last executing test programs: 5.97462563s ago: executing program 4 (id=576): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') r4 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) 5.073979982s ago: executing program 2 (id=581): epoll_create1(0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE={{0x54}, 0x79}}}, 0x7) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x200400d0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@noinit_itable}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") bind$unix(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000400)="b4", 0x1, 0xc0d1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0) 4.76243773s ago: executing program 4 (id=585): uname(&(0x7f0000000400)=""/136) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) 4.74738404s ago: executing program 4 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x4040058) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 4.701366701s ago: executing program 4 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], &(0x7f0000001e40), 0x0) 4.700520231s ago: executing program 2 (id=589): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda0c, 0x20, 0x9, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x1c9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 4.635671873s ago: executing program 1 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) write(0xffffffffffffffff, &(0x7f0000000700)="010000000705810240000007", 0x12) 4.234073713s ago: executing program 1 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000300)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x3ffff, 0x2, {0xd, @vbi={0x4, 0x4, 0x10000, 0x43353039, [0x80000000, 0x7fff], [0x9, 0x6], 0x13a}}, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x27) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 3.370111505s ago: executing program 4 (id=593): setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.366960785s ago: executing program 1 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000001c0)={0x1, 0xf}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000083c4000100010000000000000207000000", @ANYRES32, @ANYBLOB="04000200410100000c001a800800048004"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSCOUNTS(r2, 0x80205871, &(0x7f0000000300)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x3ffff, 0x2, {0xd, @vbi={0x4, 0x4, 0x10000, 0x43353039, [0x80000000, 0x7fff], [0x9, 0x6], 0x13a}}, 0x3}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setuid(0xee01) 2.729786981s ago: executing program 2 (id=595): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0", 0x87}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.694836362s ago: executing program 2 (id=596): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') r4 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) 2.542002366s ago: executing program 3 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x4040058) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.434036638s ago: executing program 1 (id=601): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x80000) socket(0x10, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_setup(0x2301, &(0x7f0000000440)={0x0, 0x8270, 0x800, 0x5, 0xa2}) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1.767803966s ago: executing program 3 (id=602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x78, 0x2c, 0xf2f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x200, 0x4, 0x78f}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 1.753710735s ago: executing program 0 (id=603): r0 = syz_mount_image$fuse(0x0, 0x0, 0x20008, &(0x7f0000000140)=ANY=[], 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='usbip-', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffffff, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000140)='0x1d6b\x00', 0x7) close(r3) r4 = openat(r0, 0x0, 0x401801, 0x0) write(r4, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00') 1.683279978s ago: executing program 0 (id=604): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x814}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000ebffff0400000a14000000510001000000e139884e4cb72ddfcd52"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 1.682463948s ago: executing program 1 (id=605): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000a00)={r7, r5, r6, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x900, 0x0, 0x4, 0x0, 0x2}}) 1.626742499s ago: executing program 3 (id=606): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda0c, 0x20, 0x9, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x1c9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1.470012743s ago: executing program 2 (id=607): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.441480583s ago: executing program 2 (id=608): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000a80)='./bus\x00', 0x1008040, &(0x7f0000000b80)={[{@resuid}, {@nojournal_checksum}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@nogrpid}]}, 0x1, 0x5d2, &(0x7f0000000300)="$eJzs3U1oG1ceAPD/jKw4H846C7uwu+QQdheyECLb+dimPSXX0kAgh0IvrVEUEyxHwZLb2Bjq3ENpDqUtuaS39tBjSw89lF567LWXfpwLoTEtxIG0KrJGjuNIjuzEVmL9fiDrvZnn+f+fRu9JM8ygAPrWocafNOKfEXEuiRhetW4gspWHmu2WFueL9xbni0nU6+d/SSKJiLuL88VW+yR73hcRCxHxj4j4Oh9xJI2I+0ONVbtabauzc5Pj5XJpOquP1KaujFRn545emhqfKE2ULh9/4cWTp06cHDs2tjrde/XVtfzG+nr9hxvvXP/25Vs3Pvn04ELxvfEkTsdQtm51P56m5muSj9Nrlp/YimA9lPQ6ATYll43zxlD6ewxHLhv17dRXTw6D25IesIXqgxH1FauKQB9IDHroU63vAY3j37uL8/XcFh0Hd3L7TPMApBF/aXG++Ha04g80z03E7uVjk72/Jg8dmTSONw9sZ6LsSAvXImJ0YCB7/xcfnAdKsvff5o22X7z/CTfLU/TVmeaOenT/pyvzT7SZf4Za506fUGv+W8rmv6U28XMd5r9zXcb4/bWfPuwY/9pg/Ktt/GQlftImfhoRb3QZ/+arX5zqtK7+UcThaB+/JVn//PDIxUvl0mjzb9sYXx4++FLn/kfs7RC/ec5293Iiq/u/K8sp7bL/n3/z2b8X1on/v/+sv//bvf57IuLdR7Z2v22Mv979+JVOud2+ltxpfAvY6P5PIh+3HtfxzP9PH/o+KzprCAAAAAAAAAAAT1G6fC1bkhZWymlaKDTv4f1b7E3LlWrtyMXKTC675u1A5NPWlVbDzXrSqI9l1+O26sfW1I/nsoC5Pcv1QrFSvtDjvgMAAAAAAAAAAAAAAAAAAMCzYt+a+/9/yy3f/7/256qBnarzT34DO53xD/3r4fGf9CwPYPv5/Ie+VV9//Ps+ADuZz3/oX8Y/9C/jH/rXw+N/sPm0pze5ANvL5z/0L+MfAAAAAAAAAAAAAAAAAAAAAAAAAAC2xLmzZxuP+r3F+WKjfmFgdmay8ubRC6XqZGFqplgoVqavFCYqlYlyqVCsTD1ue0mlcmU0Ls9cHamVqrWR6uzc61OVmcut3xAr5be8RwAAAAAAAAAAAAAAAAAAAPD8GVp+JGkhIt+sp2mhELE/Ig4kkVy8VC6NRsRfIuK7XH6wUR/rddIAAAAAAAAAAAAAAAAAAACww1Rn5ybHy+XS9KYLrS11bDOQNehugz/WnjCf9QsDG2kcEQvrtsk/ru9rC40tbjjnVpQtfFk2U0gWut2nz1Ih9xzm3JPC9s9FAAAAAAAAAAAAAAAAAADQ7x7c9Nvtf/yxtQkBAAAAAAAAAAAAAAAAAABAX0p/TiKi8Tg8/N+htWt3JUu55eeIeOvm+fevjtdq02ON5XdWltc+yJYf60X+QLda4zSNiMY4BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6ozs5NjpfLpelNFga7aNPrPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsxp8BAAD//xDex8Y=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setregset(0x4205, r1, 0x6, &(0x7f00000003c0)={&(0x7f0000000300)="a696b1add0a9dbde6617553b21c3bcb4bb87b6739a22391e6e4cb35acee65dbfaac8004e9ea0fa9ff0cdd7573199eb01edad085aa72edf28619edb2e5f0b62b3c7e3aadb90c694b6c74149a4ea0acfa25bc6b0dc28", 0x55}) statx(r2, 0x0, 0x1000, 0x3ff7a9721f23b969, &(0x7f00000004c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r4, 0x0, 0xfff, 0x9) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000009c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @mcast1, 0x7fff}, {0xa, 0x4e23, 0xc3, @local}, 0xffffffffffffffff, 0x7f}}, 0x48) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) 1.386028845s ago: executing program 0 (id=609): uname(&(0x7f0000000400)=""/136) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) 1.385502885s ago: executing program 0 (id=610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1.090987463s ago: executing program 4 (id=611): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf"], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x1, 0x207, 0x6d, 0x7fff, 0xbb, 0x3, 0x8001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="61023300503001000802110000010802110000005050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 532.620826ms ago: executing program 1 (id=612): epoll_create1(0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE={{0x54}, 0x79}}}, 0x7) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x200400d0, &(0x7f0000000040)={0xa, 0x4e28, 0x8000028, @loopback, 0x10001}, 0x1c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@noinit_itable}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0xc0d1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0) 1.30367ms ago: executing program 3 (id=613): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 1.01752ms ago: executing program 3 (id=614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 583.37µs ago: executing program 0 (id=615): mount(0x0, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00') 276.6µs ago: executing program 3 (id=616): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x80000) socket(0x10, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_setup(0x2301, &(0x7f0000000440)={0x0, 0x8270, 0x800, 0x5, 0xa2}) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 0s ago: executing program 0 (id=617): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') r4 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) kernel console output (not intermixed with test programs): [ 9.251025][ T3993] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.277362][ T770] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.278993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. syzkaller login: [ 28.689404][ T4315] cgroup: Unknown subsys name 'net' [ 28.954495][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.221855][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.333202][ T4338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.334737][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.336088][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.338116][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.339623][ T4340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.340797][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.341083][ T4340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.342523][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.344288][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.344380][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.345728][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.347573][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.347994][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.349594][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.350433][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.351615][ T4340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.352846][ T4343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.354021][ T4340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.355014][ T4343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.356423][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.357286][ T4343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.358608][ T4340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.360817][ T4340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.362577][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.362678][ T4340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.364004][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.366604][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.392909][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.398455][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.399943][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.495827][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.501033][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 30.514241][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.567079][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.571078][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.573702][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.575473][ T4336] device bridge_slave_0 entered promiscuous mode [ 30.577538][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.578841][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.580488][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.588989][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.590124][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.591664][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.594347][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.602027][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.603449][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.604850][ T4336] device bridge_slave_1 entered promiscuous mode [ 30.607963][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.609266][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.610840][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.616105][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.617337][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.618883][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.627956][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.635043][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.636170][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.637762][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.644876][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.648174][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.649414][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.650991][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.658684][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.664132][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.666554][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.668884][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.674853][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.676093][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.677584][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.681890][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.688240][ T4330] team0: Port device team_slave_0 added [ 30.689995][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.694500][ T4336] team0: Port device team_slave_0 added [ 30.695549][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.696794][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.698293][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.700849][ T4329] team0: Port device team_slave_0 added [ 30.702694][ T4330] team0: Port device team_slave_1 added [ 30.704210][ T4329] team0: Port device team_slave_1 added [ 30.708163][ T4336] team0: Port device team_slave_1 added [ 30.713189][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.714440][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.718653][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.721091][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.722629][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.727021][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.743005][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.744758][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.746000][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.750447][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.753427][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.754563][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.758892][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.763709][ T4339] team0: Port device team_slave_0 added [ 30.765388][ T4339] team0: Port device team_slave_1 added [ 30.768515][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.772063][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.775494][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.780089][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.786285][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.787503][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.792437][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.794986][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.796161][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.800280][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.804426][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.805666][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.810159][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.819453][ T4328] team0: Port device team_slave_0 added [ 30.821074][ T4328] team0: Port device team_slave_1 added [ 30.863220][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.902232][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.993086][ T4336] device hsr_slave_0 entered promiscuous mode [ 31.032287][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.072165][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.073568][ T4336] Cannot create hsr debugfs directory [ 31.075127][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.076293][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.080387][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.083067][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.084277][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.088466][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.153140][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.192271][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.232140][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.233443][ T4339] Cannot create hsr debugfs directory [ 31.295176][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.332334][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.372195][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.373537][ T4329] Cannot create hsr debugfs directory [ 31.443547][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.482392][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.522163][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.523521][ T4328] Cannot create hsr debugfs directory [ 31.626256][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.674400][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.723219][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.764962][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.817566][ T4336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.853698][ T4336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.902916][ T4336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.943472][ T4336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.007224][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.054011][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.095835][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.132996][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.215382][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.245454][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.303948][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.307002][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.357906][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.396275][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.412230][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 32.422412][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 32.422425][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 32.423458][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 32.424560][ T4338] Bluetooth: hci1: command 0x0409 tx timeout [ 32.433578][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.483027][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.533652][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.583523][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.586256][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.590295][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.596339][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.603341][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.604837][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.606393][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.607974][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.609556][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.610808][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.614614][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.618173][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.623022][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.629139][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.630749][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.632688][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.633839][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.635194][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.636748][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.638291][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.639503][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.640903][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.646965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.655353][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.656873][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.658383][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.660198][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.663067][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.664620][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.667160][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.669497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.671173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.676757][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.677878][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.689176][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.690859][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.695310][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.696972][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.698559][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.704156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.705743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.707533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.711860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.714922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.716648][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.717863][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.719388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.723482][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.726330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.727833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.729337][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.730553][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.739305][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.741431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.743281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.748967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.750568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.754954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.756661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.760942][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.769951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.771523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.777711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.779373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.781019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.782927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.791712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.794728][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.800708][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.803725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.805379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.807005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.808719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.810227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.820916][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.824182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.825695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.827318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.829221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.830658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.835648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.837322][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.838660][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.840205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.841755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.849765][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.852028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.854640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.856302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.857913][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.859230][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.860852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.863354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.864869][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.866104][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.867587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.869330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.878789][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.883418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.885103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.886419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.899673][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.901491][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.903839][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.905092][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.906601][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.912918][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.914570][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.916533][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.918236][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.919863][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.921587][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.924096][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.930196][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.931913][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.933864][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.935145][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.936456][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.938159][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.939734][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.941245][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.944516][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.951615][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.960950][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.962647][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.964217][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.965849][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.967316][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.968896][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.974983][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.976708][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.978329][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.979967][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.982366][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.994649][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.996081][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.000886][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.019230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.020832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.022747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.024179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.027611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.032899][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.036150][ T4336] device veth0_vlan entered promiscuous mode [ 33.039294][ T4336] device veth1_vlan entered promiscuous mode [ 33.053256][ T4330] device veth0_vlan entered promiscuous mode [ 33.055064][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.056564][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.057979][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.059514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.069171][ T4330] device veth1_vlan entered promiscuous mode [ 33.071030][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.073541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.075013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.076360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.088386][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.092053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.093672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.095072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.100921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.103415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.109491][ T4330] device veth0_macvtap entered promiscuous mode [ 33.113754][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.115801][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.117417][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.121132][ T4336] device veth0_macvtap entered promiscuous mode [ 33.125600][ T4330] device veth1_macvtap entered promiscuous mode [ 33.133245][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.134722][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.136297][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.137951][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.139629][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.141306][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.145000][ T4336] device veth1_macvtap entered promiscuous mode [ 33.163613][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.164882][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.166643][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.168314][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.177444][ T4328] device veth0_vlan entered promiscuous mode [ 33.182216][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.183719][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.185464][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.186926][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.191316][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.194113][ T4329] device veth0_vlan entered promiscuous mode [ 33.196095][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.197759][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.200070][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.203917][ T4328] device veth1_vlan entered promiscuous mode [ 33.206630][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.208264][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.209682][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.211241][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.213344][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.215247][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.217060][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.218707][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.220349][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.224775][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.226226][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.227669][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.229090][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.234377][ T4329] device veth1_vlan entered promiscuous mode [ 33.235726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.237291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.238857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.247724][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.249370][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.251694][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.257578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.259091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.260670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.265860][ T4328] device veth0_macvtap entered promiscuous mode [ 33.270093][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.271590][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.274457][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.276079][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.278615][ T4328] device veth1_macvtap entered promiscuous mode [ 33.281885][ T4339] device veth0_vlan entered promiscuous mode [ 33.285665][ T4336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.287080][ T4336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.288543][ T4336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290016][ T4336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.293799][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.295295][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.296756][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.298996][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.300731][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.314428][ T4339] device veth1_vlan entered promiscuous mode [ 33.341799][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.343781][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.345254][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.346750][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.358237][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.359581][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.364635][ T4329] device veth0_macvtap entered promiscuous mode [ 33.366173][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.367650][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.369610][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.371414][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.374683][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.376373][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.378508][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.380797][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.382915][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.384506][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.386124][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.388290][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.390538][ T4329] device veth1_macvtap entered promiscuous mode [ 33.391893][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.394138][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.395795][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.397456][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.399077][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.407660][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.409439][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.410988][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.413207][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.414881][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.416871][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.419177][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.420526][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.422321][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.424312][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.425923][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.430957][ T4339] device veth0_macvtap entered promiscuous mode [ 33.434045][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.435517][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.436974][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.438375][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.446267][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.448036][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.449572][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.451566][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.455263][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.456951][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.459148][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.461708][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464000][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.465361][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.466773][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.473458][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.474702][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.477042][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.478658][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.480297][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.481963][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.485791][ T4339] device veth1_macvtap entered promiscuous mode [ 33.488848][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.490380][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.491694][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.493848][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.507967][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.509679][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.511206][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.513040][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.514620][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.516402][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.517957][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.519657][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.521856][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.527218][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.529001][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.548165][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.550007][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.551657][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.555250][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.556793][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.558443][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.560135][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.561783][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.564660][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.569090][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.570570][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.577445][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.578252][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.578737][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.580216][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.583408][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.584879][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.601170][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.605508][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.606818][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.608194][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.619862][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.621208][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.628389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.635944][ T4410] loop1: detected capacity change from 0 to 512 [ 33.675442][ T4410] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.678428][ T4414] kernel profiling enabled (shift: 63) [ 33.679361][ T4414] profiling shift: 63 too large [ 33.680266][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.681568][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.683670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.687138][ T4410] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.700959][ T4417] vivid-000: disconnect [ 33.717063][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.718301][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.719937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.723290][ T4416] vivid-000: reconnect [ 33.724627][ T4410] EXT4-fs (loop1): 1 orphan inode deleted [ 33.725667][ T4410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.736142][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.737434][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.738709][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.762984][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.764424][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.765969][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.770500][ T4419] loop3: detected capacity change from 0 to 256 [ 33.780342][ T4419] ======================================================= [ 33.780342][ T4419] WARNING: The mand mount option has been deprecated and [ 33.780342][ T4419] and is ignored by this kernel. Remove the mand [ 33.780342][ T4419] option from the mount to silence this warning. [ 33.780342][ T4419] ======================================================= [ 34.168688][ T4428] gadgetfs: bound to dummy_udc driver [ 34.236697][ T4431] binder: 4430:4431 tried to acquire reference to desc 0, got 1 instead [ 34.239696][ T4431] binder_alloc: 4430: pid 4430 spamming oneway? 2 buffers allocated for a total size of 5120 [ 34.242695][ T4431] binder_alloc: 4430: pid 4430 spamming oneway? 3 buffers allocated for a total size of 5128 [ 34.249502][ T22] binder: undelivered TRANSACTION_COMPLETE [ 34.250758][ T22] binder: undelivered TRANSACTION_COMPLETE [ 34.251686][ T22] binder: undelivered TRANSACTION_COMPLETE [ 34.265957][ T7] binder: undelivered transaction 6, process died. [ 34.267311][ T7] binder: undelivered transaction 7, process died. [ 34.268502][ T7] binder: undelivered transaction 5, process died. [ 34.788402][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 34.789667][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 34.790719][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 34.791728][ T4338] Bluetooth: hci3: command 0x041b tx timeout [ 34.792829][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 34.806635][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 34.829666][ T4448] loop2: detected capacity change from 0 to 1024 [ 34.831230][ T4448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.832746][ T4448] EXT4-fs: inline encryption not supported [ 34.833952][ T4448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.898723][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.991867][ T4459] fuse: Unknown parameter '0x0000000000000003' [ 34.994709][ T4459] process 'syz.4.18' launched './file0' with NULL argv: empty string added [ 35.034693][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 35.038179][ T4465] loop1: detected capacity change from 0 to 256 [ 35.725066][ T4474] loop3: detected capacity change from 0 to 256 [ 35.835355][ T4476] loop3: detected capacity change from 0 to 256 [ 36.004791][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 36.009360][ T770] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 36.455152][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 36.583611][ T4495] loop2: detected capacity change from 0 to 512 [ 36.612761][ T4495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.875139][ T4340] Bluetooth: hci2: command 0x040f tx timeout [ 36.875909][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 36.876599][ T4340] Bluetooth: hci4: command 0x040f tx timeout [ 36.877905][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 36.940928][ T4504] fuse: Unknown parameter '0x0000000000000003' [ 36.951375][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 37.013319][ T4512] loop1: detected capacity change from 0 to 256 [ 37.085198][ T4517] loop1: detected capacity change from 0 to 1024 [ 37.090583][ T4517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.095170][ T4517] EXT4-fs: inline encryption not supported [ 37.096496][ T4517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.123218][ T4517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.139625][ T4525] loop2: detected capacity change from 0 to 256 [ 37.943233][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 38.069115][ T4540] fuse: Unknown parameter '0x0000000000000003' [ 38.108680][ T4541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.478386][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 38.522911][ T4553] Zero length message leads to an empty skb [ 38.529820][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 38.984872][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 38.984898][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 38.984915][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 38.988707][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 39.535380][ T4587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 39.574291][ T4591] set_capacity_and_notify: 3 callbacks suppressed [ 39.574298][ T4591] loop0: detected capacity change from 0 to 1024 [ 39.643137][ T4591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.644388][ T4591] EXT4-fs: inline encryption not supported [ 39.648529][ T4591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.677265][ T4591] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.704088][ T4597] loop1: detected capacity change from 0 to 512 [ 39.807271][ T4597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.607286][ T4607] loop4: detected capacity change from 0 to 256 [ 40.613276][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 40.730784][ T4611] loop4: detected capacity change from 0 to 1024 [ 40.738935][ T4611] EXT4-fs: Ignoring removed bh option [ 40.771840][ T4611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.839519][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 41.152391][ T4619] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.214773][ T4625] loop1: detected capacity change from 0 to 256 [ 41.230367][ T4617] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 41.611089][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 41.790314][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 41.790986][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 42.586994][ T4643] loop2: detected capacity change from 0 to 512 [ 42.627108][ T4643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.245084][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 43.270660][ T4653] loop1: detected capacity change from 0 to 1024 [ 43.272210][ T4653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.273416][ T4653] EXT4-fs: inline encryption not supported [ 43.283004][ T4653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.343385][ T4653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.189594][ T4671] loop2: detected capacity change from 0 to 256 [ 44.598261][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 44.853378][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 45.634191][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 45.649785][ T4718] loop4: detected capacity change from 0 to 256 [ 45.828795][ T4730] loop4: detected capacity change from 0 to 1024 [ 45.830474][ T4730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.831698][ T4730] EXT4-fs: inline encryption not supported [ 45.833528][ T4730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.846143][ T4730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.825726][ T4472] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 46.976809][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 47.405348][ T4760] loop0: detected capacity change from 0 to 256 [ 47.554903][ T4768] loop0: detected capacity change from 0 to 512 [ 47.583759][ T4768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.631478][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 47.805828][ T4780] loop2: detected capacity change from 0 to 1024 [ 47.812832][ T4780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.816968][ T4780] EXT4-fs: inline encryption not supported [ 47.819281][ T4780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.824238][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 47.838284][ T4780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.931889][ T4788] loop1: detected capacity change from 0 to 256 [ 48.970840][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 49.056495][ T4812] loop3: detected capacity change from 0 to 512 [ 49.161078][ T4812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.296185][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 49.358917][ T4829] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.130'. [ 49.386141][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 49.586962][ T4833] loop3: detected capacity change from 0 to 1024 [ 49.590724][ T4833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.593621][ T4833] EXT4-fs: inline encryption not supported [ 49.596302][ T4833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.618681][ T4833] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.638114][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 50.722076][ C0] sched: RT throttling activated [ 51.481951][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 51.536048][ T4863] loop4: detected capacity change from 0 to 256 [ 51.665832][ T4865] netlink: 'syz.1.141': attribute type 72 has an invalid length. [ 51.750946][ T4869] loop1: detected capacity change from 0 to 512 [ 51.787834][ T4869] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.854597][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 51.891519][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 51.912625][ T4878] loop1: detected capacity change from 0 to 256 [ 52.503017][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 52.700531][ T4896] loop4: detected capacity change from 0 to 1024 [ 52.703655][ T4896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.704954][ T4896] EXT4-fs: inline encryption not supported [ 52.706306][ T4896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.724635][ T4896] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.824477][ T4386] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 53.635994][ T4914] binder: 4912:4914 tried to acquire reference to desc 0, got 1 instead [ 53.650727][ T4914] binder: 4912:4914 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.724497][ T4914] binder: 4914 RLIMIT_NICE not set [ 53.725488][ T4914] binder: undelivered transaction 12, fd fixups failed [ 53.731815][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 53.740182][ T4914] binder: 4912:4914 async transaction 12 fd fixups failed 29201/-12, line 4684 [ 53.747984][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 54.179606][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 54.209622][ T4931] loop4: detected capacity change from 0 to 256 [ 54.282663][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 54.422949][ T4944] loop1: detected capacity change from 0 to 256 [ 54.540335][ T4948] loop3: detected capacity change from 0 to 256 [ 55.397408][ T770] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 55.548051][ T4965] loop1: detected capacity change from 0 to 1024 [ 55.555272][ T4965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.556436][ T4965] EXT4-fs: inline encryption not supported [ 55.557425][ T4965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.576626][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 55.585621][ T4965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.425554][ T4997] binder: 4996:4997 tried to acquire reference to desc 0, got 1 instead [ 57.427677][ T4997] binder: 4996:4997 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 57.437174][ T4997] binder: 4997 RLIMIT_NICE not set [ 57.438129][ T4997] binder: undelivered transaction 18, fd fixups failed [ 57.439330][ T4997] binder: 4996:4997 async transaction 18 fd fixups failed 29201/-12, line 4684 [ 57.445247][ T113] binder: undelivered TRANSACTION_COMPLETE [ 57.725184][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 57.814628][ T5008] loop1: detected capacity change from 0 to 256 [ 57.945293][ T4532] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 57.966495][ T5015] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.182'. [ 58.038992][ T5021] loop1: detected capacity change from 0 to 512 [ 58.091680][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.155524][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 58.200949][ T5028] netlink: 52 bytes leftover after parsing attributes in process `syz.1.186'. [ 58.384435][ T5037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 58.416950][ T5040] binder: 5038:5040 tried to acquire reference to desc 0, got 1 instead [ 58.418305][ T5040] binder: 5038:5040 got transaction with invalid data ptr [ 58.419780][ T5040] binder: 5038:5040 transaction call to 5038:0 failed 24/29201/-14, size 0-24 line 3350 [ 58.422063][ T5040] binder: 5038:5040 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 58.427361][ T5040] binder: 5040 RLIMIT_NICE not set [ 58.536230][ T5047] loop1: detected capacity change from 0 to 1024 [ 58.541941][ T5047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.543592][ T5047] EXT4-fs: inline encryption not supported [ 58.544612][ T5047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.610591][ T5047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 58.616057][ T5051] loop3: detected capacity change from 0 to 256 [ 59.398805][ T4531] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.725242][ T4386] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 59.983853][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 61.398952][ T5089] loop4: detected capacity change from 0 to 512 [ 61.417821][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.432905][ T5093] binder: 5085:5093 tried to acquire reference to desc 0, got 1 instead [ 61.434373][ T5093] binder: 5085:5093 got transaction with invalid data ptr [ 61.435543][ T5093] binder: 5085:5093 transaction call to 5085:0 failed 29/29201/-14, size 0-24 line 3350 [ 61.446144][ T5093] binder: 5085:5093 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 61.451851][ T5093] binder: 5093 RLIMIT_NICE not set [ 61.654311][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 61.682595][ T5099] loop2: detected capacity change from 0 to 1024 [ 61.684124][ T5099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.685336][ T5099] EXT4-fs: inline encryption not supported [ 61.686509][ T5099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.700311][ T5099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.736482][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 62.559719][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.700003][ T4977] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 62.818616][ T5122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.213'. [ 63.160848][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 63.344445][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 63.575267][ T5147] binder: 5146:5147 tried to acquire reference to desc 0, got 1 instead [ 63.576930][ T5147] binder: 5146:5147 got transaction with invalid data ptr [ 63.580726][ T5147] binder: 5146:5147 transaction call to 5146:0 failed 34/29201/-14, size 0-24 line 3350 [ 63.583294][ T5147] binder: 5146:5147 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.585894][ T5147] binder: 5147 RLIMIT_NICE not set [ 63.625837][ T5150] loop1: detected capacity change from 0 to 256 [ 64.093055][ T5158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.228'. [ 64.105807][ T4532] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 64.208356][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 64.902161][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.905255][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.073068][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.822146][ T5189] binder: 5188:5189 tried to acquire reference to desc 0, got 1 instead [ 65.824142][ T5189] binder_alloc: 5188: pid 5188 spamming oneway? 2 buffers allocated for a total size of 5120 [ 65.826201][ T5189] binder_alloc: 5188: pid 5188 spamming oneway? 3 buffers allocated for a total size of 5128 [ 65.828323][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 65.829260][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 65.830195][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 65.837567][ T4376] binder: undelivered transaction 40, process died. [ 65.838763][ T4376] binder: undelivered transaction 41, process died. [ 65.839868][ T4376] binder: undelivered transaction 39, process died. [ 65.861748][ T4401] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 65.915887][ T5193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.242'. [ 65.984712][ T5197] loop4: detected capacity change from 0 to 256 [ 66.133515][ T5205] loop1: detected capacity change from 0 to 256 [ 66.476959][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 66.983169][ T5226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'. [ 66.986129][ T5224] binder: 5223:5224 tried to acquire reference to desc 0, got 1 instead [ 66.988192][ T5224] binder_alloc: 5223: pid 5223 spamming oneway? 2 buffers allocated for a total size of 5120 [ 66.990873][ T5224] binder_alloc: 5223: pid 5223 spamming oneway? 3 buffers allocated for a total size of 5128 [ 66.995512][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 66.996680][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 66.997649][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 66.999349][ T4977] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 67.977718][ T5249] loop4: detected capacity change from 0 to 512 [ 68.007846][ T5251] loop1: detected capacity change from 0 to 256 [ 68.065659][ T5249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.116898][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 68.551692][ T5262] loop3: detected capacity change from 0 to 256 [ 68.636972][ T5264] binder: 5263:5264 tried to acquire reference to desc 0, got 1 instead [ 68.639187][ T5264] binder_alloc: 5263: pid 5263 spamming oneway? 2 buffers allocated for a total size of 5120 [ 68.641175][ T5264] binder_alloc: 5263: pid 5263 spamming oneway? 3 buffers allocated for a total size of 5128 [ 68.675477][ T5266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'. [ 68.798823][ T4977] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 70.086197][ T5286] loop1: detected capacity change from 0 to 512 [ 70.153103][ T14] cfg80211: failed to load regulatory.db [ 70.430018][ T5286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.912661][ T5306] netlink: 32 bytes leftover after parsing attributes in process `syz.4.280'. [ 70.917136][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 70.996825][ T4386] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 71.083103][ T5313] loop4: detected capacity change from 0 to 1024 [ 71.094784][ T5313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.097887][ T5313] EXT4-fs: inline encryption not supported [ 71.099516][ T5313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.137418][ T5313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.149007][ T5318] binder: 5316:5318 tried to acquire reference to desc 0, got 1 instead [ 71.152896][ T5318] binder: 5316:5318 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 71.154937][ T5318] binder: 5318 RLIMIT_NICE not set [ 71.155740][ T5318] binder: 5318 RLIMIT_NICE not set [ 71.156582][ T5318] binder_debug: 9 callbacks suppressed [ 71.156593][ T5318] binder: send failed reply for transaction 60 to 5316:5318 [ 71.181188][ T5318] binder: 5316:5318 ioctl c0306201 20000680 returned -14 [ 72.049249][ T5330] netlink: 620 bytes leftover after parsing attributes in process `syz.0.285'. [ 72.104917][ T5332] loop2: detected capacity change from 0 to 256 [ 72.144099][ T5334] loop3: detected capacity change from 0 to 256 [ 72.281716][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 72.828341][ T5348] loop0: detected capacity change from 0 to 512 [ 72.854796][ T5348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.910858][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 72.982201][ T4386] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 74.195976][ T5376] netlink: 620 bytes leftover after parsing attributes in process `syz.4.302'. [ 74.276712][ T5380] loop3: detected capacity change from 0 to 512 [ 74.301342][ T5380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.395616][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 74.524468][ T5389] loop3: detected capacity change from 0 to 256 [ 74.750894][ T5392] loop4: detected capacity change from 0 to 256 [ 74.916197][ T4532] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 75.757091][ T5416] netlink: 620 bytes leftover after parsing attributes in process `syz.3.317'. [ 75.761815][ T5415] loop4: detected capacity change from 0 to 512 [ 75.784501][ T5415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 76.677332][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 76.796415][ T5429] binder: 5427:5429 tried to acquire reference to desc 0, got 1 instead [ 76.808489][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 76.809549][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 76.861668][ T5432] binder: BINDER_SET_CONTEXT_MGR already set [ 76.878964][ T4378] binder: undelivered transaction 68, process died. [ 76.880201][ T4378] binder: undelivered transaction 67, process died. [ 76.882614][ T5432] binder: 5431:5432 ioctl 4018620d 20001000 returned -16 [ 76.889305][ T5432] binder: 5431:5432 got transaction to invalid handle, 1 [ 76.890570][ T5432] binder: 5432:5431 cannot find target node [ 76.891490][ T5432] binder: 5431:5432 transaction call to 0:0 failed 71/29201/-22, size 88-24 line 3062 [ 76.899504][ T5436] loop1: detected capacity change from 0 to 256 [ 76.918252][ T5432] binder: 5431:5432 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.920371][ T5432] binder: 5432 RLIMIT_NICE not set [ 76.927786][ T5440] loop0: detected capacity change from 0 to 256 [ 77.809791][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.871488][ T5457] netlink: 620 bytes leftover after parsing attributes in process `syz.4.332'. [ 77.873830][ T5455] loop1: detected capacity change from 0 to 512 [ 77.907791][ T5455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.006759][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 78.021854][ T5471] binder: 5470:5471 tried to acquire reference to desc 0, got 1 instead [ 78.026734][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 78.027790][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 78.035859][ T4377] binder: undelivered transaction 77, process died. [ 78.933740][ T5484] loop4: detected capacity change from 0 to 256 [ 79.348602][ T5492] binder: BINDER_SET_CONTEXT_MGR already set [ 79.358199][ T5492] binder: 5491:5492 ioctl 4018620d 20000100 returned -16 [ 79.369884][ T5492] binder: BINDER_SET_CONTEXT_MGR already set [ 79.370996][ T5492] binder: 5491:5492 ioctl 4018620d 20001000 returned -16 [ 79.381481][ T5496] loop2: detected capacity change from 0 to 256 [ 79.382850][ T5492] binder: 5491:5492 got transaction to invalid handle, 1 [ 79.384135][ T5492] binder: 5491:5492 ioctl c0306201 0 returned -14 [ 79.385293][ T5492] binder: 5491:5492 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.397762][ T5492] binder: 5492 RLIMIT_NICE not set [ 79.519893][ T5501] loop1: detected capacity change from 0 to 256 [ 79.700415][ T5506] loop3: detected capacity change from 0 to 512 [ 79.717948][ T5506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.788060][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 79.806637][ T5513] netlink: 620 bytes leftover after parsing attributes in process `syz.4.352'. [ 80.233399][ T5519] binder: BINDER_SET_CONTEXT_MGR already set [ 80.234598][ T5519] binder: 5518:5519 ioctl 4018620d 200000c0 returned -16 [ 80.237669][ T5519] binder: BINDER_SET_CONTEXT_MGR already set [ 80.238847][ T5519] binder: 5518:5519 ioctl 4018620d 20000040 returned -16 [ 80.240397][ T5519] binder: 5518:5519 got transaction to invalid handle, 1 [ 81.737917][ T5545] loop0: detected capacity change from 0 to 256 [ 81.829420][ T5547] loop2: detected capacity change from 0 to 256 [ 81.919445][ T5551] loop0: detected capacity change from 0 to 1024 [ 81.940161][ T5551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.941263][ T5551] EXT4-fs: inline encryption not supported [ 81.946767][ T5551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.970882][ T5551] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.943217][ T5564] binder: 5563:5564 got transaction to invalid handle, 1 [ 82.957858][ T5564] binder_debug: 7 callbacks suppressed [ 82.957872][ T5564] binder: 5564:5563 cannot find target node [ 82.968747][ T5564] binder: 5563:5564 transaction async to 0:0 failed 85/29201/-22, size 0-0 line 3062 [ 82.986718][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.118126][ T5574] netlink: 620 bytes leftover after parsing attributes in process `syz.2.370'. [ 83.553708][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 85.011297][ T5606] loop3: detected capacity change from 0 to 256 [ 85.036949][ T5607] binder: 5605:5607 got transaction to invalid handle, 1 [ 85.038574][ T5607] binder: 5607:5605 cannot find target node [ 85.039838][ T5607] binder: 5605:5607 transaction async to 0:0 failed 89/29201/-22, size 0-0 line 3062 [ 85.066279][ T4317] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.281272][ T5617] loop4: detected capacity change from 0 to 1024 [ 85.283156][ T5617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.284404][ T5617] EXT4-fs: inline encryption not supported [ 85.286891][ T5618] loop0: detected capacity change from 0 to 256 [ 85.288600][ T5617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.320325][ T5617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.335222][ T4317] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.338626][ T4317] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.379930][ T5624] fido_id[5624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.434421][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 86.795741][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 87.904645][ T5658] binder: 5656:5658 got transaction to invalid handle, 1 [ 87.905998][ T5658] binder: 5658:5656 cannot find target node [ 87.907014][ T5658] binder: 5656:5658 transaction async to 0:0 failed 93/29201/-22, size 0-0 line 3062 [ 87.929151][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.096624][ T4375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.098314][ T4375] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.403960][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 88.404361][ T5676] loop4: detected capacity change from 0 to 256 [ 88.441248][ T5671] fido_id[5671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.649710][ T5679] loop3: detected capacity change from 0 to 1024 [ 88.651354][ T5679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.652919][ T5679] EXT4-fs: inline encryption not supported [ 88.654074][ T5679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.667024][ T5679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.566730][ T5689] binder: BINDER_SET_CONTEXT_MGR already set [ 89.567848][ T5689] binder: 5688:5689 ioctl 4018620d 20000100 returned -16 [ 89.587712][ T5689] binder: BINDER_SET_CONTEXT_MGR already set [ 89.588734][ T5689] binder: 5688:5689 ioctl 4018620d 20001000 returned -16 [ 89.992436][ T5689] binder: 5688:5689 got transaction to invalid handle, 1 [ 89.993903][ T5689] binder: 5689:5688 cannot find target node [ 89.997832][ T5689] binder: 5688:5689 transaction call to 0:0 failed 95/29201/-22, size 88-24 line 3062 [ 90.001995][ T5689] binder: 5688:5689 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.005329][ T5689] binder: 5689 RLIMIT_NICE not set [ 90.150339][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 90.182885][ T5707] binder: tried to use weak ref as strong ref [ 90.184227][ T5707] binder: 5704:5707 Acquire 1 refcount change on invalid ref 0 ret -22 [ 90.186108][ T5707] binder: 5704:5707 got transaction to invalid handle, 1 [ 90.187502][ T5707] binder: 5707:5704 cannot find target node [ 90.188728][ T5707] binder: 5704:5707 transaction async to 0:0 failed 98/29201/-22, size 0-0 line 3062 [ 90.193140][ T4317] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.735398][ T4317] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.405215][ T5736] loop0: detected capacity change from 0 to 1024 [ 91.406686][ T5736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.407813][ T5736] EXT4-fs: inline encryption not supported [ 91.408846][ T5736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.460399][ T5741] loop3: detected capacity change from 0 to 256 [ 91.469828][ T5736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.420249][ T5757] binder: 5756:5757 tried to acquire reference to desc 0, got 1 instead [ 92.422066][ T5757] binder: 5756:5757 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 92.431066][ T5757] binder: 5757 RLIMIT_NICE not set [ 92.431945][ T5757] binder: 5757 RLIMIT_NICE not set [ 92.508126][ T5757] binder: send failed reply for transaction 103 to 5756:5757 [ 92.509547][ T5757] binder: 5756:5757 transaction 103 fd fixups failed 29201/-12, line 4684 [ 92.519593][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 92.520645][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.779977][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 93.218954][ T5787] loop0: detected capacity change from 0 to 512 [ 93.573954][ T5787] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 93.668031][ T5787] EXT4-fs (loop0): Remounting filesystem read-only [ 93.669687][ T5787] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.437: invalid indirect mapped block 4278190080 (level 0) [ 93.672225][ T5787] EXT4-fs (loop0): Remounting filesystem read-only [ 93.673368][ T5787] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.437: invalid indirect mapped block 1 (level 1) [ 93.675840][ T5787] EXT4-fs (loop0): Remounting filesystem read-only [ 93.677165][ T5787] EXT4-fs (loop0): 1 truncate cleaned up [ 93.678099][ T5787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.147691][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 94.655103][ T5789] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 95.130332][ T5843] binder_user_error: 4 callbacks suppressed [ 95.130341][ T5843] binder: 5842:5843 tried to acquire reference to desc 0, got 1 instead [ 95.136883][ T5843] binder: 5842:5843 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 95.139276][ T5843] binder: 5843 RLIMIT_NICE not set [ 95.140288][ T5843] binder: 5843 RLIMIT_NICE not set [ 95.141224][ T5843] binder_debug: 4 callbacks suppressed [ 95.141234][ T5843] binder: send failed reply for transaction 113 to 5842:5843 [ 95.144426][ T5843] binder: 5842:5843 transaction 113 fd fixups failed 29201/-12, line 4684 [ 95.146684][ T7] binder: undelivered TRANSACTION_COMPLETE [ 95.147840][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.831164][ T5861] loop2: detected capacity change from 0 to 256 [ 97.025144][ T4666] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 98.555914][ T5899] loop0: detected capacity change from 0 to 256 [ 98.569689][ T5900] binder: 5896:5900 tried to acquire reference to desc 0, got 1 instead [ 98.571520][ T5900] binder_alloc: 5896: binder_alloc_buf, no vma [ 98.593511][ T5900] binder: cannot allocate buffer: vma cleared, target dead or dying [ 98.593546][ T5900] binder: 5896:5900 transaction async to 5896:0 failed 118/29189/-3, size 0-0 line 3247 [ 98.618036][ T4379] binder: undelivered TRANSACTION_ERROR: 29189 [ 99.869944][ T5935] loop1: detected capacity change from 0 to 256 [ 100.037489][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 100.996859][ T5956] loop0: detected capacity change from 0 to 256 [ 101.319947][ T5965] loop3: detected capacity change from 0 to 256 [ 102.906996][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 103.370912][ T6014] loop2: detected capacity change from 0 to 512 [ 103.592417][ T6014] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 103.595002][ T6014] EXT4-fs (loop2): Remounting filesystem read-only [ 103.596219][ T6014] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.511: invalid indirect mapped block 4278190080 (level 0) [ 103.598676][ T6014] EXT4-fs (loop2): Remounting filesystem read-only [ 103.599792][ T6014] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.511: invalid indirect mapped block 1 (level 1) [ 103.602471][ T6014] EXT4-fs (loop2): Remounting filesystem read-only [ 103.605619][ T6014] EXT4-fs (loop2): 1 truncate cleaned up [ 103.606508][ T6014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.681373][ T6021] loop0: detected capacity change from 0 to 256 [ 103.898452][ T6029] loop1: detected capacity change from 0 to 1024 [ 103.909008][ T6029] EXT4-fs: inline encryption not supported [ 103.944124][ T6014] EXT4-fs (loop2): unmounting filesystem. [ 103.946494][ T6029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.013200][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 104.128621][ T6035] binder: 6034:6035 tried to acquire reference to desc 0, got 1 instead [ 104.130734][ T6035] binder: 6034:6035 got transaction with invalid data ptr [ 104.132020][ T6035] binder: 6034:6035 transaction async to 6034:0 failed 124/29201/-14, size 0-24 line 3350 [ 104.134432][ T6035] binder: 6034:6035 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 104.136987][ T6035] binder: 6035 RLIMIT_NICE not set [ 104.137945][ T6035] binder: 6035 RLIMIT_NICE not set [ 104.138873][ T6035] binder: send failed reply for transaction 123 to 6034:6035 [ 104.140350][ T6035] binder: 6034:6035 transaction 123 fd fixups failed 29201/-12, line 4684 [ 104.142328][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 104.145421][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.146846][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.556410][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 105.938177][ T6088] gadgetfs: bound to dummy_udc driver [ 106.008192][ T6090] loop1: detected capacity change from 0 to 256 [ 107.050825][ T770] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 107.328824][ T6110] loop3: detected capacity change from 0 to 512 [ 107.349946][ T6110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.512376][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 107.606401][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 108.084662][ T6141] loop2: detected capacity change from 0 to 256 [ 108.141729][ T4971] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 109.065888][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.258422][ T6157] loop1: detected capacity change from 0 to 512 [ 109.375298][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.387237][ T6157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.397507][ T6151] bond0 (unregistering): Released all slaves [ 109.479036][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 109.605420][ T4468] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 110.065005][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 110.130214][ T6205] loop1: detected capacity change from 0 to 256 [ 110.629539][ T6215] loop2: detected capacity change from 0 to 512 [ 110.649783][ T6215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.032056][ T6236] loop3: detected capacity change from 0 to 1024 [ 111.034495][ T6236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.040032][ T6236] EXT4-fs: inline encryption not supported [ 111.041203][ T6236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.050892][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 111.352871][ T6236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.376441][ T6244] gadgetfs: bound to dummy_udc driver [ 112.354698][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 113.024654][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 113.150902][ T6273] binder: 6272:6273 tried to acquire reference to desc 0, got 1 instead [ 113.152905][ T6273] binder: 6272:6273 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 113.155129][ T6273] binder: 6273 RLIMIT_NICE not set [ 113.156053][ T6273] binder: 6273 RLIMIT_NICE not set [ 113.157059][ T6273] binder: send failed reply for transaction 129 to 6272:6273 [ 113.158429][ T6273] binder: 6272:6273 ioctl c0306201 20000680 returned -14 [ 113.220546][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 113.972910][ T4843] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 114.285380][ T6299] loop2: detected capacity change from 0 to 1024 [ 114.288746][ T6299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.290150][ T6299] EXT4-fs: inline encryption not supported [ 114.291630][ T6299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.468635][ T6307] binder: BINDER_SET_CONTEXT_MGR already set [ 114.469952][ T6307] binder: 6304:6307 ioctl 4018620d 20000100 returned -16 [ 114.475214][ T6307] binder: BINDER_SET_CONTEXT_MGR already set [ 114.476427][ T6307] binder: 6304:6307 ioctl 4018620d 20001000 returned -16 [ 114.478910][ T6307] binder: 6304:6307 got transaction to invalid handle, 1 [ 114.481608][ T6299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.494018][ T6307] binder: 6307:6304 cannot find target node [ 114.495200][ T6307] binder: 6304:6307 transaction call to 0:0 failed 133/29201/-22, size 88-24 line 3062 [ 114.504127][ T6307] binder: 6304:6307 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 114.506435][ T6307] binder: 6307 RLIMIT_NICE not set [ 114.549030][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 115.179399][ T6314] loop1: detected capacity change from 0 to 512 [ 115.217306][ T6314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.300948][ T4446] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.359568][ T4470] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 115.713079][ C0] [ 115.715328][ C0] ================================ [ 115.716294][ C0] WARNING: inconsistent lock state [ 115.717166][ C0] syzkaller #0 Not tainted [ 115.717937][ C0] -------------------------------- [ 115.718816][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 115.719967][ C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 115.721029][ C0] ffff0000f5928130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x94/0x138 [ 115.722639][ C0] {SOFTIRQ-ON-W} state was registered at: [ 115.723573][ C0] lock_acquire+0x20c/0x638 [ 115.724334][ C0] lock_sock_nested+0x70/0x130 [ 115.725159][ C0] x25_bind+0x1b4/0x3d4 [ 115.725920][ C0] __sys_bind+0x1f8/0x2a4 [ 115.726701][ C0] __arm64_sys_bind+0x7c/0x94 [ 115.727499][ C0] invoke_syscall+0x98/0x290 [ 115.728313][ C0] el0_svc_common+0x13c/0x258 [ 115.729182][ C0] do_el0_svc+0x5c/0x134 [ 115.729966][ C0] el0_svc+0x58/0x128 [ 115.730660][ C0] el0t_64_sync_handler+0x84/0xf0 [ 115.731495][ C0] el0t_64_sync+0x18c/0x190 [ 115.732245][ C0] irq event stamp: 853710 [ 115.732964][ C0] hardirqs last enabled at (853710): [] __local_bh_enable_ip+0x1f8/0x37c [ 115.734566][ C0] hardirqs last disabled at (853709): [] __local_bh_enable_ip+0x178/0x37c [ 115.736375][ C0] softirqs last enabled at (852922): [] handle_softirqs+0xb1c/0xc90 [ 115.737965][ C0] softirqs last disabled at (852929): [] run_ksoftirqd+0x7c/0x2ac [ 115.739504][ C0] [ 115.739504][ C0] other info that might help us debug this: [ 115.740819][ C0] Possible unsafe locking scenario: [ 115.740819][ C0] [ 115.742144][ C0] CPU0 [ 115.742689][ C0] ---- [ 115.743207][ C0] lock(sk_lock-AF_X25); [ 115.744102][ C0] [ 115.744807][ C0] lock(sk_lock-AF_X25); [ 115.745652][ C0] [ 115.745652][ C0] *** DEADLOCK *** [ 115.745652][ C0] [ 115.747097][ C0] 1 lock held by ksoftirqd/0/15: [ 115.747988][ C0] #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 115.749727][ C0] [ 115.749727][ C0] stack backtrace: [ 115.750717][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 115.751925][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 115.753590][ C0] Call trace: [ 115.754147][ C0] dump_backtrace+0x1c4/0x1f0 [ 115.754972][ C0] show_stack+0x2c/0x3c [ 115.755710][ C0] __dump_stack+0x30/0x40 [ 115.756447][ C0] dump_stack_lvl+0xf4/0x15c [ 115.757240][ C0] dump_stack+0x1c/0x5c [ 115.757982][ C0] print_usage_bug+0x4c0/0x6dc [ 115.758814][ C0] mark_lock_irq+0x858/0xab8 [ 115.759592][ C0] mark_lock+0x224/0x320 [ 115.760274][ C0] __lock_acquire+0xa88/0x6634 [ 115.761059][ C0] lock_acquire+0x20c/0x638 [ 115.761829][ C0] lock_sock_nested+0x70/0x130 [ 115.762636][ C0] x25_kill_by_neigh+0x94/0x138 [ 115.763442][ C0] x25_link_terminated+0x5c/0x78 [ 115.764281][ C0] x25_lapb_receive_frame+0x140/0xd0c [ 115.765200][ C0] netif_receive_skb_core+0x160/0x244 [ 115.766116][ C0] lapbeth_napi_poll+0x48/0xa0 [ 115.766890][ C0] __napi_poll+0xb8/0x3f4 [ 115.767614][ C0] net_rx_action+0x52c/0xb5c [ 115.768383][ C0] handle_softirqs+0x318/0xc90 [ 115.769191][ C0] run_ksoftirqd+0x7c/0x2ac [ 115.769961][ C0] smpboot_thread_fn+0x4e8/0x960 [ 115.770775][ C0] kthread+0x254/0x2e0 [ 115.771476][ C0] ret_from_fork+0x10/0x20 [ 115.772263][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.773290][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3507 [ 115.774738][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0 [ 115.776155][ C0] preempt_count: 100, expected: 0 [ 115.776966][ C0] RCU nest depth: 1, expected: 0 [ 115.777733][ C0] INFO: lockdep is turned off. [ 115.778493][ C0] Preemption disabled at: [ 115.778503][ C0] [] handle_softirqs+0xe8/0xc90 [ 115.780241][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 115.781397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 115.783120][ C0] Call trace: [ 115.783669][ C0] dump_backtrace+0x1c4/0x1f0 [ 115.784455][ C0] show_stack+0x2c/0x3c [ 115.785148][ C0] __dump_stack+0x30/0x40 [ 115.785874][ C0] dump_stack_lvl+0xf4/0x15c [ 115.786636][ C0] dump_stack+0x1c/0x5c [ 115.787315][ C0] __might_resched+0x354/0x4e0 [ 115.788150][ C0] __might_sleep+0x94/0x110 [ 115.788868][ C0] lock_sock_nested+0x80/0x130 [ 115.789634][ C0] x25_kill_by_neigh+0x94/0x138 [ 115.790464][ C0] x25_link_terminated+0x5c/0x78 [ 115.791243][ C0] x25_lapb_receive_frame+0x140/0xd0c [ 115.792206][ C0] netif_receive_skb_core+0x160/0x244 [ 115.793134][ C0] lapbeth_napi_poll+0x48/0xa0 [ 115.793947][ C0] __napi_poll+0xb8/0x3f4 [ 115.794692][ C0] net_rx_action+0x52c/0xb5c [ 115.795516][ C0] handle_softirqs+0x318/0xc90 [ 115.796319][ C0] run_ksoftirqd+0x7c/0x2ac [ 115.797083][ C0] smpboot_thread_fn+0x4e8/0x960 [ 115.797925][ C0] kthread+0x254/0x2e0 [ 115.798619][ C0] ret_from_fork+0x10/0x20 [ 116.014671][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 116.327607][ T6335] device vlan2 entered promiscuous mode [ 116.328679][ T6335] device bridge0 entered promiscuous mode [ 116.339674][ T4330] EXT4-fs (loop1): unmounting filesystem.