last executing test programs: 1m32.647848465s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open$dir(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040), 0x2) 1m31.660609992s ago: executing program 4 (id=11): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) mmap$xdp(&(0x7f0000eae000/0x3000)=nil, 0x3000, 0x5000004, 0x13, r1, 0x180000000) mremap(&(0x7f0000eaf000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) sigaltstack(&(0x7f0000001040)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000640)={0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000040000000400", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000ee0e00", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000100"/27], 0x48) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 1m29.569469923s ago: executing program 0 (id=23): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r5, 0x200}, 0x8) 1m29.448856411s ago: executing program 0 (id=24): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 1m29.367769803s ago: executing program 0 (id=26): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m29.035165452s ago: executing program 4 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r0, r2, 0x0, 0xffffffffffffffff, r3) 1m27.736655525s ago: executing program 4 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 1m27.190715806s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x120) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x101) 1m26.955195442s ago: executing program 0 (id=36): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) syz_genetlink_get_family_id$SEG6(0x0, r2) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x34b, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 1m26.502438379s ago: executing program 0 (id=39): recvmmsg(0xffffffffffffffff, &(0x7f000000a600)=[{{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}, 0x7}, {{&(0x7f0000000a80)=@ax25={{0x3, @rose}, [@null, @default, @rose, @netrom, @netrom, @netrom, @rose, @rose]}, 0x80, 0x0}, 0x5}], 0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x44000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m26.49213242s ago: executing program 4 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x7, 0xae, 0x0, 0x0, @str='\'^\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x8810}, 0x4c054) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x10) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./mysys/bus/pci/devices/0000:00:05.0/resource0/file0\x00', 0x0, 0x102) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x25dfdbff, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}}, 0x0) syz_clone3(&(0x7f0000000c00)={0xae2a0080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0x0], 0x1}, 0x58) 1m26.311659457s ago: executing program 32 (id=39): recvmmsg(0xffffffffffffffff, &(0x7f000000a600)=[{{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}, 0x7}, {{&(0x7f0000000a80)=@ax25={{0x3, @rose}, [@null, @default, @rose, @netrom, @netrom, @netrom, @rose, @rose]}, 0x80, 0x0}, 0x5}], 0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x44000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m26.060096024s ago: executing program 4 (id=43): openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) getrusage(0x1, &(0x7f0000001840)) 1m10.807477832s ago: executing program 33 (id=43): openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) getrusage(0x1, &(0x7f0000001840)) 59.946648387s ago: executing program 3 (id=136): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce24, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x4a, 0x200, 0x4, 0xed5, 0x9, 0x7, 0x2}, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001dc0)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x8af) 59.806096738s ago: executing program 3 (id=137): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0xa, 0x148, 0x0, 0x10, 0x4c8, 0x2a8, 0x2a8, 0x4c8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf, 0x1, {0xe6}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001580), 0x101040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[], 0x14) setuid(0xee01) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x5f, 0x3}) 59.106168402s ago: executing program 3 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="000a18000500050000ef55000000000116aa34745a1945dad8dccaf108e815b218b175e62e90d9c5596d3ef4ddaae57c49650dab6c00", 0x36, 0x4004000, &(0x7f0000000380)={0x11, 0x17, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 58.512756191s ago: executing program 3 (id=142): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001180)='./file0\x00', 0x804, &(0x7f00000011c0)={[{@utf8}, {@shortname_winnt}, {@utf8}, {@fat=@tz_utc}, {@uni_xlateno}, {@fat=@flush}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_winnt}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_winnt}, {@shortname_mixed}]}, 0x1, 0x28e, &(0x7f0000001500)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0xd0, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfff4}, {0x8, 0x13, 0xf}, {0x5, 0x14, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x5}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='offline', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='online_movable', 0xe) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', 0x0, 0x0, 0x0) 56.426664601s ago: executing program 3 (id=150): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r1, r1, 0x0, 0x8000000f3aa6ea) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) 54.465181102s ago: executing program 3 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f00000005c0)}, 0x81}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001900)=""/22, 0x16}, {&(0x7f0000000580)=""/127, 0x7f}], 0x6, &(0x7f0000001a40)=""/23, 0x17}, 0x8000}], 0x4, 0x12000, 0x0) 54.200059802s ago: executing program 34 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f00000005c0)}, 0x81}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001900)=""/22, 0x16}, {&(0x7f0000000580)=""/127, 0x7f}], 0x6, &(0x7f0000001a40)=""/23, 0x17}, 0x8000}], 0x4, 0x12000, 0x0) 47.95816748s ago: executing program 5 (id=180): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x286, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) 47.598206523s ago: executing program 5 (id=181): socket(0x2, 0x805, 0x0) socket$inet(0x2, 0x80001, 0x84) unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x9fc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 38.921345113s ago: executing program 5 (id=207): r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) userfaultfd(0x80001) 36.623446205s ago: executing program 5 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsmount(r0, 0x0, 0x2c) 36.519495101s ago: executing program 5 (id=216): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1510, &(0x7f0000002e00)="$eJzs3Au4TtXWOPAx5pyLbefyJrmvMcfiTS6TJAkl5JIkSUjuCUmSJElik1sSkpDrTnIPuaedtvv9knvSzpEkSUhIMv/P7vL3nU7n6zvn63zO9+3xe571mMNaY64x93jevS7Ps9+vug2v0bhm1QbMDP8M/esAf/4nCQASAGAQAOQAgAAAyuYsmzN9fxaNSf/UScS/SMOZV7oCcSVJ/zM26X/GJv3P2KT/GZv0P2OT/mds0v+MTfovRIY2O9/VsmXcTd7//y+n/jvJcv3PEPDv7ZD+/1+j/6Gjpf8Zm/Q/Y5P+Z2zS/4wsuNIFiP9hnX7Tcvn8Z2zSfyEytD/9nfLG81f6nbZs/8AmhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEL8DzjvLzMA8Ov4StclhBBCCCGEEEKIP49/50pXIIQQQgghhBBCiH89BAUaDASQCTJDAmSBRLgKskI2yA45IAZXQ064BnLBtZAb8kBeyAf5oQAUhBAILDBEUAgKQxyugyJwPRSFYlAcSoCDklAKboDScCOUgZugLNwM5eAWKA8VfjpnutuhMlSBqnAHVIPqUANqwp1QC+6C2nA31IF7oC7cC/XgPqgP90MDaAiN4AFoDA9CE2gKzaA5tICW0OoP8pNz/F7+c9ATnode0BuSoA/0hRegH/SHATAQBsGLMBhegiHwMgyFYTAcXoER8CqMhNdgFIyGMfA6jIVxMB4mwESYBMnwBkyGN2EKvPVgNpgG02EGzIRZMBvehjkwF+bBOzAfFsBCSM6yGJbAUngXlsF7kALvw3L4AFJhBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG2+FD2AE7YRfshj2wF/bBR7AfPoYD8Amk4af/YP65v86H7ggIqFChQYOZMBMmYAImYiJmxayYHbNjDGOYE3NiLsyFuTE35sW8mIT5sSAWREJCRsZCWAjjGMciWASLYlEsjsXRocNSWApL441YBstgWSyL5bAclscKWAFvxVuxElbCylgZq2JVrIbVsAbWwDvxTrwLa2NtrIN1sC7WxXpYD+tjfWyADbARNsLG2BibYBNshs2wBbbAVtgKW2NrbINtsB22w/bYHjtgB+yIHbETdsLO2Bm7YBfsil2xG3bD7vgsPovP4XP4PD6PvbGa6oN9sS/2w344AAfiQHwRB+NL+BK+jENxGA7HV/AVfBVH4lkchaNxDI7BSmocjscJyGoSJmMyZobJOAWn4FSchtNwBs7EWTgbZ+McnItz8R2cjwtwAS7CRbgEl+JSXIbvYQqm4HI8h6m4AlfiKlyNa3A1rsP1uA434ibciFtwC27Dbfghfog7cSfuxt24F/fiR/gRfowf41BMwzQ8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTyJp/A0nsIzeAbP4jk8DwAX8AJexIt4CS+lf/hVOqOMyqQyqQSVoBJVosqqsqrsKruKqZjKqXKqXCqXyq1yq7wqr8qv8quCqqAiRYpVpAqpQiqu4qqIKqKKqqKquCqunHKqlCqlSqvSqowqo8qqm1U5dYsqryqotu5WdauqpNq5yqqKqqqqqmqquqqhaqqaqpaqpWqr2qqOqqPqqrqqnrpP1Vd9cAA2VOmdaayGYRM1HJup5qqFaqlexYdUazUS26i2qp16RI3GUdhBtXYd1eOqkxqPndWTagI+pbqqSdhNPaO6q2dVD/Wc6qnauF6qt5qKfVRfNQP7qf5qgBqo5mB1ld6xGupl9VzmYWq4ekUtwVfVSPWaGqVGqzHqdTVWjVPj1QQ1UU1SyeoNNVm9qaaot9RUNU1NVzPUTDVLzVZvqzlqrpqn3lHz1QK1UC1Si9UStVS9q5ap91SKel8tVx+oVLVCrVSr1Gq1Rq1V69R6tUFtVJvUZrVFbVXb1Hb1odqhdqpdarfao/aqfeojtV99rA6oT1Sa+lQdVH9Rh9Rn6rD6XB1RX6ij6kt1TH2ljquv1Qn1jTqpTqnT6lt1Rn2nzqpz6rz6Xl1QP6iL6kd1SXkFGrXSWhsd6Ew6s07QWXSivkpn1dl0dp1Dx/TVOqe+RufS1+rcOo/Oa/Lp/LqALqhDTdpq1pEupAvruL5OF9HX66K6mC6uS2inS+pS+gZdWt+oy+ibdFl9sy6nb9HldQVd0YO+TVfSt+vKuoququ/Q1XR1XUPX1HfqWvouXVvfrevoe3Rdfa+up+/T9fX9uoFuqBvpB3Rj/aBuopvqZrq5bqFb6lb6Id1aP6zb6La6nX5Et9eP6g76Md1RP6476Sd0Z/2k7qKf0l3107qbfkZ318/qHvpHfUl73Uv31km6j+6rX9D9dH89QA/Ug/SLerB+SQ/RL+uhepgerl/RI/SreqR+TY/So/UY/boeq8fp8XqCnqgn6WT9hp6s39RT9Ft6qp6mp+sZeqaepQf8MtO8/0L+m7+TP+Sns2/T2/WHeofeqXfp3XqP3qv36X16v96vD+gDOk2n6YP6oD6kD+nD+rA+oo/oo/qoPqaP6eP6uD6hT+iT+pT+Xn+rz+jv9Fl9Tp/T3+sL+oK++MvPAAwaZbQxJjCZTGaTYLKYRHOVyWqymewmh4mZq01Oc43JZa41uU0ek9fkM/lNAVPQhIaMNWwiU8gUNnFznSlirjdFTTFT3JQwzpQ0pcwN/+38P6qvlWllWpvWpo1pY9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6mW6mu+luepgepqfpaXqZXibJJJm+5gXTz/Q3A8xAM8i8aAabwWaIGWKGmqFmuBluRpgRZqQZaUaZUWaMGWPGmrFmvBlvJpqJJtnnMJPNZDPFTDFTzVQzfVAOM9PMNLPNbDPHzDHzzDwz38w3C81Cs9gsNkvNUrPMLDMpJsUsN8tNqllhVphVZpVZY9aYdWad2WA2mE1mk9litphUs91sNzvMDrPL7DJ7zB6zz+wz+81+c8AcMGkmzRw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcNCfNaXPanDFnzFlz1pw3580Fc8FcNBfNJXMp/bYvUIEKTGCCTEGmICFICBKDxCBrkDXIHmQPYkEsyBnkDHIF1wa5gzxB3iBfkD8oEBQMwoACG3AQBYWCwkE8uC4oElwfFA2KBcWDEoELSgalghuC0sGNQZngpqBscHNQLrglKB9UCCoGtwa3BZWC24PKQZWganBHUC2oHtQIagZ3BrWCu4Lawd1BneCeoG5wb1AvuC+oH9wfNAgaBo2CB4LGwYNBk6Bp0CxoHrQIWgat/tT5vT+b52HXK+wdJoV9wr7hC2G/sH84IBwYDgpfDAeHL4VDwpfDoeGwcHj4SjgifDUcGb4WjgpHh2PC18Ox4bhwfDghnBhOCpPDN8LJ4ZvhlPCtcGo4LZwezAhnhrPC2eHb4ZxwbjgvfCecHy4IF4aLwsXhkhB/viWGlPD9cHn4QZgarghXhqvC1eGacG24Llwfbgg3hpvCzeGWsoN/PjTcEe4Md4W7wz3h3nBf+FG4P/w4PBB+EqaFn4YHw7+Eh8LPwsPh5+GR8IvwaPhleCz8Kjwefh2eCL8JT4anwtPht+GZ8LvwbHguPB9+H14Ifwgvhj+Gl0KffnOffnknQ4YyUSZKoARKpETKSlkpO2WnGMUoJ+WkXJSLclNuykt5KT/lp4JUkNIxMRWiQhSnOBWhIlSUilJxKk6OHJWiUlSaSlMZKkNlqSyVo3JUnspTRapIt9FtdDvdTlWoCt1Bd1B1qk41qSbVolpUm2pTHapDdaku1aN6VJ/qUwNqQI2oETWmxtSEmlAzakYtqAW1olbUmlpTG2pD7agdtaf21IE6UEfqSJ2oE3WmztSFulBX6krdqBt1p+7Ug3pQT+pJvagXJVES9aW+1I/60QAaQINoEA2mwTSEhtBQGkrDaTiNoBE0kkbSKBpNY+h1GkvjaDxNoIk0iZIpmSbTZJpCU2gqTaXpNJ1m0kyaTbNpDs2heTSP5tN8WkgLaTEtpqW0lJbRMkqhFFpOyymVUmklraTVtJrW0lpaT+tpI22kzbSZttJW2k7baQftoF20i/bQHtpH+2g/7acDdIDSKI0O0kE6RIfoMB2mI3SEjtJROkbH6DgdpxN0gk7SSTpNp+kMnaGzdJbO03m6QD/QRfqRLpGnBJvFJtqrbFabzWa3Oexv47w2n81vC9iCNrS5bZ6/islaW9QWs8VtCetsSVvK3vA3cXlbwVa0t9rbbCV7u61sy9ss8B/jWvYuW9vebevYe2xNe+dfxXXtvbaefdDWt01tA9vcNrItbWP7oG1im9pmtrltYVva9vZR28E+Zjvax20n+8TfxMvse3a93WA32k12v/3Ynrff22P2K3vB/mB72d52kH3RDrYv2SFQxQ61wy7H9mU7FMCOsa/bsXacHW8n2Il20t/E0+0MO9POsrPt23aOnfs38VL7rp1vU+xCu8gutkt+itNrSrHv2+X2A5tqV9iVdpVdbdfYtXbd/691ld1it9ptdp/9yO6wO+0uu9vusXt/itPXccB+YtPsp/ao/dIesp/Zw/a4PWK/+ClOX99x+7U9Yb+xJ+0pe9p+a8/Y7+xZe+6n9aev/Vv7o71kvQVGVqzZcMCZODMncBZO5Ks4K2fj7JyDY3w15+RrOBdfy7k5D+flfJyfC3BBDpnYMnPEhbgwx/k6LsLXc1EuxsW5BDsuyaX4Bi7NN3IZvonL8s1cjm/h8lyBK/KtfBtX4tu5MlfhqnwHV+PqXINr8p1ci+/i2nw31+F7uC7fy/X4Pq7P93MDbsiN+AFuzA9yE27Kzbg5t+CW3Iof4tb8MLfhttyOH+H2/Ch34Me4Iz/OnfgJ7sxPchd+irvy09yNn+Hu/Cz34Oe4Jz/Pvbg3J3Ef7ssvcD/uzwN4IA/iF3kwv8RD+GUeysN4OL/CI/hVHsmv8SgezWP4dR7L43g8T+CJPImT+Q2ezG/yFH6Lp/I0ns4zeCbP4tn8Ns/huTyP3+H5vIAX8iJezEt4Kb/Ly/g9TuH3eTl/wKm8glfyKl7Na3gtr+P1vIE38ibezFt4K2/j7fwh7+CdvIt38x7ey/v4I97PH/MB/oTT+FM+yH/hQ/wZH+bP+Qh/wUf5Sz7GX/Fx/ppP8Dd8kk/xaf6Wz/B3fJbP8Xn+ni/wD3yRf+RL7BkijFSkIxMFUaYoc5QQZYkSo6uirFG2KHuUI4pFV0c5o2uiXNG1Ue4oT5Q3yhfljwpEBaMwoshGHEVRoahwFI+ui4pE10dFo2JR8ahE5KKSUanohqh0dGNUJropKhvdHJWLbonKRxWiitGt0W1Rpej2qHJUJaoa3RFVi6pHNaKa0Z1RreiuqHZ0d1QnuicqE90b1Yvui+pH90cNooZRo+iBqHH0YNQkaho1i5pHLaKWUavooah19HDUJmobtYseidpHj0YdoseijtHjUafoicv7iwU/X01/sz8p6hPpX96Q3a0Xx5fEl8bfjS+LvxdPib8fXx7/IJ4aXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xLfGt8W975mZnCY/iAMxgUuk8vsElwWl+iuclldNpfd5XAxd7XL6a5xudy1LrfL4/K6fC6/K+AKutCRs45d5Aq5wi7urnNF3PWuqCvmirsSzrmSrpRr6Vq5Vq61e9i1cW1dO/eIe8Q96h51jyX8Urjr7J50XdxTrqt72j3tnnHd3bOuh3vO9XTPu16ut0tySa6v6+v6uX5ugBvgBrlBbrAb7Ia4IW6oG+qGu+FuhBvhRrqRbpQb5ca4MW6sG+vGu/Fuopvokl2ym+wmuyluipvqprrpbrqb6Wa62W62m+PmuHlunpvv5ruFbqFb7Ba7pW6pW+aWuRSX4pa75S7VpbqVbqVb7Va7tW6tW+/Wu41uo9vsNrutbqvb7ra7HW6H2+V2uT1uj9vn9rn9br874A64NJfmDrqDmQ+5Q+6w+9wdcV+4o+5Ld8x95Y67r90J94076U65087rM+47d9adc+fd9+6C+8FddD+6S8675NgbscmxN2NTYm/FpsamxabHZsRmxmbFZsfejs2JzY3Ni70Tmx9bEFsYWxRbHFsSWxp7N7Ys9l4sJfZ+bHnsg1hqbEVsZWxVbHVsTcz7AjsiX8gX9nF/nS/ir/dFfTFf3Jfwzpf0pfwNvrS/0ZfxN/my/mZfzt/iy/sKvqJv6pv55r6Fb+lb+Yd8a/+wb+Pb+nb+Ed/eP+o7+Md8R/+47+Sf8J39k76Lf8p39U/7bv6ZBb902ff0z/tevrdP8n18X/+C7+f7+wF+oB/kX/SD/Ut+iH/ZD/XD/HD/ih/hX/Uj/Wt+lB/tx/jX/Vg/zo/3E/xEP8kn+zf8ZP+mn+Lf8lP9ND/dz/Az/Sw/27/t5/i5fp5/x8/3C/xCv8gv9kv8Uv+uX+bf8yn+fb/cf+BT/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/2Hfoff6Xf53X6P3+v3+Y/8fv+xP+A/8Wn+U3/Q/8Uf8p/5w/5zf8R/4Y/6L/0x/5U/7r/2J/w3/qQ/5U/7b/0Z/50/68/58/57f8H/4C/6H/2l3/mbtcz/4jfnQgghhBD/G+k/2N/nd/5P/bKl6wsA2XbmO/LbOTfn/nncX+3vFAOAx3t3a/jr1rBhUlLSL8emaggKLwKA2OX8n75/4Jd4BbSDR6EjtIXSv1tff1Xxp/u+/2z++M0AiQBZfs1JfzxKhN/Of+Pfmb/pu/xH8y8CKFr4ck76iX6NL89f5u/Mv7f9H8yf5bNkgDb/IScrXI4vz18KHoYnoONfHSmEEEIIIYQQQvysv7rQ/Y+eb9Ofz/ObyzmZ4XL8R8/nf6Dyn7EGIYQQQgghhBBC/OeeerbHYw917Ni2y//lQeZ/jzL+DQYIAP8GZcjg339wpX8zCSGEEEIIIf5sl2/6r3QlQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFExvXPf0OY+i8ffKXXKIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQlxp/y8AAP///hRVvA==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x10) socket$igmp(0x2, 0x3, 0x2) dup3(r1, r0, 0x0) io_setup(0x91, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x8000000}]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff8fffff9, 0x10031, 0xffffffffffffffff, 0xbe9f6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r3, 0x0, 0x0) write$binfmt_misc(r3, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 35.962491423s ago: executing program 5 (id=219): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @empty, 0x0, 0x4005}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 35.829733133s ago: executing program 35 (id=219): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @empty, 0x0, 0x4005}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 24.801458993s ago: executing program 6 (id=245): r0 = syz_io_uring_setup(0x32c, &(0x7f0000002900)={0x0, 0x10f24e, 0x100, 0xfffffffb, 0x8d}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r3, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20040004}}], 0x1, 0x11) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(0x0, 0x80000) io_uring_enter(r0, 0xfffffffc, 0x312, 0x48, 0x0, 0x0) syz_io_uring_complete(0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x3f) 24.486609899s ago: executing program 6 (id=247): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x1d9442, 0x2c) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 24.34991839s ago: executing program 6 (id=248): socket$inet6(0xa, 0x80003, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 21.700167614s ago: executing program 6 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 19.630845892s ago: executing program 6 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xf3a, 0x8) splice(r3, 0x0, r6, 0x0, 0x80, 0x8) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000280)={0xffffffffffffffb6, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x2, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 17.986508396s ago: executing program 6 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 8.188459113s ago: executing program 2 (id=286): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) setns(0xc9, 0x0) r1 = socket(0x11, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/198, 0xc6}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f42000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8800) 8.077988059s ago: executing program 1 (id=288): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) 6.025213764s ago: executing program 7 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x24, r4, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "02"}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '#'}]}, 0x24}}, 0x0) 5.836172283s ago: executing program 1 (id=293): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/packet\x00') r1 = fanotify_init(0x1, 0x40000) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r1, &(0x7f00000002c0)=[{0x0}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x6, 0x4, 0x80, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x840) close_range(r0, 0xffffffffffffffff, 0x0) 5.513423721s ago: executing program 7 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@limit={{0x48}, {0x48000000, 0x180}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./mnt\x00', 0x2000000, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0xa}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") 5.125939828s ago: executing program 8 (id=297): bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB="00000000000000000000000000009ffb3061af00000000000080cacf7ed5fca780c3066a0ed3db061ed1b7b9a0ada061cf86aa27bb7184402f7ede99d0c3629f4b1788d201ef9a849a1152b3b497ca94219e89934aa618a0008c33c80708ccd98bc270ec12271a7e53c02ba299d534ea135e51cd5ba24763388909f96b61af61762e6cf771509462b829732c05b12844fcab6f7dc15a6cc674b19f95937b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001ffff8ffffff0009050000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c0002800800070000000000"], 0x3c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000980), 0x101040, 0x0) sendfile(r4, r4, 0x0, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x138, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x104, 0x2, [@TCA_U32_ACT={0xdc, 0x7, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2169, 0xffffffffffffffff, 0x1, 0x8}, 0x2, r3}}]}, {0x5, 0x6, '{'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 5.04557321s ago: executing program 8 (id=298): bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14) nanosleep(0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.621904163s ago: executing program 1 (id=299): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) rename(&(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002440)='./bus/file0\x00') mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x315d030, 0x0, 0x40, 0x0, &(0x7f0000000100)) 4.581191369s ago: executing program 2 (id=300): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f00000003c0)='\r', 0x1}], 0x1, 0x0) tee(r1, r6, 0x8f5, 0x8) write$cgroup_devices(r6, 0x0, 0x8) openat$cgroup(r5, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 4.540137416s ago: executing program 7 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.296269512s ago: executing program 2 (id=302): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket(0x80000000000000a, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) 4.196391287s ago: executing program 7 (id=303): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 4.110590409s ago: executing program 8 (id=304): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mlock2(&(0x7f00007c5000/0x3000)=nil, 0x3000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.085563513s ago: executing program 7 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x67}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) 4.066982636s ago: executing program 2 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 2.234770608s ago: executing program 36 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 1.68912414s ago: executing program 8 (id=308): ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x0, 0x0, 0xfffffffd, 0x8}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x54c8}}, './file0\x00'}) ioctl$HIDIOCGNAME(r4, 0x80404806, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.68850942s ago: executing program 7 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xd0e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@jqfmt_vfsold}, {@nodelalloc}, {@bsdgroups}]}, 0x3, 0x471, &(0x7f00000002c0)="$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") ptrace(0x10, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3, 0x80, 0x2}, 0x20) 1.632557868s ago: executing program 2 (id=310): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 1.122012094s ago: executing program 8 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x902, 0x4) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) syz_open_dev$admmidi(0x0, 0x20, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 958.392428ms ago: executing program 1 (id=312): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 744.639709ms ago: executing program 2 (id=313): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x58, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = userfaultfd(0x80000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f000009f000/0x3000)=nil, 0x3000}) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000932000/0x2000)=nil, 0x2000, 0xb635773f07ebbee5, 0x2010, 0xffffffffffffffff, 0x0) unshare(0x24020400) 616.008859ms ago: executing program 1 (id=314): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000117000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c4a000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="1c00000076001f03000000000000"], 0x1c}], 0x1}, 0x4040000) r2 = io_uring_setup(0x46eb, &(0x7f0000000080)={0x0, 0x18cc, 0x10000, 0x1, 0xa}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) brk(0x20000000) 134.27704ms ago: executing program 1 (id=315): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 0s ago: executing program 8 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) kernel console output (not intermixed with test programs): andle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.788838][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.806774][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.813874][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.840233][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.858508][ T4187] team0: Port device team_slave_1 added [ 62.871067][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.878249][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.904305][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.926116][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.933069][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.959684][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.991116][ T4191] team0: Port device team_slave_0 added [ 62.997642][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.007517][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.033819][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.046082][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.054505][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.080676][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.095647][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.102613][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.128666][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.141918][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.149221][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.175191][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.187696][ T4191] team0: Port device team_slave_1 added [ 63.246700][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.254290][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.280764][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.287801][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.297687][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.305914][ T4189] Cannot create hsr debugfs directory [ 63.317660][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.324730][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.350796][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.365249][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.372828][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.379552][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.387373][ T4188] Cannot create hsr debugfs directory [ 63.402098][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.409508][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.416263][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.423974][ T4190] Cannot create hsr debugfs directory [ 63.433622][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.440730][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.467222][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.556802][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.563587][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.570513][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.578284][ T4191] Cannot create hsr debugfs directory [ 63.684733][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 63.691420][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 63.697641][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 63.703690][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 63.763911][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 63.826448][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.839134][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.849721][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.863779][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.910684][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.927463][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.941383][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.962435][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.994475][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.004105][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.013024][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.023059][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.062219][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.095570][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.110919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.120113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.129257][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.139288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.149020][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.156279][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.170617][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.182165][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.197966][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.206921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.216254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.224921][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.231996][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.240102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.259408][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.275264][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.315653][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.325326][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.334340][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.342795][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.352207][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.361082][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.373522][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.385686][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.396655][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.426112][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.435685][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.449463][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.461205][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.472499][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.484304][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.493048][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.501732][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.515703][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.534335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.542879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.566798][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.595068][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.607966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.617331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.644772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.655480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.664397][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.671467][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.681194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.690607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.699809][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.706954][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.715764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.725733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.734174][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.741219][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.748939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.757984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.766697][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.773815][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.782541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.791238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.799829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.808444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.830490][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.839557][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.848628][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.859867][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.869496][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.900983][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.911076][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.920755][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.929813][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.939190][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.948164][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.957035][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.965609][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.974399][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.981890][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.989668][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.000886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.009442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.028312][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.043607][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.053175][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.062215][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.072169][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.086098][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.096034][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.150385][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.176922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.189694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.198035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.214746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.229667][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.266963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.276595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.287963][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.295094][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.305079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.321378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.331386][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.338539][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.346968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.356004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.364894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.377822][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.405633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.413651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.422915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.432417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.442121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.451147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.460060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.467830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.475569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.482996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.491086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.506880][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.516934][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.539209][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.550107][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.562049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.575581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.584468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.592833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.601369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.611141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.619875][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.627252][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.635855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.644911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.653248][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.660337][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.668197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.680080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.692539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.701589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.710313][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.719386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.729275][ T4187] device veth0_vlan entered promiscuous mode [ 65.753452][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.764851][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 65.771462][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.774262][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 65.788645][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 65.793049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.795086][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 65.802999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.817368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.826480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.834594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.842297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.850476][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 65.851576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.866346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.875057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.883387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.891802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.900131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.915518][ T4187] device veth1_vlan entered promiscuous mode [ 65.995007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.003264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.015319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.024391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.033158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.044926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.073553][ T4189] device veth0_vlan entered promiscuous mode [ 66.091007][ T4190] device veth0_vlan entered promiscuous mode [ 66.100135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.110152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.119854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.128596][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.145339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.161558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.173927][ T4187] device veth0_macvtap entered promiscuous mode [ 66.184842][ T4187] device veth1_macvtap entered promiscuous mode [ 66.200443][ T4190] device veth1_vlan entered promiscuous mode [ 66.207928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.217212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.225865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.233545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.241352][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.250779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.265493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.279441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.287561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.298489][ T4189] device veth1_vlan entered promiscuous mode [ 66.320344][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.339285][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.358471][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.368735][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.377734][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.386469][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.396094][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.411745][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.422814][ T4190] device veth0_macvtap entered promiscuous mode [ 66.436552][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.444987][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.452512][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.461535][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.470632][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.479615][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.489460][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.511524][ T4190] device veth1_macvtap entered promiscuous mode [ 66.528458][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.542597][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.553358][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.568752][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.580042][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.588425][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.596731][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.605767][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.618431][ T4189] device veth0_macvtap entered promiscuous mode [ 66.631911][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.645845][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.657430][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.681561][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.690335][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.699335][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.712254][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.721399][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.732930][ T4189] device veth1_macvtap entered promiscuous mode [ 66.748532][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.761238][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.772751][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.784541][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.793270][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.802208][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.811664][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.830091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.838713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.848667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.880147][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.892479][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.903266][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.914302][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.925970][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.933377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.942394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.952019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.960628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.974172][ T4188] device veth0_vlan entered promiscuous mode [ 66.986215][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.999128][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.009620][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.020333][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.031335][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.041745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.065795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.074320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.082974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.102698][ T4191] device veth0_vlan entered promiscuous mode [ 67.128566][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.140274][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.149504][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.159182][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.169140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.177275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.186062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.194580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.202895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.211712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.229763][ T4191] device veth1_vlan entered promiscuous mode [ 67.265161][ T4188] device veth1_vlan entered promiscuous mode [ 67.284953][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.292932][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.333491][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.374286][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.378293][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.383687][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.396035][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.415311][ T4188] device veth0_macvtap entered promiscuous mode [ 67.428018][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.442664][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.450879][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.459739][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.469572][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.487669][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.496559][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.517047][ T4188] device veth1_macvtap entered promiscuous mode [ 67.531941][ T4191] device veth0_macvtap entered promiscuous mode [ 67.558587][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.568853][ T4191] device veth1_macvtap entered promiscuous mode [ 67.584053][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.603270][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.622044][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.632612][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.643335][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.653254][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.664136][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.675292][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.695720][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.707683][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.718598][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.729578][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.739676][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.750229][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.760515][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.771437][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.782673][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.792113][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.800701][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.810192][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.818955][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.826942][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.836212][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.844751][ T4249] Bluetooth: hci1: command 0x040f tx timeout [ 67.847609][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.850992][ T4249] Bluetooth: hci0: command 0x040f tx timeout [ 67.859349][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 67.866048][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.875978][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 67.885787][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.893616][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.906396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.921580][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.933643][ T4249] Bluetooth: hci4: command 0x040f tx timeout [ 67.948365][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.958978][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.969723][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.979920][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.991371][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.005189][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.015157][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.029054][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.039813][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.050645][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.061122][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.071867][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.081942][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.094263][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.106929][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.126955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.140452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.152939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.163277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.176740][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.186453][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.196746][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.205813][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.235130][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.235413][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.244982][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.266673][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.275768][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.277128][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.296868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.370317][ T4277] xt_connbytes: Forcing CT accounting to be enabled [ 68.419789][ T26] audit: type=1326 audit(1790978005.515:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.7" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8720ff2159 code=0x0 [ 68.475049][ T26] audit: type=1326 audit(1790978005.555:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 68.516017][ T4277] xt_CT: No such helper "netbios-ns" [ 68.539251][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.544952][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.561426][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.576014][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.588721][ T26] audit: type=1326 audit(1790978005.565:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 68.635849][ T26] audit: type=1326 audit(1790978005.565:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 68.635940][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.677906][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.706582][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.715174][ T26] audit: type=1326 audit(1790978005.565:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 68.742170][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.759991][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.790619][ T26] audit: type=1326 audit(1790978005.565:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 68.815627][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.823464][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.833876][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.841958][ T26] audit: type=1326 audit(1790978005.565:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 68.896140][ T26] audit: type=1326 audit(1790978005.575:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 68.968120][ T4297] loop2: detected capacity change from 0 to 16 [ 68.991197][ T26] audit: type=1326 audit(1790978005.575:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 69.019524][ T26] audit: type=1326 audit(1790978005.575:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2702460159 code=0x7ffc0000 [ 69.171439][ T4297] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.282666][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.925221][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 69.936067][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 69.984456][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 70.020493][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 70.051611][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 70.174572][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.344731][ T4231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.373847][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.382711][ T4231] usb 1-1: Product: syz [ 70.387283][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.416352][ T4231] usb 1-1: Manufacturer: syz [ 70.433149][ T4231] usb 1-1: SerialNumber: syz [ 70.785800][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.884923][ T4234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.907304][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.933878][ T4234] usb 5-1: SerialNumber: syz [ 70.982846][ T4329] device syzkaller0 entered promiscuous mode [ 71.008340][ T4329] tipc: Started in network mode [ 71.026504][ T4329] tipc: Node identity 461372aac47c, cluster identity 4711 [ 71.039396][ T4329] tipc: Enabled bearer , priority 0 [ 71.049292][ T4331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.102687][ T4328] tipc: Resetting bearer [ 71.152264][ T4328] tipc: Disabling bearer [ 71.186931][ T4231] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 71.198045][ T4231] cdc_ncm 1-1:1.0: bind() failure [ 71.247410][ T4231] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 71.276293][ T4231] cdc_ncm 1-1:1.1: bind() failure [ 71.318160][ T4231] usb 1-1: USB disconnect, device number 2 [ 71.447154][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.454609][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.655813][ T4234] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 71.723839][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.840604][ T4337] process 'syz.2.20' launched '/dev/fd/3' with NULL argv: empty string added [ 72.085641][ T7] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 72.105714][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.136209][ T7] usb 2-1: config 0 descriptor?? [ 72.153576][ T4231] usb 5-1: USB disconnect, device number 2 [ 72.178923][ T4231] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 72.191546][ T7] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 72.481288][ T4367] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 72.597180][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.773765][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.793773][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.803759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.813764][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.823762][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.833759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.843762][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.853770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.863758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.873772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.895715][ T4381] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 73.924803][ T7] gspca_sunplus: reg_w_riv err -110 [ 73.930115][ T7] sunplus: probe of 2-1:0.0 failed with error -110 [ 74.096598][ T4385] netlink: 48 bytes leftover after parsing attributes in process `syz.3.30'. [ 74.155187][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 74.253652][ T4390] netlink: 96 bytes leftover after parsing attributes in process `syz.3.30'. [ 74.481094][ T4401] UBIFS error (pid: 4401): cannot open "./file0", error -22 [ 74.487940][ T4401] loop2: detected capacity change from 0 to 256 [ 74.583229][ T4403] tipc: Started in network mode [ 74.589294][ T4403] tipc: Node identity 4, cluster identity 4711 [ 74.641730][ T4403] tipc: Node number set to 4 [ 74.922176][ T4411] Zero length message leads to an empty skb [ 75.017291][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'. [ 75.054342][ T4415] bridge0: port 3(erspan0) entered blocking state [ 75.061042][ T4415] bridge0: port 3(erspan0) entered disabled state [ 75.073569][ T4415] device erspan0 entered promiscuous mode [ 75.080349][ T4415] bridge0: port 3(erspan0) entered blocking state [ 75.087184][ T4415] bridge0: port 3(erspan0) entered forwarding state [ 75.174080][ T4306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.187031][ T4411] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.381882][ T4306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.470083][ T4306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.568560][ T4306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.641177][ T23] usb 2-1: USB disconnect, device number 2 [ 75.654322][ T4426] x86/PAT: syz.4.40:4426 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 75.734956][ T4428] binder: 4427:4428 ioctl c0306201 200000001640 returned -14 [ 76.785930][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 76.979535][ T4437] netlink: 'syz.3.45': attribute type 5 has an invalid length. [ 76.993990][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 77.035024][ T4443] tipc: Enabled bearer , priority 10 [ 77.042472][ T4448] netlink: 'syz.3.45': attribute type 5 has an invalid length. [ 77.076480][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 77.258643][ T4452] device vlan0 entered promiscuous mode [ 77.273581][ T4452] netlink: 148 bytes leftover after parsing attributes in process `syz.1.48'. [ 78.050160][ T4468] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4468] [ 78.249296][ T4231] tipc: Node number set to 2188341930 [ 78.678463][ T4451] device vlan0 left promiscuous mode [ 78.883950][ T4231] Bluetooth: hci2: command 0x0409 tx timeout [ 79.865389][ T4483] ODEBUG: Out of memory. ODEBUG disabled [ 80.677603][ T4484] device syzkaller0 entered promiscuous mode [ 80.713631][ T4489] loop5: detected capacity change from 0 to 7 [ 80.722529][ T4432] chnl_net:caif_netlink_parms(): no params data found [ 80.779135][ T4489] loop5: [ 80.782304][ T4489] loop5: partition table partially beyond EOD, truncated [ 81.196148][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.220404][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.246214][ T4432] device bridge_slave_0 entered promiscuous mode [ 81.707177][ T1107] cfg80211: failed to load regulatory.db [ 81.903936][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 81.973958][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 82.045521][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.086209][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.171719][ T4432] device bridge_slave_1 entered promiscuous mode [ 82.970787][ T4518] batman_adv: batadv0: Adding interface: veth0 [ 82.984536][ T4518] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.014260][ T4518] batman_adv: batadv0: Interface activated: veth0 [ 83.026490][ T4523] batman_adv: batadv0: Interface deactivated: veth0 [ 83.054139][ T4523] batman_adv: batadv0: Removing interface: veth0 [ 83.092192][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.099897][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.113809][ T23] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 83.124140][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.157775][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.177064][ T23] usb 3-1: config 1 has no interface number 0 [ 83.193840][ T23] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.231340][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.243475][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.303911][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.342009][ T4306] device hsr_slave_0 left promiscuous mode [ 83.389636][ T4306] device hsr_slave_1 left promiscuous mode [ 83.396374][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.414387][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.432720][ T23] usb 3-1: Product: syz [ 83.437642][ T23] usb 3-1: Manufacturer: syz [ 83.442263][ T23] usb 3-1: SerialNumber: syz [ 83.460042][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.488847][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.510984][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.523970][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.535541][ T23] cdc_wdm 3-1:1.128: skipping garbage [ 83.543902][ T23] cdc_wdm: probe of 3-1:1.128 failed with error -22 [ 83.553785][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 83.561271][ T4306] device bridge_slave_1 left promiscuous mode [ 83.568908][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.594271][ T4306] device bridge_slave_0 left promiscuous mode [ 83.600635][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.631989][ T4306] device veth1_macvtap left promiscuous mode [ 83.643889][ T4306] device veth0_macvtap left promiscuous mode [ 83.650106][ T4306] device veth1_vlan left promiscuous mode [ 83.662516][ T4306] device veth0_vlan left promiscuous mode [ 83.678731][ T4231] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 83.693932][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.756302][ T4231] pvrusb2: Hardware description: Terratec Grabster AV400 [ 83.763394][ T4231] pvrusb2: ********** [ 83.778752][ T4231] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 83.789350][ T4231] pvrusb2: Important functionality might not be entirely working. [ 83.797856][ T4231] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 83.809280][ T4231] pvrusb2: ********** [ 83.923958][ T1323] Bluetooth: hci2: command 0x040f tx timeout [ 83.978828][ T2425] pvrusb2: Invalid write control endpoint [ 84.030082][ T4306] team0 (unregistering): Port device team_slave_1 removed [ 84.037875][ T2425] pvrusb2: Invalid write control endpoint [ 84.046697][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 84.056812][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 84.065442][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 84.077140][ T2425] pvrusb2: Device being rendered inoperable [ 84.077446][ T4306] team0 (unregistering): Port device team_slave_0 removed [ 84.085051][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 84.099175][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 84.109936][ T2425] pvrusb2: Attached sub-driver cx25840 [ 84.122562][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 84.132940][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 84.150832][ T4306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.173108][ T4306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.288473][ T4306] bond0 (unregistering): Released all slaves [ 84.389080][ T4432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.419007][ T4528] netlink: 'syz.3.63': attribute type 21 has an invalid length. [ 84.434755][ T4528] netlink: 156 bytes leftover after parsing attributes in process `syz.3.63'. [ 84.452653][ T4432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.469277][ T4268] usb 4-1: USB disconnect, device number 2 [ 84.571404][ T4432] team0: Port device team_slave_0 added [ 84.606982][ T4432] team0: Port device team_slave_1 added [ 84.680193][ T4432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.697506][ T4432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.737297][ T4432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.756577][ T4432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.763679][ T4432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.806187][ T4432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.845462][ T4432] device hsr_slave_0 entered promiscuous mode [ 84.862214][ T4432] device hsr_slave_1 entered promiscuous mode [ 84.878525][ T1323] usb 3-1: USB disconnect, device number 2 [ 84.884929][ T4432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.912815][ T4432] Cannot create hsr debugfs directory [ 85.143931][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.161251][ T4556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.335990][ T4561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 86.036137][ T4567] loop3: detected capacity change from 0 to 512 [ 86.056874][ T1323] Bluetooth: hci2: command 0x0419 tx timeout [ 86.194719][ T4567] EXT4-fs error (device loop3): ext4_quota_enable:6444: comm syz.3.71: inode #524288: comm syz.3.71: iget: illegal inode # [ 86.213307][ T4567] EXT4-fs error (device loop3): ext4_quota_enable:6447: comm syz.3.71: Bad quota inode: 524288, type: 2 [ 86.231301][ T4567] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=524288). Please run e2fsck to fix. [ 86.261030][ T4567] EXT4-fs (loop3): mount failed [ 86.295661][ T4432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.336412][ T4432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.381833][ T4432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.427198][ T4578] device syzkaller0 entered promiscuous mode [ 86.437701][ T4432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.490752][ T4573] tipc: Started in network mode [ 86.499283][ T4573] tipc: Node identity 82c2462c9212, cluster identity 4711 [ 86.523486][ T4573] tipc: Enabled bearer , priority 0 [ 86.635308][ T4571] tipc: Resetting bearer [ 86.672406][ T4571] tipc: Disabling bearer [ 86.694650][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 86.714333][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 86.863586][ T4587] loop2: detected capacity change from 0 to 1024 [ 86.888242][ T4432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.934467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.943578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.975599][ T4590] unsupported nla_type 35 [ 86.983272][ T4432] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.012827][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.026978][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.056399][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.063546][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.074845][ T4587] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 87.115562][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.131822][ T4587] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.154746][ T4597] loop3: detected capacity change from 0 to 64 [ 87.182664][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.202543][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.234460][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.241573][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.263823][ T4587] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 87.289544][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.317790][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.477196][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.486574][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.516989][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.535428][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.295459][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.381557][ T4432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.423944][ T4432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.441595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.462381][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.493130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.504645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.524339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.640841][ T4587] loop2: detected capacity change from 0 to 8192 [ 88.677700][ T4587] ======================================================= [ 88.677700][ T4587] WARNING: The mand mount option has been deprecated and [ 88.677700][ T4587] and is ignored by this kernel. Remove the mand [ 88.677700][ T4587] option from the mount to silence this warning. [ 88.677700][ T4587] ======================================================= [ 89.013810][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.021953][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.036799][ T4432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.095669][ T4639] loop1: detected capacity change from 0 to 4096 [ 90.300684][ T4639] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 90.909532][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.953372][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.991872][ T4188] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 90.991940][ T4188] FAT-fs (loop2): Filesystem has been set read-only [ 91.017347][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.017955][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.018657][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.019107][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.020456][ T4432] device veth0_vlan entered promiscuous mode [ 91.049226][ T4432] device veth1_vlan entered promiscuous mode [ 91.139946][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.140517][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.140940][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.141360][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.154999][ T4432] device veth0_macvtap entered promiscuous mode [ 91.171000][ T4432] device veth1_macvtap entered promiscuous mode [ 91.213023][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.213120][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.213130][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.213141][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.213150][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.213160][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.215906][ T4432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.216019][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.216572][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.216988][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.217385][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.323343][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.323363][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.323373][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.323384][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.323392][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.323403][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.329846][ T4432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.333954][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.334592][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.339821][ T4432] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.339854][ T4432] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.339878][ T4432] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.339902][ T4432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.597094][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.597114][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.597312][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.680877][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.680898][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.706411][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.834853][ T4665] chnl_net:caif_netlink_parms(): no params data found [ 92.846683][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.846717][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.847675][ T4665] device bridge_slave_0 entered promiscuous mode [ 92.849329][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.849360][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.850195][ T4665] device bridge_slave_1 entered promiscuous mode [ 92.869150][ T4665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.871413][ T4665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.917875][ T4697] device macsec1 entered promiscuous mode [ 92.917892][ T4697] device virt_wifi0 entered promiscuous mode [ 92.954420][ T4665] team0: Port device team_slave_0 added [ 92.956405][ T4665] team0: Port device team_slave_1 added [ 92.996207][ T4699] device syzkaller0 entered promiscuous mode [ 93.100258][ T4709] loop5: detected capacity change from 0 to 1024 [ 93.145977][ T4709] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 93.146047][ T4709] EXT4-fs (loop5): fragment/cluster size (16384) != block size (1024) [ 93.147258][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.147272][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.147289][ T4665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.150543][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.150555][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.150573][ T4665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.306274][ T4665] device hsr_slave_0 entered promiscuous mode [ 93.322904][ T4665] device hsr_slave_1 entered promiscuous mode [ 93.332921][ T4665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.453541][ T1323] Bluetooth: hci3: command 0x0409 tx timeout [ 93.521462][ T4665] Cannot create hsr debugfs directory [ 93.618586][ T4725] loop1: detected capacity change from 0 to 8 [ 93.650386][ T4306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.740627][ T4306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.802066][ T4306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.888864][ T4306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.971434][ T4737] loop1: detected capacity change from 0 to 256 [ 94.078708][ T4737] FAT-fs (loop1): Directory bread(block 64) failed [ 94.087433][ T4737] FAT-fs (loop1): Directory bread(block 65) failed [ 94.101772][ T4665] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.114134][ T4737] FAT-fs (loop1): Directory bread(block 66) failed [ 94.122817][ T4665] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.129914][ T4737] FAT-fs (loop1): Directory bread(block 67) failed [ 94.138199][ T4737] FAT-fs (loop1): Directory bread(block 68) failed [ 94.144998][ T4737] FAT-fs (loop1): Directory bread(block 69) failed [ 94.151670][ T4737] FAT-fs (loop1): Directory bread(block 70) failed [ 94.193364][ T4665] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.203013][ T4737] FAT-fs (loop1): Directory bread(block 71) failed [ 94.234450][ T4737] FAT-fs (loop1): Directory bread(block 72) failed [ 94.241281][ T4737] FAT-fs (loop1): Directory bread(block 73) failed [ 94.249948][ T4665] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.461484][ T4665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.497541][ T4306] bridge0: port 3(erspan0) entered disabled state [ 94.513412][ T4306] device erspan0 left promiscuous mode [ 94.527081][ T4306] bridge0: port 3(erspan0) entered disabled state [ 94.560378][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.578234][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.645045][ T4665] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.666357][ T4753] batman_adv: batadv0: Adding interface: virt_wifi0 [ 94.672996][ T4753] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.737385][ T4753] batman_adv: batadv0: Interface activated: virt_wifi0 [ 94.837754][ T4774] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 94.907447][ T4774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.923430][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.951694][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.960281][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.967537][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.003346][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 95.111417][ T4774] bond1: (slave bridge1): making interface the new active one [ 95.127466][ T4774] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 95.139622][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.149618][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.167647][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.180330][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.187663][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.195573][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.206711][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.222310][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.249637][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.271813][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 95.286430][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.496656][ T4787] team0 (unregistering): Port device team_slave_0 removed [ 96.083979][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 96.134882][ T4803] loop5: detected capacity change from 0 to 256 [ 96.190472][ T4787] team0 (unregistering): Failed to send options change via netlink (err -105) [ 96.211611][ T4787] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 96.230966][ T4787] team0 (unregistering): Port device team_slave_1 removed [ 96.269205][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.290302][ T4803] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 96.302429][ T4805] loop2: detected capacity change from 0 to 2048 [ 96.314186][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.357013][ T4803] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 96.423170][ T4665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.436812][ T4665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.476777][ T4805] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,block_validity,nobarrier,,errors=continue. Quota mode: writeback. [ 96.486039][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.502055][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.519703][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.525330][ T4805] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.561580][ T4814] futex_wake_op: syz.3.117 tries to shift op by 144; fix this program [ 96.585142][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.969790][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.249021][ T4306] device hsr_slave_0 left promiscuous mode [ 97.377429][ T4306] device hsr_slave_1 left promiscuous mode [ 97.551839][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.574105][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.621088][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.698547][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.748897][ T4306] device bridge_slave_1 left promiscuous mode [ 97.770570][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.792407][ T4306] device bridge_slave_0 left promiscuous mode [ 97.809188][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.881351][ T4306] device veth1_macvtap left promiscuous mode [ 97.896284][ T4306] device veth0_macvtap left promiscuous mode [ 97.903133][ T4306] device veth1_vlan left promiscuous mode [ 97.939361][ T4306] device veth0_vlan left promiscuous mode [ 98.165620][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 98.182001][ T4851] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 2 [ 98.631513][ T4306] team0 (unregistering): Port device team_slave_1 removed [ 98.643847][ T1107] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 98.671726][ T4306] team0 (unregistering): Port device team_slave_0 removed [ 98.700139][ T4306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.718167][ T4306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.839202][ T4306] bond0 (unregistering): Released all slaves [ 98.948690][ T1107] usb 6-1: Using ep0 maxpacket: 16 [ 99.313963][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 99.322856][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.444060][ T1107] usb 6-1: config 7 has an invalid interface number: 201 but max is 0 [ 99.519558][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.541039][ T1107] usb 6-1: config 7 has no interface number 0 [ 99.787560][ T4665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.875513][ T1107] usb 6-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=93.12 [ 99.930523][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.993197][ T1107] usb 6-1: Product: syz [ 100.009399][ T1107] usb 6-1: Manufacturer: syz [ 100.047264][ T1107] usb 6-1: SerialNumber: syz [ 100.250755][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 100.475623][ T1107] option 6-1:7.201: GSM modem (1-port) converter detected [ 101.566467][ T1107] usb 6-1: USB disconnect, device number 2 [ 101.581187][ T1107] option 6-1:7.201: device disconnected [ 101.589509][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.595863][ T4910] loop5: detected capacity change from 0 to 128 [ 101.614804][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.686449][ T4910] FAT-fs (loop5): Unrecognized mount option "tz=U*ÏGŽÀ¶uþì+Ó'TC" or missing value [ 101.704575][ T4911] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 101.787162][ T4665] device veth0_vlan entered promiscuous mode [ 101.818723][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.848225][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.922991][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.942772][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.967449][ T4665] device veth1_vlan entered promiscuous mode [ 102.037418][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.054812][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.082384][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.115828][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.148433][ T4665] device veth0_macvtap entered promiscuous mode [ 102.173815][ T1110] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 102.185899][ T4665] device veth1_macvtap entered promiscuous mode [ 102.237760][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 102.271035][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.292460][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.321842][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.355145][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.381484][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.418518][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.464695][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.475099][ T4918] overlayfs: failed to resolve './file0': -2 [ 102.516402][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.537939][ T1110] usb 6-1: config 1 has an invalid interface number: 139 but max is 0 [ 102.567109][ T1110] usb 6-1: config 1 has no interface number 0 [ 102.568349][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.573258][ T1110] usb 6-1: config 1 interface 139 altsetting 5 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 102.633808][ T1110] usb 6-1: config 1 interface 139 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0 [ 102.643841][ T1110] usb 6-1: config 1 interface 139 has no altsetting 0 [ 102.680004][ T4929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.706095][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.728218][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.801670][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.824991][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.844677][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.864494][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.896039][ T1110] usb 6-1: string descriptor 0 read error: -22 [ 102.904731][ T1110] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=ee.02 [ 102.918075][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.932413][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.943207][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.964662][ T4665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.979872][ T4665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.006123][ T1110] usb 6-1: Found UVC 0.00 device (18ec:3288) [ 103.021012][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.028879][ T1110] usb 6-1: No valid video chain found. [ 103.086237][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.104704][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.135093][ T4665] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.157849][ T4665] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.185213][ T4665] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.189029][ T4948] loop3: detected capacity change from 0 to 256 [ 103.240522][ T4665] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.320664][ T4233] usb 6-1: USB disconnect, device number 3 [ 103.420323][ T4948] page:ffffea00013d0980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f426 [ 103.480272][ T4948] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 103.511543][ T4951] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 103.530155][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.549674][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.579244][ T4948] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016c41500 [ 103.609241][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.633063][ T4951] FAT-fs (loop3): Filesystem has been set read-only [ 103.634102][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.673807][ T4948] raw: 0000000000000000 0000000000400040 00000001ffffffff 0000000000000000 [ 103.709799][ T4956] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 103.719910][ T4948] page dumped because: unmovable page [ 103.739274][ T4948] page_owner tracks the page as allocated [ 103.773116][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.800994][ T4948] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4945, ts 102972771104, free_ts 102791351114 [ 103.834079][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.969529][ T4948] get_page_from_freelist+0x24f6/0x2670 [ 103.979462][ T4948] __alloc_pages+0x1ee/0x480 [ 103.999737][ T4948] new_slab+0xc0/0x4b0 [ 104.015725][ T4948] ___slab_alloc+0x807/0xdd0 [ 104.053516][ T4948] kmem_cache_alloc_trace+0xf9/0x290 [ 104.078138][ T4948] tipc_nametbl_lookup_group+0x775/0xc10 [ 104.085591][ T4948] __tipc_sendmsg+0xf1f/0x2b60 [ 104.108068][ T4948] tipc_sendmsg+0x51/0x70 [ 104.173046][ T4948] ____sys_sendmsg+0x5be/0x8f0 [ 104.183904][ T4948] ___sys_sendmsg+0x236/0x2e0 [ 104.188683][ T4948] __se_sys_sendmsg+0x1b7/0x2a0 [ 104.193551][ T4948] do_syscall_64+0x4c/0xa0 [ 104.254143][ T4948] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.309731][ T4948] page last free stack trace: [ 104.492137][ T4948] free_unref_page_prepare+0x637/0x6c0 [ 104.662933][ T4948] free_unref_page+0x8f/0x2a0 [ 104.783925][ T4948] __vunmap+0x8e0/0xa80 [ 104.788168][ T4948] kcov_mmap+0x89/0x120 [ 104.792493][ T4948] mmap_file+0x5d/0xb0 [ 104.796957][ T4948] mmap_region+0x1048/0x1730 [ 104.801596][ T4948] do_mmap+0x801/0xe30 [ 104.829695][ T4948] vm_mmap_pgoff+0x1c1/0x2d0 [ 104.950699][ T4948] ksys_mmap_pgoff+0x4e2/0x790 [ 104.974625][ T4948] do_syscall_64+0x4c/0xa0 [ 104.979122][ T4948] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.215707][ T4977] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 105.217392][ T4190] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 105.252297][ T4190] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 105.647840][ T4982] loop1: detected capacity change from 0 to 164 [ 105.744012][ T4982] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 106.994646][ T5000] device syzkaller0 entered promiscuous mode [ 107.558562][ T5021] loop1: detected capacity change from 0 to 1024 [ 107.687278][ T5025] loop5: detected capacity change from 0 to 1024 [ 108.281006][ T5021] EXT4-fs (loop1): Ignoring removed bh option [ 108.325742][ T4306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.417104][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback. [ 108.573135][ T5021] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.579127][ T4305] hfsplus: b-tree write err: -5, ino 25 [ 108.618211][ T4305] hfsplus: b-tree write err: -5, ino 4 [ 108.624365][ T4305] hfsplus: b-tree write err: -5, ino 2 [ 108.683210][ T4306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.807777][ T4306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.873845][ T21] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 108.900034][ T4306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.014371][ T1323] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 109.235768][ T5032] chnl_net:caif_netlink_parms(): no params data found [ 109.284626][ T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.299259][ T21] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 109.442683][ T4306] tipc: Left network mode [ 109.459974][ T21] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 109.503828][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.511881][ T21] usb 7-1: SerialNumber: syz [ 109.547097][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.553984][ T1323] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 109.559036][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.581708][ T1323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.582721][ T5032] device bridge_slave_0 entered promiscuous mode [ 109.593804][ T1323] usb 6-1: Product: syz [ 109.614022][ T1323] usb 6-1: Manufacturer: syz [ 109.620695][ T1323] usb 6-1: SerialNumber: syz [ 109.622831][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.657194][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.672942][ T5032] device bridge_slave_1 entered promiscuous mode [ 109.754160][ T1323] ums-karma 6-1:1.0: USB Mass Storage device detected [ 109.815643][ T1323] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 109.815643][ T1323] Please send a copy of this message to and [ 109.823476][ T5032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.504916][ T5032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.548511][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 110.603354][ T5065] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 110.612991][ T5065] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 110.622674][ T5065] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 110.624058][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 110.624069][ T26] audit: type=1800 audit(1790978047.695:68): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.166" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 110.845114][ T5032] team0: Port device team_slave_0 added [ 110.872688][ T5032] team0: Port device team_slave_1 added [ 110.906227][ T21] usb 7-1: USB disconnect, device number 2 [ 110.963472][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.984354][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.042508][ T5032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.062787][ T1323] ums-karma: probe of 6-1:1.0 failed with error -5 [ 111.097781][ T1323] usb 6-1: USB disconnect, device number 4 [ 111.147527][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.189166][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.343014][ T5032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.581030][ T5032] device hsr_slave_0 entered promiscuous mode [ 111.637438][ T5032] device hsr_slave_1 entered promiscuous mode [ 111.683647][ T5032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.718937][ T5032] Cannot create hsr debugfs directory [ 111.989337][ T5102] loop6: detected capacity change from 0 to 2048 [ 112.037036][ T5102] EXT4-fs (loop6): bad block size 8192 [ 112.103831][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 112.153915][ T5096] syz.6.172 (5096) used greatest stack depth: 18000 bytes left [ 112.564487][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 112.910374][ T5032] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.305166][ T5121] loop6: detected capacity change from 0 to 512 [ 113.314610][ T5119] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 113.331233][ T5032] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.349575][ T5032] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.412256][ T5121] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 113.424708][ T5032] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.459782][ T5119] overlayfs: failed to look up (tracing) for ino (-66) [ 113.474444][ T5121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 113.523959][ T5121] System zones: 1-12 [ 113.605608][ T4306] device hsr_slave_0 left promiscuous mode [ 113.621978][ T4306] device hsr_slave_1 left promiscuous mode [ 113.636565][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.645267][ T5121] EXT4-fs (loop6): 1 truncate cleaned up [ 113.650937][ T5121] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000009,bsddf,debug,data_err=ignore,errors=remount-ro,. Quota mode: none. [ 113.674051][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.686339][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.703943][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.724949][ T4306] device bridge_slave_1 left promiscuous mode [ 113.731228][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.776048][ T4306] device bridge_slave_0 left promiscuous mode [ 113.782276][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.852904][ T4306] device veth1_macvtap left promiscuous mode [ 113.867417][ T5121] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 113.879593][ T4306] device veth0_macvtap left promiscuous mode [ 113.891481][ T4306] device veth1_vlan left promiscuous mode [ 113.906312][ T5121] EXT4-fs (loop6): Remounting filesystem read-only [ 113.912999][ T4306] device veth0_vlan left promiscuous mode [ 113.925157][ T5121] EXT4-fs error (device loop6): __ext4_new_inode:1360: inode #18: comm syz.6.176: mark_inode_dirty error [ 113.963301][ T5121] EXT4-fs (loop6): Remounting filesystem read-only [ 113.987486][ T5121] EXT4-fs error (device loop6) in __ext4_new_inode:1362: Corrupt filesystem [ 114.031108][ T5121] EXT4-fs (loop6): Remounting filesystem read-only [ 114.051373][ T5121] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 114.141129][ T5121] EXT4-fs (loop6): Remounting filesystem read-only [ 114.184772][ T5121] EXT4-fs error (device loop6): ext4_evict_inode:284: inode #18: comm syz.6.176: mark_inode_dirty error [ 114.204380][ T5121] EXT4-fs (loop6): Remounting filesystem read-only [ 114.211025][ T5121] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 114.540961][ T4306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.557355][ T4306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.643871][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 114.651946][ T5162] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 114.664959][ T4306] bond0 (unregistering): Released all slaves [ 114.880207][ T5032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.982531][ T5032] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.033395][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.044521][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.079958][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.123024][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.221333][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.228529][ T4608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.436457][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.559234][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.635031][ T4608] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.642144][ T4608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.653473][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.762323][ T5178] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.778443][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.804688][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.831806][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.886930][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.897455][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.907521][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.952011][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.984567][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.041932][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.076288][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.144955][ T5195] ip_tables: iptables: counters copy to user failed while replacing table [ 116.723802][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 116.831078][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.875066][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.214161][ T5220] binder: 5215:5220 ioctl c0306201 0 returned -14 [ 117.287368][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.306900][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.343382][ T5032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.714803][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.734400][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.781413][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.802801][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.844728][ T5032] device veth0_vlan entered promiscuous mode [ 118.855633][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.874213][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.885233][ T5032] device veth1_vlan entered promiscuous mode [ 118.960597][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.981395][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.018467][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.044962][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.048043][ T5262] loop1: detected capacity change from 0 to 1024 [ 119.101932][ T5032] device veth0_macvtap entered promiscuous mode [ 119.121532][ T5032] device veth1_macvtap entered promiscuous mode [ 119.152517][ T5262] hfsplus: failed to load root directory [ 119.201482][ T5032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.243577][ T5032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.275506][ T5032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.303742][ T5032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.334198][ T5032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.353783][ T5032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.382114][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.404228][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.413411][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.428848][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.448073][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.492658][ T5032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.524637][ T5032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.535946][ T5032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.565687][ T5032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.576121][ T5032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.591222][ T5032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.609093][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.630706][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.649090][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.688731][ T5032] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.698969][ T5032] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.206864][ T5032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.236802][ T5032] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.221482][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.248826][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.310404][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.329437][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.348337][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.387103][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.923719][ C0] sched: RT throttling activated [ 125.228046][ T1110] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 125.484019][ T1110] usb 7-1: Using ep0 maxpacket: 8 [ 125.604074][ T1110] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.612489][ T1110] usb 7-1: config 179 has no interface number 0 [ 125.628674][ T4305] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.646127][ T1110] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 125.666493][ T1110] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 125.686771][ T1110] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 125.713207][ T1110] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 125.743392][ T1110] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.780628][ T1110] usb 7-1: config 179 interface 65 has no altsetting 0 [ 125.791892][ T4305] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.795499][ T1110] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 125.829092][ T1110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.904562][ T4305] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.914489][ T1110] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input5 [ 125.999525][ T4305] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.361613][ T5370] device syzkaller1 entered promiscuous mode [ 126.715070][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 126.811696][ T5365] chnl_net:caif_netlink_parms(): no params data found [ 127.044249][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.052436][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.067187][ T1107] usb 7-1: USB disconnect, device number 3 [ 127.078881][ T5365] device bridge_slave_0 entered promiscuous mode [ 127.085767][ T1107] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 127.127946][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.155635][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.204974][ T5365] device bridge_slave_1 entered promiscuous mode [ 127.308927][ T5365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.455255][ T5365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.116801][ T5365] team0: Port device team_slave_0 added [ 128.131956][ T5365] team0: Port device team_slave_1 added [ 128.151046][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.158087][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.184511][ T5365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.201110][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.208568][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.234905][ T5365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.323841][ T4783] Bluetooth: hci2: command 0x0409 tx timeout [ 128.463507][ T5365] device hsr_slave_0 entered promiscuous mode [ 128.919734][ T5365] device hsr_slave_1 entered promiscuous mode [ 129.481708][ T5426] loop7: detected capacity change from 0 to 256 [ 129.488906][ T5365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.498866][ T5365] Cannot create hsr debugfs directory [ 129.653414][ T5426] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 129.802081][ T4305] device hsr_slave_0 left promiscuous mode [ 129.810356][ T26] audit: type=1800 audit(1790978066.905:69): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.230" name="file1" dev="loop7" ino=1048617 res=0 errno=0 [ 129.847041][ T4305] device hsr_slave_1 left promiscuous mode [ 129.882959][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.924336][ T5426] attempt to access beyond end of device [ 129.924336][ T5426] loop7: rw=0, want=265312, limit=256 [ 129.937000][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.976893][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.998155][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.029226][ T4305] device bridge_slave_1 left promiscuous mode [ 130.057100][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.067450][ T5426] attempt to access beyond end of device [ 130.067450][ T5426] loop7: rw=0, want=265400, limit=256 [ 130.107955][ T4305] device bridge_slave_0 left promiscuous mode [ 130.143571][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.210602][ T4305] device virt_wifi0 left promiscuous mode [ 130.256956][ T4305] device veth1_macvtap left promiscuous mode [ 130.300856][ T4305] device veth0_macvtap left promiscuous mode [ 130.329767][ T4305] device veth1_vlan left promiscuous mode [ 130.353032][ T4305] device veth0_vlan left promiscuous mode [ 130.883858][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 132.886661][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.893057][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.963857][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 133.144586][ T4305] team0 (unregistering): Port device team_slave_1 removed [ 133.166204][ T4305] team0 (unregistering): Port device team_slave_0 removed [ 133.191755][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.213006][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.338519][ T4305] bond0 (unregistering): Released all slaves [ 133.430678][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.234'. [ 135.431628][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 135.797433][ T5365] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 135.827023][ T5365] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 135.866220][ T5365] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 135.888772][ T5365] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 135.989555][ T5548] loop6: detected capacity change from 0 to 256 [ 136.141705][ T5548] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 136.192452][ T5365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.247665][ T26] audit: type=1800 audit(1790978073.345:70): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.242" name="file1" dev="loop6" ino=1048619 res=0 errno=0 [ 136.293573][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.317239][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.336290][ T5365] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.356634][ T5548] attempt to access beyond end of device [ 136.356634][ T5548] loop6: rw=0, want=266040, limit=256 [ 136.374702][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.384692][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.399515][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.406671][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.477746][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.494520][ T5548] attempt to access beyond end of device [ 136.494520][ T5548] loop6: rw=0, want=266424, limit=256 [ 136.530610][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.603248][ T5557] loop7: detected capacity change from 0 to 1024 [ 136.628521][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.658622][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.665763][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.725557][ T5557] hfsplus: failed to load root directory [ 136.749889][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.824966][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.884644][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.909696][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.974539][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.025907][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.059385][ T5365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.093198][ T5365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.182149][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.210356][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.244449][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.273629][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.297938][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.358160][ T5575] netlink: 'syz.7.246': attribute type 1 has an invalid length. [ 137.396134][ T5577] device gretap1 entered promiscuous mode [ 137.455443][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.623839][ T1110] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 137.808775][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.837089][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.883783][ T1110] usb 7-1: Using ep0 maxpacket: 32 [ 137.886854][ T5365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.004032][ T1110] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.035037][ T1110] usb 7-1: config 0 has no interfaces? [ 138.040587][ T1110] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.101410][ T1110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.141135][ T1110] usb 7-1: config 0 descriptor?? [ 138.452119][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.461735][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.520100][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.535311][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.607742][ T5365] device veth0_vlan entered promiscuous mode [ 138.626307][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.635761][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.343759][ T4176] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.357844][ T21] usb 7-1: USB disconnect, device number 4 [ 139.374170][ T5365] device veth1_vlan entered promiscuous mode [ 139.481545][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.511943][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.568372][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.617926][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.644913][ T4176] usb 2-1: Using ep0 maxpacket: 8 [ 139.660956][ T5365] device veth0_macvtap entered promiscuous mode [ 139.701993][ T5365] device veth1_macvtap entered promiscuous mode [ 139.764532][ T4176] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.783348][ T4176] usb 2-1: config 179 has no interface number 0 [ 139.827194][ T4176] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 139.943855][ T4176] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 139.956932][ T4176] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 139.971812][ T4176] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 139.984498][ T4176] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 139.998390][ T4176] usb 2-1: config 179 interface 65 has no altsetting 0 [ 140.005781][ T4176] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 140.015495][ T4176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.071671][ T4176] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 141.114369][ T26] audit: type=1326 audit(1790978078.205:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.2.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f633166e159 code=0x0 [ 141.137838][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.884124][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.925484][ T5624] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 141.935083][ T5624] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 141.944619][ T5624] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.287016][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.369890][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.428017][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.467413][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.510466][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.559044][ T4231] usb 2-1: USB disconnect, device number 3 [ 142.571544][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.588751][ T4231] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 142.625267][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.625279][ T5639] loop2: detected capacity change from 0 to 1024 [ 142.645176][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.668140][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.686656][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.702100][ T5639] hfsplus: failed to load root directory [ 142.744976][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.756121][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.768391][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.779021][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.792712][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.808936][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.823406][ T5365] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.846288][ T5365] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.855678][ T5365] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.864950][ T5365] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.875888][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.880302][ T5644] MPTCP: addr_signal error, add_addr=1, echo=0 [ 142.893056][ T5644] MPTCP: addr_signal error, rm_addr=1 [ 142.901607][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.247909][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.304469][ T5658] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 144.304741][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.233876][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.284723][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.292816][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.416345][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.795767][ T5678] loop7: detected capacity change from 0 to 64 [ 146.608782][ T5684] tipc: Failed to remove unknown binding: 66,0,0/0:3119297943/3119297945 [ 146.669630][ T5684] tipc: Failed to remove unknown binding: 66,0,0/0:3119297943/3119297944 [ 146.757612][ T5684] tipc: Failed to remove unknown binding: 66,0,0/0:3119297943/3119297945 [ 146.821178][ T5684] tipc: Failed to remove unknown binding: 66,0,0/0:3119297943/3119297944 [ 147.966883][ T5716] input: syz0 as /devices/virtual/input/input7 [ 148.275757][ T5722] loop7: detected capacity change from 0 to 16 [ 148.840882][ T5722] erofs: (device loop7): mounted with root inode @ nid 36. [ 148.909009][ T5720] attempt to access beyond end of device [ 148.909009][ T5720] loop7: rw=0, want=40, limit=16 [ 148.924521][ T5720] attempt to access beyond end of device [ 148.924521][ T5720] loop7: rw=524288, want=48, limit=16 [ 148.935988][ T5720] attempt to access beyond end of device [ 148.935988][ T5720] loop7: rw=524288, want=40, limit=16 [ 150.694245][ T5747] ip_tables: iptables: counters copy to user failed while replacing table [ 151.449334][ T5756] ip_tables: iptables: counters copy to user failed while replacing table [ 151.489558][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 152.559889][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.285'. [ 152.717204][ T5772] netlink: 'syz.7.285': attribute type 10 has an invalid length. [ 153.427020][ T5772] netlink: 40 bytes leftover after parsing attributes in process `syz.7.285'. [ 153.513864][ T5772] device dummy0 entered promiscuous mode [ 156.191630][ T5808] loop1: detected capacity change from 0 to 256 [ 156.351310][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.296'. [ 156.414081][ T5808] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.434423][ T5814] netlink: 44 bytes leftover after parsing attributes in process `syz.8.296'. [ 156.444516][ T5815] xt_limit: Overflow, try lower: 1207959552/384 [ 156.453985][ T5815] loop7: detected capacity change from 0 to 128 [ 156.469704][ T5808] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 156.547707][ T5815] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_dev=0x000000000000000a,,errors=continue. Quota mode: none. [ 156.561368][ T5815] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.583257][ T5808] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 156.740118][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 156.750162][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 156.757734][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.767805][ T4201] Workqueue: hci2 hci_rx_work [ 156.772527][ T4201] Call Trace: [ 156.775827][ T4201] [ 156.778775][ T4201] dump_stack_lvl+0x188/0x250 [ 156.783476][ T4201] ? show_regs_print_info+0x20/0x20 [ 156.788694][ T4201] ? load_image+0x410/0x410 [ 156.793231][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 156.798365][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 156.803060][ T4201] ? ret_from_fork+0x1f/0x30 [ 156.807694][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 156.813009][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 156.818245][ T4201] kobject_add+0x160/0x230 [ 156.822686][ T4201] ? kobject_init+0x1c0/0x1c0 [ 156.827382][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 156.832676][ T4201] ? get_device_parent+0x121/0x3e0 [ 156.838097][ T4201] device_add+0x470/0x1050 [ 156.842549][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 156.847509][ T4201] hci_sync_conn_complete_evt+0x647/0x9d0 [ 156.853235][ T4201] ? __rwlock_init+0x140/0x140 [ 156.858002][ T4201] hci_event_packet+0x8cf/0x1310 [ 156.862941][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 156.867787][ T4201] ? rcu_lock_release+0x20/0x20 [ 156.872642][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 156.877852][ T4201] hci_rx_work+0x255/0xa10 [ 156.882281][ T4201] process_one_work+0x867/0xff0 [ 156.887139][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 156.892774][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 156.898064][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 156.903093][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 156.908632][ T4201] ? wq_worker_running+0x97/0x170 [ 156.914544][ T4201] worker_thread+0xad7/0x12a0 [ 156.919257][ T4201] kthread+0x42e/0x520 [ 156.923323][ T4201] ? rcu_lock_release+0x20/0x20 [ 156.928164][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 156.932745][ T4201] ret_from_fork+0x1f/0x30 [ 156.937164][ T4201] [ 156.943551][ T4201] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 156.956889][ T4201] Bluetooth: hci2: failed to register connection device [ 157.284210][ T5839] device syzkaller0 entered promiscuous mode [ 159.375484][ T4251] Bluetooth: hci2: command 0x0409 tx timeout [ 159.702385][ T5862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'. [ 160.083053][ T5866] netlink: 44 bytes leftover after parsing attributes in process `syz.8.308'. [ 160.150034][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.157346][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.171505][ T5872] loop7: detected capacity change from 0 to 512 [ 160.219131][ T5872] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 160.232461][ T5872] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 160.343394][ T5872] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.309: inode #88: comm syz.7.309: iget: illegal inode # [ 160.361876][ T5872] EXT4-fs (loop7): Remounting filesystem read-only [ 160.368481][ T5872] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.309: error while reading EA inode 88 err=-117 [ 160.384180][ T5872] EXT4-fs (loop7): Remounting filesystem read-only [ 160.390982][ T5872] EXT4-fs (loop7): 1 orphan inode deleted [ 160.396816][ T5872] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,jqfmt=vfsold,nodelalloc,bsdgroups,. Quota mode: none. [ 160.661903][ T5877] gadgetfs: bound to dummy_udc driver [ 160.944223][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 161.023798][ T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 161.044265][ C1] gadgetfs: connected [ 161.063595][ T21] gadgetfs: disconnected [ 161.118129][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 161.199390][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.206897][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.215700][ T5881] device bridge_slave_0 entered promiscuous mode [ 161.224291][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.231421][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.239730][ T5881] device bridge_slave_1 entered promiscuous mode [ 161.263993][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.279194][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.305550][ T5881] team0: Port device team_slave_0 added [ 161.314310][ T5881] team0: Port device team_slave_1 added [ 161.323725][ C1] gadgetfs: connected [ 161.354169][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.361164][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.389146][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.401274][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 161.414711][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.424133][ T21] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 161.431911][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.466862][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 161.521835][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.527399][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.590402][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 161.603719][ C1] gadgetfs: configuration #1 [ 161.642199][ T21] gadgetfs: suspended from state 3 [ 161.689433][ T21] gadgetfs: disconnected [ 161.711378][ T5881] device hsr_slave_0 entered promiscuous mode [ 161.734456][ T4233] usb 1-1: USB disconnect, device number 3 [ 161.753642][ T5365] ================================================================== [ 161.761279][ T5881] device hsr_slave_1 entered promiscuous mode [ 161.762188][ T5365] BUG: KASAN: use-after-free in __mutex_lock_common+0x118/0x2400 [ 161.775948][ T5365] Read of size 8 at addr ffff88802afeac60 by task syz-executor/5365 [ 161.783932][ T5365] [ 161.786259][ T5365] CPU: 1 PID: 5365 Comm: syz-executor Not tainted syzkaller #0 [ 161.793824][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.803935][ T5365] Call Trace: [ 161.807226][ T5365] [ 161.810170][ T5365] dump_stack_lvl+0x188/0x250 [ 161.814875][ T5365] ? show_regs_print_info+0x20/0x20 [ 161.820091][ T5365] ? load_image+0x410/0x410 [ 161.824605][ T5365] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 161.830089][ T5365] print_address_description+0x60/0x2d0 [ 161.835652][ T5365] ? __mutex_lock_common+0x118/0x2400 [ 161.841040][ T5365] kasan_report+0xdf/0x130 [ 161.845474][ T5365] ? __mutex_lock_common+0x118/0x2400 [ 161.850864][ T5365] __mutex_lock_common+0x118/0x2400 [ 161.856090][ T5365] ? end_current_label_crit_section+0x170/0x170 [ 161.862347][ T5365] ? ep_open+0x4a/0x260 [ 161.866525][ T5365] ? mutex_lock_io_nested+0x60/0x60 [ 161.871740][ T5365] ? apparmor_file_open+0x3c7/0x790 [ 161.876960][ T5365] ? apparmor_inode_getattr+0x20/0x20 [ 161.882350][ T5365] ? __rwlock_init+0x140/0x140 [ 161.887139][ T5365] mutex_lock_interruptible_nested+0x17/0x20 [ 161.893141][ T5365] ep_open+0x4a/0x260 [ 161.897138][ T5365] ? do_dentry_open+0x7ec/0xf90 [ 161.902000][ T5365] ? ep_ioctl+0x1b0/0x1b0 [ 161.906349][ T5365] do_dentry_open+0x7f7/0xf90 [ 161.911151][ T5365] ? vfs_open+0x2b/0x80 [ 161.915498][ T5365] path_openat+0x2718/0x2fb0 [ 161.920122][ T5365] ? __kasan_slab_alloc+0xa9/0xc0 [ 161.925180][ T5365] ? do_filp_open+0x400/0x400 [ 161.929890][ T5365] do_filp_open+0x1df/0x400 [ 161.934409][ T5365] ? vfs_tmpfile+0x300/0x300 [ 161.939031][ T5365] ? _raw_spin_unlock+0x24/0x40 [ 161.943899][ T5365] ? alloc_fd+0x59e/0x650 [ 161.948247][ T5365] do_sys_openat2+0x14b/0x500 [ 161.952931][ T5365] ? __lock_acquire+0x7b50/0x7b50 [ 161.957979][ T5365] ? do_sys_open+0xe0/0xe0 [ 161.962403][ T5365] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.968406][ T5365] ? lock_chain_count+0x20/0x20 [ 161.973279][ T5365] __x64_sys_openat+0x135/0x160 [ 161.978156][ T5365] do_syscall_64+0x4c/0xa0 [ 161.982583][ T5365] ? clear_bhb_loop+0x30/0x80 [ 161.987289][ T5365] ? clear_bhb_loop+0x30/0x80 [ 161.991991][ T5365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.997915][ T5365] RIP: 0033:0x7f4f3cc4498e [ 162.002348][ T5365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.021967][ T5365] RSP: 002b:00007ffca96dd868 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.030397][ T5365] RAX: ffffffffffffffda RBX: 000055556ef7b500 RCX: 00007f4f3cc4498e [ 162.038383][ T5365] RDX: 0000000000000000 RSI: 00007ffca96dd9d0 RDI: ffffffffffffff9c [ 162.046375][ T5365] RBP: 00007ffca96dd9d0 R08: 0000000000000000 R09: 0000000000000000 [ 162.054361][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca96deac0 [ 162.062351][ T5365] R13: 00007f4f3cd1a4bb R14: 000055556ef7b4e8 R15: 0000000000000006 [ 162.070349][ T5365] [ 162.073375][ T5365] [ 162.075716][ T5365] Allocated by task 5877: [ 162.080046][ T5365] __kasan_kmalloc+0xaf/0xe0 [ 162.084649][ T5365] gadgetfs_bind+0x25b/0x820 [ 162.089245][ T5365] udc_bind_to_driver+0x203/0x5f0 [ 162.094278][ T5365] usb_gadget_probe_driver+0x1fb/0x380 [ 162.099794][ T5365] dev_config+0xe3c/0x1250 [ 162.104235][ T5365] vfs_write+0x304/0xd70 [ 162.108515][ T5365] ksys_write+0x153/0x260 [ 162.112853][ T5365] do_syscall_64+0x4c/0xa0 [ 162.117281][ T5365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.123180][ T5365] [ 162.125563][ T5365] Freed by task 21: [ 162.129369][ T5365] kasan_set_track+0x4b/0x70 [ 162.129588][ T5912] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 162.133966][ T5365] kasan_set_free_info+0x1f/0x40 [ 162.133991][ T5365] ____kasan_slab_free+0xd5/0x110 [ 162.134005][ T5365] slab_free_freelist_hook+0xec/0x170 [ 162.134019][ T5365] kfree+0xef/0x2a0 [ 162.134030][ T5365] destroy_ep_files+0x280/0x340 [ 162.171699][ T5365] gadgetfs_unbind+0x105/0x2a0 [ 162.176663][ T5365] usb_gadget_remove_driver+0x15c/0x350 [ 162.182239][ T5365] usb_gadget_unregister_driver+0x15d/0x4c0 [ 162.188151][ T5365] dev_release+0x82/0x1f0 [ 162.192497][ T5365] __fput+0x212/0x8c0 [ 162.196491][ T5365] delayed_fput+0x54/0x80 [ 162.200839][ T5365] process_one_work+0x867/0xff0 [ 162.205698][ T5365] worker_thread+0xad7/0x12a0 [ 162.210408][ T5365] kthread+0x42e/0x520 [ 162.214493][ T5365] ret_from_fork+0x1f/0x30 [ 162.218923][ T5365] [ 162.221248][ T5365] The buggy address belongs to the object at ffff88802afeac00 [ 162.221248][ T5365] which belongs to the cache kmalloc-512 of size 512 [ 162.235309][ T5365] The buggy address is located 96 bytes inside of [ 162.235309][ T5365] 512-byte region [ffff88802afeac00, ffff88802afeae00) [ 162.248513][ T5365] The buggy address belongs to the page: [ 162.254155][ T5365] page:ffffea0000abfa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2afe8 [ 162.264317][ T5365] head:ffffea0000abfa00 order:2 compound_mapcount:0 compound_pincount:0 [ 162.272655][ T5365] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 162.280664][ T5365] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 162.289262][ T5365] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 162.297851][ T5365] page dumped because: kasan: bad access detected [ 162.304265][ T5365] page_owner tracks the page as allocated [ 162.310003][ T5365] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2866, ts 17350836683, free_ts 17317578239 [ 162.329096][ T5365] get_page_from_freelist+0x24f6/0x2670 [ 162.334754][ T5365] __alloc_pages+0x1ee/0x480 [ 162.339462][ T5365] new_slab+0xc0/0x4b0 [ 162.343634][ T5365] ___slab_alloc+0x807/0xdd0 [ 162.348229][ T5365] kmem_cache_alloc_trace+0xf9/0x290 [ 162.353714][ T5365] alloc_bprm+0x56/0x690 [ 162.357995][ T5365] kernel_execve+0x49/0x8e0 [ 162.362494][ T5365] call_usermodehelper_exec_async+0x207/0x350 [ 162.368747][ T5365] ret_from_fork+0x1f/0x30 [ 162.373179][ T5365] page last free stack trace: [ 162.377838][ T5365] free_unref_page_prepare+0x637/0x6c0 [ 162.383309][ T5365] free_unref_page+0x8f/0x2a0 [ 162.387979][ T5365] stack_depot_save+0x42f/0x460 [ 162.392831][ T5365] __kasan_slab_alloc+0xa9/0xc0 [ 162.397681][ T5365] slab_post_alloc_hook+0x4c/0x380 [ 162.403049][ T5365] kmem_cache_alloc+0x15d/0x280 [ 162.407890][ T5365] __debug_object_init+0x8e5/0xc80 [ 162.412987][ T5365] call_usermodehelper_setup+0xa5/0x260 [ 162.418517][ T5365] kobject_uevent_env+0x658/0x890 [ 162.423525][ T5365] device_del+0x8e5/0xa80 [ 162.427838][ T5365] cdev_device_del+0x23/0xf0 [ 162.432414][ T5365] cec_unregister_adapter+0x1d6/0x260 [ 162.437772][ T5365] vivid_probe+0x3afb/0x6240 [ 162.442360][ T5365] platform_probe+0x137/0x1c0 [ 162.447022][ T5365] really_probe+0x276/0xc70 [ 162.451620][ T5365] __driver_probe_device+0x1f5/0x390 [ 162.456892][ T5365] [ 162.459202][ T5365] Memory state around the buggy address: [ 162.464811][ T5365] ffff88802afeab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.472850][ T5365] ffff88802afeab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.480896][ T5365] >ffff88802afeac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.488955][ T5365] ^ [ 162.496140][ T5365] ffff88802afeac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.504232][ T5365] ffff88802afead00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 162.512314][ T5365] ================================================================== [ 162.520378][ T5365] Disabling lock debugging due to kernel taint [ 162.528334][ T5881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.610674][ T5365] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 162.617917][ T5365] CPU: 0 PID: 5365 Comm: syz-executor Tainted: G B syzkaller #0 [ 162.626862][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.627272][ T5881] Cannot create hsr debugfs directory [ 162.637022][ T5365] Call Trace: [ 162.637031][ T5365] [ 162.637037][ T5365] dump_stack_lvl+0x188/0x250 [ 162.637059][ T5365] ? show_regs_print_info+0x20/0x20 [ 162.637073][ T5365] ? load_image+0x410/0x410 [ 162.662970][ T5365] panic+0x2f8/0x850 [ 162.666879][ T5365] ? bpf_jit_dump+0xd0/0xd0 [ 162.671391][ T5365] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 162.677374][ T5365] ? _raw_spin_unlock+0x40/0x40 [ 162.682228][ T5365] ? __mutex_lock_common+0x118/0x2400 [ 162.687605][ T5365] check_panic_on_warn+0x80/0xa0 [ 162.692552][ T5365] ? __mutex_lock_common+0x118/0x2400 [ 162.697965][ T5365] end_report+0x6d/0xf0 [ 162.702138][ T5365] kasan_report+0x102/0x130 [ 162.706656][ T5365] ? __mutex_lock_common+0x118/0x2400 [ 162.712058][ T5365] __mutex_lock_common+0x118/0x2400 [ 162.717281][ T5365] ? end_current_label_crit_section+0x170/0x170 [ 162.723533][ T5365] ? ep_open+0x4a/0x260 [ 162.727697][ T5365] ? mutex_lock_io_nested+0x60/0x60 [ 162.732902][ T5365] ? apparmor_file_open+0x3c7/0x790 [ 162.738108][ T5365] ? apparmor_inode_getattr+0x20/0x20 [ 162.743487][ T5365] ? __rwlock_init+0x140/0x140 [ 162.748258][ T5365] mutex_lock_interruptible_nested+0x17/0x20 [ 162.754247][ T5365] ep_open+0x4a/0x260 [ 162.758223][ T5365] ? do_dentry_open+0x7ec/0xf90 [ 162.763066][ T5365] ? ep_ioctl+0x1b0/0x1b0 [ 162.767487][ T5365] do_dentry_open+0x7f7/0xf90 [ 162.772151][ T5365] ? vfs_open+0x2b/0x80 [ 162.776291][ T5365] path_openat+0x2718/0x2fb0 [ 162.780875][ T5365] ? __kasan_slab_alloc+0xa9/0xc0 [ 162.785888][ T5365] ? do_filp_open+0x400/0x400 [ 162.790580][ T5365] do_filp_open+0x1df/0x400 [ 162.795075][ T5365] ? vfs_tmpfile+0x300/0x300 [ 162.799657][ T5365] ? _raw_spin_unlock+0x24/0x40 [ 162.804497][ T5365] ? alloc_fd+0x59e/0x650 [ 162.808814][ T5365] do_sys_openat2+0x14b/0x500 [ 162.813485][ T5365] ? __lock_acquire+0x7b50/0x7b50 [ 162.818498][ T5365] ? do_sys_open+0xe0/0xe0 [ 162.822903][ T5365] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.828871][ T5365] ? lock_chain_count+0x20/0x20 [ 162.833714][ T5365] __x64_sys_openat+0x135/0x160 [ 162.838556][ T5365] do_syscall_64+0x4c/0xa0 [ 162.842960][ T5365] ? clear_bhb_loop+0x30/0x80 [ 162.847620][ T5365] ? clear_bhb_loop+0x30/0x80 [ 162.852286][ T5365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.858165][ T5365] RIP: 0033:0x7f4f3cc4498e [ 162.862571][ T5365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.882162][ T5365] RSP: 002b:00007ffca96dd868 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.890593][ T5365] RAX: ffffffffffffffda RBX: 000055556ef7b500 RCX: 00007f4f3cc4498e [ 162.898570][ T5365] RDX: 0000000000000000 RSI: 00007ffca96dd9d0 RDI: ffffffffffffff9c [ 162.906539][ T5365] RBP: 00007ffca96dd9d0 R08: 0000000000000000 R09: 0000000000000000 [ 162.914497][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca96deac0 [ 162.922456][ T5365] R13: 00007f4f3cd1a4bb R14: 000055556ef7b4e8 R15: 0000000000000006 [ 162.930420][ T5365] [ 162.933743][ T5365] Kernel Offset: disabled [ 162.938066][ T5365] Rebooting in 86400 seconds..