): Port device team_slave_0 removed [ 218.498461][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.544691][ T4377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.872881][ T4377] bond0 (unregistering): Released all slaves [ 219.231552][ T5351] orangefs_mount: mount request failed with -4 [ 219.388965][ T5356] loop4: detected capacity change from 0 to 256 [ 219.505761][ T5356] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 220.189011][ T5355] loop4: detected capacity change from 0 to 2048 [ 220.575180][ T3639] Alternate GPT is invalid, using primary GPT. [ 220.623936][ T5038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.643971][ T3639] loop4: p2 p3 p7 [ 220.724324][ T5038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.903005][ T5038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.917524][ T4987] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.651565][ T5038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.808493][ T5375] tipc: Started in network mode [ 221.820762][ T5375] tipc: Node identity ee8cc32cd016, cluster identity 4711 [ 221.869632][ T5375] tipc: Enabled bearer , priority 0 [ 222.050236][ T5114] udevd[5114]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 222.065533][ T4987] udevd[4987]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 222.066349][ T5111] udevd[5111]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 222.087629][ T5370] tipc: Disabling bearer [ 222.171669][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 223.566267][ T5038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.042670][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.067060][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.860792][ T5408] tipc: Enabling of bearer rejected, failed to enable media [ 227.433503][ T5422] loop3: detected capacity change from 0 to 1024 [ 227.721105][ T5427] syz.2.193 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 227.772813][ T5427] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 231.106560][ T5436] Process accounting resumed [ 231.663000][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.673335][ T5458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.201'. [ 231.682947][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.691333][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.699471][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.882594][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.967927][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.551938][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.559719][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.573961][ T5462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.596044][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 234.093701][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 235.506068][ T5481] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 235.607880][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 236.171085][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 236.230839][ T5481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.371661][ T5486] bond2: (slave geneve2): making interface the new active one [ 236.406099][ T5486] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 236.472695][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 237.225786][ T5454] chnl_net:caif_netlink_parms(): no params data found [ 237.489713][ T5505] loop2: detected capacity change from 0 to 128 [ 237.621752][ T5505] EXT4-fs: Ignoring removed orlov option [ 237.678867][ T5505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.757156][ T5508] Line length is too long: Should be less than 4094 [ 237.759124][ T5510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.211'. [ 237.765415][ T5505] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.849339][ T5517] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 238.251020][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 238.906853][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 239.925123][ T5530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 240.346598][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 240.671486][ T5510] team0 (unregistering): Port device team_slave_0 removed [ 240.686338][ T5533] loop2: detected capacity change from 0 to 512 [ 240.755968][ T5510] team0 (unregistering): Port device team_slave_1 removed [ 240.777018][ T5533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.887587][ T5533] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 240.986818][ T5533] System zones: 0-2, 18-18, 34-35 [ 241.070907][ T5533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 241.080032][ T5533] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.767905][ T5548] atomic_op ffff888024a26998 conn xmit_atomic 0000000000000000 [ 243.475985][ T5556] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.574519][ T26] audit: type=1800 audit(1785817358.496:3): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.214" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 243.904930][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 243.960096][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.235148][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.874978][ T5454] device bridge_slave_0 entered promiscuous mode [ 245.109703][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.131029][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.170141][ T5454] device bridge_slave_1 entered promiscuous mode [ 245.861838][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.846995][ T5571] input: syz0 as /devices/virtual/input/input5 [ 247.272252][ T5577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.222'. [ 248.878137][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.988452][ T5454] team0: Port device team_slave_0 added [ 251.044846][ T4858] device hsr_slave_0 left promiscuous mode [ 251.093145][ T4858] device hsr_slave_1 left promiscuous mode [ 251.118912][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.145459][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.025997][ T4858] device bridge_slave_1 left promiscuous mode [ 252.047884][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.382079][ T4858] device bridge_slave_0 left promiscuous mode [ 252.415281][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.571060][ T4858] team0 (unregistering): Port device team_slave_1 removed [ 254.175016][ T5614] No such timeout policy "syz1" [ 255.191258][ T4858] team0 (unregistering): Port device team_slave_0 removed [ 256.333310][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.341041][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.500901][ T4858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.817562][ T4858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.035155][ T5632] loop4: detected capacity change from 0 to 32768 [ 258.104982][ T5632] XFS (loop4): Mounting V5 Filesystem [ 258.162503][ T5632] XFS (loop4): Ending clean mount [ 258.177955][ T5632] XFS (loop4): Quotacheck needed: Please wait. [ 258.332537][ T5632] XFS (loop4): Quotacheck: Done. [ 258.475139][ T4858] bond0 (unregistering): Released all slaves [ 258.872456][ T26] audit: type=1800 audit(1785817373.756:4): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.235" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 260.527153][ T5454] team0: Port device team_slave_1 added [ 260.853747][ T4282] XFS (loop4): Unmounting Filesystem [ 260.880286][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.887478][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.930143][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.007765][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.031121][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.069302][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.858116][ T5655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.239'. [ 261.938795][ T5454] device hsr_slave_0 entered promiscuous mode [ 263.131200][ T5454] device hsr_slave_1 entered promiscuous mode [ 263.167578][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.220848][ T5454] Cannot create hsr debugfs directory [ 266.944572][ T5691] loop3: detected capacity change from 0 to 512 [ 267.212180][ T5691] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 267.660733][ T5703] libceph: secret too big 32 [ 268.270993][ T5691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 268.300858][ T5691] System zones: 1-12 [ 268.981906][ T5691] EXT4-fs (loop3): orphan cleanup on readonly fs [ 269.151315][ T5691] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.246: attempt to clear invalid blocks 1024 len 1 [ 269.367018][ T5691] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.246: bg 0: block 361: padding at end of block bitmap is not set [ 269.472401][ T5691] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 269.504754][ T5691] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.246: invalid indirect mapped block 1811939328 (level 0) [ 269.717153][ T5691] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.246: invalid indirect mapped block 2 (level 2) [ 270.312651][ T5691] EXT4-fs (loop3): 1 truncate cleaned up [ 270.454471][ T5691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.468535][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.475995][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.485537][ T5723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.608710][ T5454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.753334][ T5454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.823963][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 270.945864][ T5454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.156502][ T5454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.821794][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.837485][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.907585][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.941214][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.984917][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.003391][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.055010][ T5747] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 275.081306][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.088473][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.108053][ T5747] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 275.153978][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.185347][ T5747] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 275.221324][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.258351][ T5747] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 275.266717][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.277920][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.285222][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.296824][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.309031][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.391217][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.435913][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.523554][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.577209][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.629092][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.685512][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.738508][ T5454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.787048][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.037909][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.066053][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.183163][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.798109][ T5776] loop2: detected capacity change from 0 to 131072 [ 277.848384][ T5776] F2FS-fs (loop2): invalid crc value [ 278.003186][ T5776] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.037096][ T5776] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 278.091061][ T5776] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 278.548835][ T5785] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 278.756145][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.774692][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.085137][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.017213][ T5812] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 282.024604][ T5812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.035444][ T5812] vhci_hcd vhci_hcd.0: Device attached [ 282.062912][ T5812] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 282.211516][ T5813] vhci_hcd: connection closed [ 282.218418][ T4844] vhci_hcd: stop threads [ 282.351166][ T4844] vhci_hcd: release socket [ 282.484634][ T4844] vhci_hcd: disconnect device [ 282.701029][ T4326] usb 38-1: enqueue for inactive port 0 [ 283.060928][ T5819] dlm: no local IP address has been set [ 283.105337][ T5819] dlm: cannot start dlm midcomms -107 [ 283.263052][ T4326] usb usb38-port1: attempt power cycle [ 284.086759][ T5827] loop2: detected capacity change from 0 to 128 [ 285.041473][ T4326] usb usb38-port1: unable to enumerate USB device [ 285.088798][ T5827] FAT-fs (loop2): Directory bread(block 414) failed [ 285.150585][ T5827] FAT-fs (loop2): Directory bread(block 415) failed [ 285.157390][ T5827] FAT-fs (loop2): Directory bread(block 416) failed [ 285.240329][ T5827] FAT-fs (loop2): Directory bread(block 417) failed [ 285.299986][ T5827] FAT-fs (loop2): Directory bread(block 418) failed [ 285.332418][ T5827] FAT-fs (loop2): Directory bread(block 419) failed [ 285.339218][ T5827] FAT-fs (loop2): Directory bread(block 420) failed [ 285.428480][ T5827] FAT-fs (loop2): Directory bread(block 421) failed [ 285.897062][ T5839] loop3: detected capacity change from 0 to 256 [ 285.994565][ T5840] FAT-fs (loop2): Directory bread(block 414) failed [ 286.001810][ T5840] FAT-fs (loop2): Directory bread(block 415) failed [ 286.372214][ T5111] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.431612][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.448188][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.459845][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.478028][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.493284][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.505077][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.376288][ T5861] overlayfs: missing 'lowerdir' [ 290.610206][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 291.138475][ T5875] loop2: detected capacity change from 0 to 128 [ 293.410856][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 293.505955][ T5880] loop3: detected capacity change from 0 to 4096 [ 293.772151][ T5880] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 294.702021][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 295.490995][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 297.530664][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 297.860152][ T5906] netlink: 60 bytes leftover after parsing attributes in process `syz.4.281'. [ 298.493981][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.526614][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.678278][ T5853] device bridge_slave_0 entered promiscuous mode [ 298.690162][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.698804][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.740723][ T5853] device bridge_slave_1 entered promiscuous mode [ 300.887090][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.150985][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.499624][ T5853] team0: Port device team_slave_0 added [ 301.792112][ T5853] team0: Port device team_slave_1 added [ 304.882503][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.882524][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.882551][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.884643][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.884658][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.884688][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.909101][ T5959] zram0: detected capacity change from 0 to 8 [ 306.436020][ T5853] device hsr_slave_0 entered promiscuous mode [ 306.443370][ T5853] device hsr_slave_1 entered promiscuous mode [ 306.450045][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.460878][ T5853] Cannot create hsr debugfs directory [ 306.908502][ T5976] loop2: detected capacity change from 0 to 2048 [ 307.183350][ T5976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 307.192516][ T5976] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.403753][ T5974] fs-verity: sha512 using implementation "sha512-avx2" [ 307.964929][ T5982] loop3: detected capacity change from 0 to 512 [ 307.996964][ T5982] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.293: iget: bad i_size value: 38620345925642 [ 308.051795][ T5982] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.293: couldn't read orphan inode 15 (err -117) [ 308.151353][ T5982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 308.229198][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 309.235077][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 309.958482][ T4838] device hsr_slave_0 left promiscuous mode [ 309.994693][ T4838] device hsr_slave_1 left promiscuous mode [ 310.039107][ T4838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.064235][ T4838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.126052][ T4838] device bridge_slave_1 left promiscuous mode [ 311.510853][ T4838] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.598151][ T4838] device bridge_slave_0 left promiscuous mode [ 311.643864][ T4838] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.193700][ T125] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 312.400680][ T125] usb 4-1: Using ep0 maxpacket: 8 [ 312.441308][ T125] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 312.481973][ T125] usb 4-1: config 0 has no interface number 0 [ 312.488171][ T125] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 312.509683][ T6019] Mass Storage Function, version: 2009/09/11 [ 312.540608][ T125] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 312.561301][ T125] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 312.562209][ T6019] LUN: removable file: (no medium) [ 312.595380][ T125] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 312.611802][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.650039][ T125] usb 4-1: config 0 descriptor?? [ 312.723049][ T125] ldusb 4-1:0.55: Interrupt in endpoint not found [ 312.945185][ T4322] usb 4-1: USB disconnect, device number 2 [ 313.631383][ T6022] loop2: detected capacity change from 0 to 131072 [ 313.728596][ T6022] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 313.738796][ T6022] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 313.754697][ T6022] F2FS-fs (loop2): invalid crc value [ 313.862627][ T6022] F2FS-fs (loop2): Found nat_bits in checkpoint [ 313.927196][ T6022] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 313.934465][ T6022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 314.179867][ T4838] team0 (unregistering): Port device team_slave_1 removed [ 314.308687][ T6031] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 314.884967][ T4838] team0 (unregistering): Port device team_slave_0 removed [ 315.788308][ T4838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.850134][ T4838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.162335][ T4838] bond0 (unregistering): Released all slaves [ 317.261139][ T6041] loop4: detected capacity change from 0 to 512 [ 317.459892][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.666722][ T6041] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.306: iget: bad i_size value: 38620345925642 [ 317.983228][ T6041] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.306: couldn't read orphan inode 15 (err -117) [ 318.227292][ T6041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 319.111604][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 321.131220][ T6068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.311'. [ 321.743281][ T6069] futex_wake_op: syz.4.312 tries to shift op by 144; fix this program [ 321.794351][ T6069] loop4: detected capacity change from 0 to 256 [ 321.950080][ T6069] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 322.045010][ T26] audit: type=1800 audit(1785817435.664:5): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.312" name="file1" dev="loop4" ino=1048615 res=0 errno=0 [ 322.092645][ T6069] syz.4.312: attempt to access beyond end of device [ 322.092645][ T6069] loop4: rw=0, sector=184, nr_sectors = 120 limit=256 [ 322.154948][ T6069] syz.4.312: attempt to access beyond end of device [ 322.154948][ T6069] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 322.154989][ T6067] syz.4.312: attempt to access beyond end of device [ 322.154989][ T6067] loop4: rw=524288, sector=4912, nr_sectors = 256 limit=256 [ 322.156460][ T6069] syz.4.312: attempt to access beyond end of device [ 322.156460][ T6069] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 322.170439][ T6067] syz.4.312: attempt to access beyond end of device [ 322.170439][ T6067] loop4: rw=0, sector=5040, nr_sectors = 8 limit=256 [ 322.184485][ T6069] syz.4.312: attempt to access beyond end of device [ 322.184485][ T6069] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 322.199004][ T6067] syz.4.312: attempt to access beyond end of device [ 322.199004][ T6067] loop4: rw=0, sector=5040, nr_sectors = 8 limit=256 [ 322.211673][ T6069] syz.4.312: attempt to access beyond end of device [ 322.211673][ T6069] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 322.225793][ T6067] syz.4.312: attempt to access beyond end of device [ 322.225793][ T6067] loop4: rw=0, sector=5040, nr_sectors = 8 limit=256 [ 322.238766][ T6069] syz.4.312: attempt to access beyond end of device [ 322.238766][ T6069] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 322.553585][ T5853] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.657773][ T5853] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.220632][ T5853] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 324.280199][ T5853] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.646977][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.668999][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.690203][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.721591][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.422208][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.468067][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.607533][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.616101][ T4838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.619072][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.646407][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.690156][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.684395][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.691603][ T4838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.746784][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.774776][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.787983][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.822989][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.865072][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.931997][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.007192][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.046830][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.222764][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.792933][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.801763][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.810648][ T6123] netlink: 'syz.2.322': attribute type 2 has an invalid length. [ 329.824170][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.472372][ T14] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 330.747259][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.916482][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.928542][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.939049][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 331.071132][ T14] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 332.025647][ T6135] device bond3 entered promiscuous mode [ 332.041043][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 332.049730][ T6135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.116408][ T14] usb 5-1: SerialNumber: syz [ 332.177649][ T14] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 332.197655][ T14] usb-storage 5-1:1.0: USB Mass Storage device detected [ 332.247800][ T14] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 334.014739][ T14] usb 5-1: USB disconnect, device number 2 [ 334.430321][ T6173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.702717][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 335.107529][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 335.116721][ T6166] device bridge_slave_1 left promiscuous mode [ 335.124395][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.156406][ T6166] device bridge_slave_0 left promiscuous mode [ 335.162814][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.280024][ T6191] Can't find ip_set type ho# [ 337.313702][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.330238][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.354635][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.442298][ T6199] [ 337.444767][ T6199] ====================================================== [ 337.451829][ T6199] WARNING: possible circular locking dependency detected [ 337.458847][ T6199] syzkaller #0 Not tainted [ 337.463254][ T6199] ------------------------------------------------------ [ 337.470262][ T6199] syz.1.334/6199 is trying to acquire lock: [ 337.476263][ T6199] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 337.486095][ T6199] [ 337.486095][ T6199] but task is already holding lock: [ 337.493463][ T6199] ffff888076b1a9d0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 337.503236][ T6199] [ 337.503236][ T6199] which lock already depends on the new lock. [ 337.503236][ T6199] [ 337.513735][ T6199] [ 337.513735][ T6199] the existing dependency chain (in reverse order) is: [ 337.522756][ T6199] [ 337.522756][ T6199] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{3:3}: [ 337.531443][ T6199] down_write+0x36/0x60 [ 337.536139][ T6199] configfs_depend_item_unlocked+0x14f/0x430 [ 337.542665][ T6199] usbg_make_tpg+0x1f3/0x580 [ 337.548236][ T6199] target_fabric_make_tpg+0xa0/0x6d0 [ 337.554055][ T6199] configfs_mkdir+0x511/0x9e0 [ 337.559264][ T6199] vfs_mkdir+0x386/0x570 [ 337.564422][ T6199] do_mkdirat+0x1d8/0x440 [ 337.569468][ T6199] __x64_sys_mkdir+0x6a/0x80 [ 337.574689][ T6199] do_syscall_64+0x4c/0xa0 [ 337.579663][ T6199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.586100][ T6199] [ 337.586100][ T6199] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 337.594206][ T6199] __mutex_lock+0x12d/0xae0 [ 337.599508][ T6199] tcm_set_name+0x26/0x90 [ 337.604427][ T6199] function_make+0x195/0x350 [ 337.609826][ T6199] configfs_mkdir+0x511/0x9e0 [ 337.615228][ T6199] vfs_mkdir+0x386/0x570 [ 337.620025][ T6199] do_mkdirat+0x1d8/0x440 [ 337.624914][ T6199] __x64_sys_mkdir+0x6a/0x80 [ 337.630303][ T6199] do_syscall_64+0x4c/0xa0 [ 337.635466][ T6199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.641895][ T6199] [ 337.641895][ T6199] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 337.650157][ T6199] __lock_acquire+0x2d18/0x7c40 [ 337.655604][ T6199] lock_acquire+0x1bb/0x4a0 [ 337.660843][ T6199] __mutex_lock+0x12d/0xae0 [ 337.665969][ T6199] configfs_rmdir+0x638/0x980 [ 337.671362][ T6199] vfs_rmdir+0x34e/0x4a0 [ 337.676129][ T6199] do_rmdir+0x29a/0x5c0 [ 337.680814][ T6199] __x64_sys_rmdir+0x45/0x50 [ 337.686182][ T6199] do_syscall_64+0x4c/0xa0 [ 337.691230][ T6199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.697886][ T6199] [ 337.697886][ T6199] other info that might help us debug this: [ 337.697886][ T6199] [ 337.708666][ T6199] Chain exists of: [ 337.708666][ T6199] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#25 [ 337.708666][ T6199] [ 337.723704][ T6199] Possible unsafe locking scenario: [ 337.723704][ T6199] [ 337.731585][ T6199] CPU0 CPU1 [ 337.737032][ T6199] ---- ---- [ 337.742424][ T6199] lock(&sb->s_type->i_mutex_key#25); [ 337.747884][ T6199] lock(&opts->dep_lock); [ 337.755532][ T6199] lock(&sb->s_type->i_mutex_key#25); [ 337.763523][ T6199] lock(gadget_subsys.su_mutex); [ 337.768566][ T6199] [ 337.768566][ T6199] *** DEADLOCK *** [ 337.768566][ T6199] [ 337.777063][ T6199] 3 locks held by syz.1.334/6199: [ 337.782259][ T6199] #0: ffff8881466e2460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 337.791486][ T6199] #1: ffff888055a5f3f0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 337.802456][ T6199] #2: ffff888076b1a9d0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 337.812922][ T6199] [ 337.812922][ T6199] stack backtrace: [ 337.818892][ T6199] CPU: 1 PID: 6199 Comm: syz.1.334 Not tainted syzkaller #0 [ 337.826266][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.836498][ T6199] Call Trace: [ 337.839784][ T6199] [ 337.842739][ T6199] dump_stack_lvl+0x188/0x24e [ 337.847453][ T6199] ? load_image+0x410/0x410 [ 337.852055][ T6199] ? show_regs_print_info+0x12/0x12 [ 337.857256][ T6199] ? print_circular_bug+0x12b/0x1a0 [ 337.862652][ T6199] check_noncircular+0x296/0x330 [ 337.867691][ T6199] ? add_chain_block+0x9b0/0x9b0 [ 337.872828][ T6199] ? lockdep_lock+0xf1/0x1f0 [ 337.877602][ T6199] ? _find_first_zero_bit+0xd2/0x100 [ 337.882890][ T6199] __lock_acquire+0x2d18/0x7c40 [ 337.887929][ T6199] ? mark_lock+0x94/0x320 [ 337.892383][ T6199] ? verify_lock_unused+0x140/0x140 [ 337.897875][ T6199] ? __lock_acquire+0x138a/0x7c40 [ 337.903251][ T6199] ? verify_lock_unused+0x140/0x140 [ 337.908585][ T6199] lock_acquire+0x1bb/0x4a0 [ 337.913108][ T6199] ? configfs_rmdir+0x638/0x980 [ 337.918153][ T6199] ? __might_sleep+0xd0/0xd0 [ 337.922849][ T6199] ? read_lock_is_recursive+0x10/0x10 [ 337.928306][ T6199] __mutex_lock+0x12d/0xae0 [ 337.932833][ T6199] ? configfs_rmdir+0x638/0x980 [ 337.937715][ T6199] ? configfs_rmdir+0x638/0x980 [ 337.942576][ T6199] ? dput+0x37/0x1d0 [ 337.946492][ T6199] ? mutex_lock_nested+0x10/0x10 [ 337.951534][ T6199] ? __lock_acquire+0x7c40/0x7c40 [ 337.956669][ T6199] ? lockref_put_or_lock+0x6e/0xb0 [ 337.961795][ T6199] ? dput+0x37/0x1d0 [ 337.965707][ T6199] ? dput+0x37/0x1d0 [ 337.969800][ T6199] configfs_rmdir+0x638/0x980 [ 337.974586][ T6199] vfs_rmdir+0x34e/0x4a0 [ 337.979105][ T6199] do_rmdir+0x29a/0x5c0 [ 337.983409][ T6199] ? d_delete_notify+0x150/0x150 [ 337.988386][ T6199] ? getname_flags+0x206/0x500 [ 337.993229][ T6199] __x64_sys_rmdir+0x45/0x50 [ 337.997831][ T6199] do_syscall_64+0x4c/0xa0 [ 338.002404][ T6199] ? clear_bhb_loop+0x60/0xb0 [ 338.007096][ T6199] ? clear_bhb_loop+0x60/0xb0 [ 338.011813][ T6199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.017903][ T6199] RIP: 0033:0x7f30cc79e019 [ 338.022315][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.042834][ T6199] RSP: 002b:00007f30cd730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 338.051623][ T6199] RAX: ffffffffffffffda RBX: 00007f30cca25fa0 RCX: 00007f30cc79e019 [ 338.059630][ T6199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 338.067716][ T6199] RBP: 00007f30cc83500c R08: 0000000000000000 R09: 0000000000000000 [ 338.075700][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.083673][ T6199] R13: 00007f30cca26038 R14: 00007f30cca25fa0 R15: 00007ffd23cf9498 [ 338.091789][ T6199] [ 338.255070][ T26] audit: type=1800 audit(1785817451.904:6): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.330" name="cdrom" dev="configfs" ino=41096 res=0 errno=0 [ 338.570861][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 338.780650][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 338.818122][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 338.964026][ T22] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 339.016162][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.049137][ T22] usb 3-1: config 0 descriptor?? [ 339.264014][ T22] usbhid 3-1:0.0: can't add hid device: -71 [ 339.275261][ T22] usbhid: probe of 3-1:0.0 failed with error -71 [ 339.307824][ T22] usb 3-1: USB disconnect, device number 2 [ 339.406716][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.417818][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.443364][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.451785][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.461431][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.469501][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.480110][ T5853] device veth0_vlan entered promiscuous mode [ 339.495911][ T5853] device veth1_vlan entered promiscuous mode [ 339.520784][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.529986][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 339.540309][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.549826][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.561181][ T5853] device veth0_macvtap entered promiscuous mode [ 339.571445][ T5853] device veth1_macvtap entered promiscuous mode [ 339.591525][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.604862][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.616465][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.627053][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.637086][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.647772][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.657663][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.668874][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.685792][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.694874][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.705377][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.713834][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.725302][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.737165][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.748161][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.758223][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.769549][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.779754][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.790288][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.800268][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.810858][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.822001][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.839760][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.848985][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.859438][ T5853] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.868515][ T5853] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.878133][ T5853] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.887347][ T5853] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.928584][ T5853] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 339.965922][ T4838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.966867][ T5853] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 339.983335][ T4838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.002544][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.025490][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.033769][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.041903][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready