last executing test programs: 48.989172247s ago: executing program 1 (id=767): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2d0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val={0x1, 0xf}, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x6b, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1d2"}, {0xdd, 0x6, "4f3fef835ea8"}]}}]}, 0x2d0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6(0x10, 0xe05d87ebd695c50d, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c080018000000", 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc05c5340, &(0x7f0000000040)={0x10000, 0x0, 'client1\x00', 0x0, "76cb0941581ecb5c", "b78e5a1a0c03c11493b719e79493c3e1e7285e1cd3b9cc02f1ae8dcd2dc1b8c2"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010a000000003f000000040000000a0016805845deee9ac50000080017"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0) 26.742833083s ago: executing program 3 (id=813): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 16.85036143s ago: executing program 1 (id=789): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007080c000a0004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x168910, r0, 0xa2aa4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200c8938e999d23844fa0dbf24ae0520029a4459cd9ea5fe7000000008500000083000000bf090000000000005509010000000000950000000000000000008500000003000000000000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x100000, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @action={{{}, {}, @device_b}, @sa_query_req}}]}, 0x3c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="11ca00000000000000003f00000008000300", @ANYRES32=r13, @ANYBLOB="14005e800800010000fbffff070002"], 0x30}}, 0x0) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 16.696645482s ago: executing program 1 (id=840): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x18, r4, 0x0, &(0x7f00000000c0)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 16.088348792s ago: executing program 1 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000340)=""/4096) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000380000000000000008000f0001000000", 0x24) 12.496673159s ago: executing program 1 (id=852): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x18, r4, 0x0, &(0x7f00000000c0)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 11.926960636s ago: executing program 1 (id=854): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2a0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x281, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x39, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a65"}, {0xdd, 0x6, "4f3fef835ea8"}]}}]}, 0x2a0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6(0x10, 0xe05d87ebd695c50d, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c080018000000", 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc05c5340, &(0x7f0000000040)={0x10000, 0x0, 'client1\x00', 0x0, "76cb0941581ecb5c", "b78e5a1a0c03c11493b719e79493c3e1e7285e1cd3b9cc02f1ae8dcd2dc1b8c2"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010a000000003f000000040000000a0016805845deee9ac50000080017"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0) 9.471736999s ago: executing program 2 (id=862): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x18, r4, 0x0, &(0x7f00000000c0)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 9.359500048s ago: executing program 3 (id=819): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x18, r4, 0x0, &(0x7f00000000c0)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 8.356876631s ago: executing program 3 (id=864): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000380)) 6.729647185s ago: executing program 0 (id=868): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 6.553249829s ago: executing program 0 (id=869): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007"], 0x6c}}, 0x0) 6.510296773s ago: executing program 3 (id=870): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.951971879s ago: executing program 0 (id=872): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2d0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b2, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x6a, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1"}, {0xdd, 0x6, "4f3fef835ea8"}]}}]}, 0x2d0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6(0x10, 0xe05d87ebd695c50d, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c080018000000", 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc05c5340, &(0x7f0000000040)={0x10000, 0x0, 'client1\x00', 0x0, "76cb0941581ecb5c", "b78e5a1a0c03c11493b719e79493c3e1e7285e1cd3b9cc02f1ae8dcd2dc1b8c2"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010a000000003f000000040000000a0016805845deee9ac50000080017"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0) 4.790541645s ago: executing program 0 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000340)=""/4096) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000380000000000000008000f0001000000", 0x24) 4.765556227s ago: executing program 4 (id=874): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x18, r4, 0x0, &(0x7f00000000c0)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 4.741854989s ago: executing program 3 (id=875): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c4, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a6, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0x6b, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1d2"}, {0xdd, 0x6, "4f3fef835ea8"}]}}]}, 0x2c4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6(0x10, 0xe05d87ebd695c50d, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c080018000000", 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc05c5340, &(0x7f0000000040)={0x10000, 0x0, 'client1\x00', 0x0, "76cb0941581ecb5c", "b78e5a1a0c03c11493b719e79493c3e1e7285e1cd3b9cc02f1ae8dcd2dc1b8c2"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010a000000003f000000040000000a0016805845deee9ac50000080017"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0) 3.592649574s ago: executing program 2 (id=876): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) 3.452833595s ago: executing program 4 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 2.408838152s ago: executing program 4 (id=878): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.408456092s ago: executing program 2 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2.337633867s ago: executing program 2 (id=880): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2cc, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2ad, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x65, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c"}, {0xdd, 0x6, "4f3fef835ea8"}]}}]}, 0x2cc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6(0x10, 0xe05d87ebd695c50d, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c080018000000", 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc05c5340, &(0x7f0000000040)={0x10000, 0x0, 'client1\x00', 0x0, "76cb0941581ecb5c", "b78e5a1a0c03c11493b719e79493c3e1e7285e1cd3b9cc02f1ae8dcd2dc1b8c2"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010a000000003f000000040000000a0016805845deee9ac50000080017"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0) 2.126011235s ago: executing program 4 (id=881): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2d0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val={0x1, 0xf}, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x6b, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1d2"}, {0xdd, 0x6, "4f3fef835ea8"}]}}]}, 0x2d0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6(0x10, 0xe05d87ebd695c50d, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c080018000000", 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010a000000003f000000040000000a0016805845deee9ac50000080017"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0) 1.266760466s ago: executing program 0 (id=882): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007"], 0x6c}}, 0x0) 206.057483ms ago: executing program 3 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 203.406564ms ago: executing program 2 (id=885): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 202.793014ms ago: executing program 4 (id=886): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) 113.308551ms ago: executing program 4 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) 596.79µs ago: executing program 2 (id=888): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) kernel console output (not intermixed with test programs): mes ready [ 160.959823][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.967665][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.977343][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.014451][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.023821][ T5713] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 161.035633][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.036134][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.036910][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.037395][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.040144][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.071763][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.072954][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.073518][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.074239][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.074792][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.075210][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.098327][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.098918][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.099536][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.108821][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.154420][ T5636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.157514][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.187647][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.197783][ T5636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.221334][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.238871][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.290923][ T5636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.337296][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.337432][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.369320][ T5512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.387864][ T5636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.419641][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.419771][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.435468][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.464748][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.494932][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.495470][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.507909][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.509246][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.509793][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.513581][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.514086][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.514806][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.515391][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.561413][ T5512] device veth0_vlan entered promiscuous mode [ 161.576471][ T5512] device veth1_vlan entered promiscuous mode [ 161.606189][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.606719][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.607239][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.607661][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.607720][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.608092][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.608561][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.609524][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.609560][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.609935][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.610625][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.611271][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.611925][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.612651][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.613122][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.619344][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.619835][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.620520][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.630905][ T3553] Bluetooth: hci4: command 0x041b tx timeout [ 161.656936][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.657435][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.657906][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.658332][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.665031][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.665537][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.671830][ T5512] device veth0_macvtap entered promiscuous mode [ 161.694527][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.697243][ T5512] device veth1_macvtap entered promiscuous mode [ 161.739176][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.138861][ T1279] Bluetooth: hci1: command 0x0419 tx timeout [ 162.197425][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.212548][ T5750] loop1: detected capacity change from 0 to 512 [ 162.227372][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.294213][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.309183][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.319945][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.331562][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.341158][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.364361][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.383942][ T5750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 162.406685][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.414253][ T5750] System zones: 1-12 [ 162.430050][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.437656][ T5750] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.445: inline data xattr refers to an external xattr inode [ 162.438550][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.464753][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.476591][ T5750] EXT4-fs (loop1): Remounting filesystem read-only [ 162.483300][ T5750] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.445: couldn't read orphan inode 12 (err -117) [ 162.495542][ T5750] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 162.499296][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.557447][ T25] audit: type=1800 audit(1720066062.351:56): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.445" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 162.565900][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.589823][ T5750] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 36: comm syz.1.445: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 162.626154][ T5750] EXT4-fs (loop1): Remounting filesystem read-only [ 162.635455][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.649520][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.677590][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.711947][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.726097][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.739518][ T3556] Bluetooth: hci2: command 0x040f tx timeout [ 162.789238][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.807809][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.831119][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.853121][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.876542][ T5512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.878585][ T5761] loop1: detected capacity change from 0 to 2048 [ 162.887441][ T5512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.900801][ T5512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.910210][ T5512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.920588][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.973288][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.991732][ T5761] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.012232][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.027762][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.036697][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.071253][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.078723][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.142271][ T5462] device veth0_vlan entered promiscuous mode [ 163.178154][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.187066][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.319619][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.328278][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.380747][ T5462] device veth1_vlan entered promiscuous mode [ 163.443675][ T5610] device veth0_vlan entered promiscuous mode [ 163.464933][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.480439][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.488634][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.552721][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.564919][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.604511][ T5610] device veth1_vlan entered promiscuous mode [ 163.643345][ T5097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.655908][ T5097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.673488][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.673610][ T4177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.697215][ T5462] device veth0_macvtap entered promiscuous mode [ 163.704559][ T26] Bluetooth: hci4: command 0x040f tx timeout [ 163.717292][ T4177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.723593][ T5462] device veth1_macvtap entered promiscuous mode [ 163.741293][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.756165][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.765782][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.774785][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.784537][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.822470][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.842357][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.867586][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.878242][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.888357][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.899760][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.909917][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.921668][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.933279][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.946026][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.956715][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.968694][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.980487][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.990647][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.001534][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.012332][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.023555][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.035194][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.052321][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.069699][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.082477][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.108577][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.122367][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.132356][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.145596][ T5610] device veth0_macvtap entered promiscuous mode [ 164.193665][ T5462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.216432][ T5462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.216467][ T5462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.216494][ T5462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.246106][ T5610] device veth1_macvtap entered promiscuous mode [ 164.266393][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.306150][ T5776] loop3: detected capacity change from 0 to 1024 [ 164.360978][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.372675][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.382322][ T5776] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 164.394508][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.412510][ T25] audit: type=1326 audit(1720066064.211:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dfffb0bd9 code=0x0 [ 164.434043][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.434064][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.434079][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.434095][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.434107][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.434122][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.434134][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.435851][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.548756][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.557814][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.566067][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.573851][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.582763][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.591433][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.603002][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.612557][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.623113][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.625875][ T5778] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 164.640147][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.653464][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.653482][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.653497][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.653510][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.653523][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.653535][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.653548][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.654811][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.690927][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.704844][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.705423][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.712576][ T5610] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.712606][ T5610] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.712631][ T5610] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.712655][ T5610] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.722338][ T5097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.722390][ T5097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.739846][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.740405][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.740782][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.740817][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.741843][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.762694][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.783803][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.785087][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.785580][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.786005][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.786046][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.786407][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.787106][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.787891][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.791311][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.035687][ T3525] Bluetooth: hci2: command 0x0419 tx timeout [ 165.057542][ T5636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.068317][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.086146][ T5636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.086311][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.124544][ T5782] loop3: detected capacity change from 0 to 512 [ 165.131040][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.144356][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.157289][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.166430][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.175431][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.190584][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.194193][ T5782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 165.204356][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.207372][ T5782] System zones: [ 165.215498][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.223540][ T5782] 1-12 [ 165.228534][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.250163][ T5782] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.452: inline data xattr refers to an external xattr inode [ 165.265789][ T5782] EXT4-fs (loop3): Remounting filesystem read-only [ 165.273095][ T5782] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.452: couldn't read orphan inode 12 (err -117) [ 165.286314][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 165.298562][ T5782] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 165.362811][ T25] audit: type=1800 audit(1720066065.161:58): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.452" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 165.363033][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.389225][ T26] Bluetooth: hci5: command 0x0409 tx timeout [ 165.410676][ T5782] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 36: comm syz.3.452: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 165.432485][ T5786] loop4: detected capacity change from 0 to 1024 [ 165.439558][ T5782] EXT4-fs (loop3): Remounting filesystem read-only [ 165.528769][ T5786] EXT4-fs (loop4): Ignoring removed orlov option [ 165.571369][ T5786] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 165.596582][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.624029][ T5786] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 165.683745][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.691110][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.699600][ T5765] device bridge_slave_0 entered promiscuous mode [ 165.701775][ T5097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.785484][ T3603] Bluetooth: hci4: command 0x0419 tx timeout [ 166.743515][ T5097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.788505][ T5803] loop3: detected capacity change from 0 to 2048 [ 166.804549][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.821109][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.828193][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.849166][ T5765] device bridge_slave_1 entered promiscuous mode [ 166.887312][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.903577][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.951349][ T5803] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.987866][ T4177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.000625][ T4177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.011916][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.048119][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.094343][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.123651][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.200721][ T5807] loop2: detected capacity change from 0 to 2048 [ 167.231976][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.251182][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.311822][ T5807] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.362122][ T5815] loop3: detected capacity change from 0 to 2048 [ 167.437895][ T25] audit: type=1804 audit(1720066067.231:59): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.442" name="/newroot/0/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 167.459985][ T3556] Bluetooth: hci5: command 0x041b tx timeout [ 167.460732][ T5765] team0: Port device team_slave_0 added [ 167.480271][ T5815] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.484562][ T5765] team0: Port device team_slave_1 added [ 167.521349][ T25] audit: type=1804 audit(1720066067.231:60): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.442" name="/newroot/0/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 167.521384][ T25] audit: type=1804 audit(1720066067.231:61): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.442" name="/newroot/0/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 167.546316][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.546941][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.550912][ T5636] device veth0_vlan entered promiscuous mode [ 167.556241][ T5636] device veth1_vlan entered promiscuous mode [ 167.576597][ T5822] loop4: detected capacity change from 0 to 1024 [ 167.614826][ T5822] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 167.701715][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.727818][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.758067][ T25] audit: type=1804 audit(1720066067.551:62): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.456" name="/newroot/7/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 167.765946][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.836927][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.087153][ T25] audit: type=1804 audit(1720066067.591:63): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.456" name="/newroot/7/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 168.108371][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.140872][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.177023][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.185800][ T25] audit: type=1804 audit(1720066067.591:64): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.456" name="/newroot/7/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 168.390514][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.891224][ T25] audit: type=1326 audit(1720066067.601:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.4.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1989263bd9 code=0x0 [ 168.927447][ T5839] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 168.960768][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.960783][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.960806][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.294116][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.540256][ T26] Bluetooth: hci5: command 0x040f tx timeout [ 169.799913][ T5849] loop3: detected capacity change from 0 to 512 [ 169.829734][ T5636] device veth0_macvtap entered promiscuous mode [ 169.864080][ T5765] device hsr_slave_0 entered promiscuous mode [ 169.876805][ T5765] device hsr_slave_1 entered promiscuous mode [ 169.877337][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.877361][ T5765] Cannot create hsr debugfs directory [ 169.877527][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.878089][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.878859][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.902754][ T5849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 169.902837][ T5849] System zones: 1-12 [ 169.932469][ T5849] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.460: inline data xattr refers to an external xattr inode [ 169.932699][ T5849] EXT4-fs (loop3): Remounting filesystem read-only [ 169.932758][ T5849] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.460: couldn't read orphan inode 12 (err -117) [ 169.932933][ T5849] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 169.934392][ T5636] device veth1_macvtap entered promiscuous mode [ 171.001621][ T25] audit: type=1800 audit(1720066070.801:66): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.460" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 171.001955][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.006991][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.007011][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.007021][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.007033][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.007044][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.007056][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.007066][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.007078][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.007089][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.007101][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.007113][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.007125][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.008210][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.014825][ T5849] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 36: comm syz.3.460: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 171.039480][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.073817][ T5860] loop2: detected capacity change from 0 to 1024 [ 171.097800][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.112287][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.133342][ T5849] EXT4-fs (loop3): Remounting filesystem read-only [ 171.220312][ T5860] EXT4-fs (loop2): Ignoring removed orlov option [ 171.344353][ T5860] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 171.362256][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.391669][ T5862] loop4: detected capacity change from 0 to 2048 [ 171.398397][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.408414][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.418937][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.422732][ T5860] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 171.436111][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.464374][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.474552][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.485199][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.495209][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.505830][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.515750][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.526262][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.544332][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.612902][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.630011][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.664551][ T5862] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.698086][ T3949] Bluetooth: hci5: command 0x0419 tx timeout [ 171.700226][ T5636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.713192][ T5636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.721956][ T5636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.730675][ T5636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.184010][ T5097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.191510][ T5889] loop4: detected capacity change from 0 to 512 [ 172.205742][ T5097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.265571][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.296729][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.329573][ T5889] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.340877][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.384554][ T5889] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 172.407203][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.707895][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.779483][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.795908][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.847053][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.064195][ T5884] loop3: detected capacity change from 0 to 32768 [ 173.167391][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.263621][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.275646][ T5917] loop4: detected capacity change from 0 to 512 [ 173.283870][ T5884] XFS (loop3): Mounting V5 Filesystem [ 173.303624][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.337792][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.407174][ T5884] XFS (loop3): Ending clean mount [ 173.420924][ T5884] XFS (loop3): Quotacheck needed: Please wait. [ 173.469714][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.478798][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.488562][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.495661][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.503452][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.512198][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.514907][ T5917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 173.520700][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.528874][ T5917] System zones: [ 173.535369][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.536003][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.592297][ T5902] loop2: detected capacity change from 0 to 32768 [ 173.592450][ T5884] XFS (loop3): Quotacheck: Done. [ 173.598865][ T5917] 1-12 [ 173.606667][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.616241][ T5917] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.472: inline data xattr refers to an external xattr inode [ 173.644873][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.672538][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.680507][ T25] audit: type=1804 audit(1720066073.481:67): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.468" name="/newroot/11/file0/bus" dev="loop3" ino=6154 res=1 errno=0 [ 173.681526][ T5917] EXT4-fs (loop4): Remounting filesystem read-only [ 173.703270][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.718224][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.726875][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.739100][ T5917] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.472: couldn't read orphan inode 12 (err -117) [ 173.755116][ T5899] loop0: detected capacity change from 0 to 32768 [ 173.756040][ T5917] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 173.850781][ T5765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.862836][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.877083][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.889827][ T25] audit: type=1800 audit(1720066073.691:68): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.472" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 173.899898][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.929656][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.943698][ T5917] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 36: comm syz.4.472: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 173.964267][ T5917] EXT4-fs (loop4): Remounting filesystem read-only [ 173.966472][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.006297][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.021559][ T5902] XFS (loop2): Mounting V5 Filesystem [ 174.032778][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.062425][ T5512] XFS (loop3): Unmounting Filesystem [ 174.068203][ T5899] XFS (loop0): Mounting V5 Filesystem [ 174.169626][ T5899] XFS (loop0): Ending clean mount [ 174.176733][ T5902] XFS (loop2): Ending clean mount [ 174.190227][ T5899] XFS (loop0): Quotacheck needed: Please wait. [ 174.220555][ T5961] loop4: detected capacity change from 0 to 2048 [ 174.291353][ T5902] XFS (loop2): Quotacheck needed: Please wait. [ 174.307854][ T5899] XFS (loop0): Quotacheck: Done. [ 174.350472][ T5902] XFS (loop2): Quotacheck: Done. [ 174.362811][ T9] device hsr_slave_0 left promiscuous mode [ 174.387551][ T5961] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.411614][ T9] device hsr_slave_1 left promiscuous mode [ 174.474757][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.501810][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.514861][ T5610] XFS (loop2): Unmounting Filesystem [ 174.533024][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.555415][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.555598][ T5636] XFS (loop0): Unmounting Filesystem [ 174.649599][ T9] device bridge_slave_1 left promiscuous mode [ 174.655822][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.734472][ T5968] loop4: detected capacity change from 0 to 1024 [ 174.752192][ T9] device bridge_slave_0 left promiscuous mode [ 174.758386][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.778206][ T5970] loop3: detected capacity change from 0 to 1024 [ 174.788360][ T9] device hsr_slave_0 left promiscuous mode [ 174.808332][ T5968] EXT4-fs (loop4): Ignoring removed orlov option [ 174.822934][ T5970] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 174.839717][ T5968] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 174.857454][ T9] device hsr_slave_1 left promiscuous mode [ 174.877465][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.901137][ T5968] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 174.907189][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.933441][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.940913][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.969550][ T9] device bridge_slave_1 left promiscuous mode [ 174.975720][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.005924][ T25] audit: type=1326 audit(1720066074.801:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.3.473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dfffb0bd9 code=0x0 [ 175.040000][ T9] device bridge_slave_0 left promiscuous mode [ 175.057476][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.120446][ T9] device hsr_slave_0 left promiscuous mode [ 175.129662][ T9] device hsr_slave_1 left promiscuous mode [ 175.136072][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.144631][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.154186][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.161827][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.171542][ T5980] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 175.181952][ T9] device bridge_slave_1 left promiscuous mode [ 175.188217][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.200223][ T9] device bridge_slave_0 left promiscuous mode [ 175.200337][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.212422][ T9] device veth1_macvtap left promiscuous mode [ 175.212454][ T9] device veth0_macvtap left promiscuous mode [ 175.212505][ T9] device veth1_vlan left promiscuous mode [ 175.212544][ T9] device veth0_vlan left promiscuous mode [ 175.214438][ T9] device veth1_macvtap left promiscuous mode [ 175.214469][ T9] device veth0_macvtap left promiscuous mode [ 175.214519][ T9] device veth1_vlan left promiscuous mode [ 175.214593][ T9] device veth0_vlan left promiscuous mode [ 175.217117][ T9] device veth1_macvtap left promiscuous mode [ 175.217167][ T9] device veth0_macvtap left promiscuous mode [ 175.217255][ T9] device veth1_vlan left promiscuous mode [ 175.217303][ T9] device veth0_vlan left promiscuous mode [ 175.717326][ T5989] loop4: detected capacity change from 0 to 512 [ 175.736943][ T9] team0 (unregistering): Port device team_slave_1 removed [ 175.754285][ T9] team0 (unregistering): Port device team_slave_0 removed [ 175.767356][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.791636][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.815139][ T5989] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.838853][ T5989] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff) [ 175.874271][ T9] bond0 (unregistering): Released all slaves [ 176.080616][ T9] team0 (unregistering): Port device team_slave_1 removed [ 176.126479][ T9] team0 (unregistering): Port device team_slave_0 removed [ 176.146498][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.188409][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.343112][ T9] bond0 (unregistering): Released all slaves [ 176.503148][ T9] team0 (unregistering): Port device team_slave_1 removed [ 176.518492][ T9] team0 (unregistering): Port device team_slave_0 removed [ 176.534464][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.547159][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.607793][ T9] bond0 (unregistering): Released all slaves [ 176.668098][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.676053][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.716869][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.877532][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.879356][ T6000] loop3: detected capacity change from 0 to 512 [ 176.890428][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.911029][ T6003] loop2: detected capacity change from 0 to 2048 [ 176.934460][ T5765] device veth0_vlan entered promiscuous mode [ 176.962851][ T6000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 176.985237][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.995907][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.036390][ T6000] System zones: 1-12 [ 177.052829][ T6000] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.483: inline data xattr refers to an external xattr inode [ 177.062585][ T5765] device veth1_vlan entered promiscuous mode [ 177.096993][ T6000] EXT4-fs (loop3): Remounting filesystem read-only [ 177.118779][ T6003] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.168751][ T6000] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.483: couldn't read orphan inode 12 (err -117) [ 177.202360][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.227629][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.264005][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.281513][ T6000] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 177.309915][ T25] audit: type=1804 audit(1720066077.111:70): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.484" name="/newroot/8/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 177.380003][ T25] audit: type=1804 audit(1720066077.111:71): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.484" name="/newroot/8/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 177.401113][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.432545][ T5765] device veth0_macvtap entered promiscuous mode [ 177.455158][ T5998] loop0: detected capacity change from 0 to 32768 [ 177.474078][ T6000] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 36: comm syz.3.483: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 177.489620][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.502591][ T25] audit: type=1804 audit(1720066077.111:72): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.484" name="/newroot/8/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 177.525210][ T6000] EXT4-fs (loop3): Remounting filesystem read-only [ 177.528770][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.533004][ T25] audit: type=1800 audit(1720066077.231:73): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.483" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 177.568440][ T6023] loop4: detected capacity change from 0 to 2048 [ 177.580553][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.622080][ T5765] device veth1_macvtap entered promiscuous mode [ 177.626770][ T6027] loop2: detected capacity change from 0 to 2048 [ 177.659815][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.667918][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.676513][ T5998] XFS (loop0): Mounting V5 Filesystem [ 177.713146][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.747662][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.759921][ T6023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.775748][ T6039] loop3: detected capacity change from 0 to 2048 [ 177.780883][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.805629][ T6027] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.806872][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.827434][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.838142][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.848016][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.859258][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.870738][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.885091][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.886712][ T5998] XFS (loop0): Ending clean mount [ 177.896183][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.909865][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.978817][ T5998] XFS (loop0): Quotacheck needed: Please wait. [ 177.990559][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.001471][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.013665][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.015507][ T6039] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.025913][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.045714][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.056790][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.067262][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.078604][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.088404][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.097664][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.107837][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.117350][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.126304][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.127708][ T5998] XFS (loop0): Quotacheck: Done. [ 178.135256][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.211601][ T25] audit: type=1804 audit(1720066078.011:74): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.482" name="/newroot/2/file0/bus" dev="loop0" ino=6154 res=1 errno=0 [ 178.232887][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.369338][ T5636] XFS (loop0): Unmounting Filesystem [ 178.370672][ T25] audit: type=1800 audit(1720066078.161:75): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.488" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 178.376777][ T6057] loop2: detected capacity change from 0 to 1024 [ 178.408173][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.472620][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.525414][ T6057] EXT4-fs (loop2): Ignoring removed orlov option [ 178.532081][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.550400][ T6057] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 178.580444][ T5097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.588428][ T5097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.607269][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.638151][ T6057] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 178.901827][ T6069] loop3: detected capacity change from 0 to 128 [ 180.017270][ T6074] loop1: detected capacity change from 0 to 512 [ 180.147343][ T6080] loop0: detected capacity change from 0 to 512 [ 180.200300][ T6074] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.212058][ T6060] loop4: detected capacity change from 0 to 32768 [ 180.228606][ T6086] loop3: detected capacity change from 0 to 2048 [ 180.235677][ T6074] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff) [ 180.263101][ T6080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 180.278396][ T6080] System zones: 1-12 [ 180.399262][ T6080] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.497: inline data xattr refers to an external xattr inode [ 180.420762][ T6060] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.490 (6060) [ 180.436409][ T6086] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.472298][ T6091] loop2: detected capacity change from 0 to 2048 [ 180.542770][ T6080] EXT4-fs (loop0): Remounting filesystem read-only [ 180.556359][ T6080] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.497: couldn't read orphan inode 12 (err -117) [ 180.566766][ T6060] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 180.595548][ T6080] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 180.630326][ T6060] BTRFS info (device loop4): force zlib compression, level 3 [ 180.637735][ T6060] BTRFS info (device loop4): force clearing of disk cache [ 180.645464][ T6091] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.656630][ T6060] BTRFS info (device loop4): setting nodatasum [ 180.663942][ T6060] BTRFS info (device loop4): allowing degraded mounts [ 180.779103][ T6060] BTRFS info (device loop4): enabling disk space caching [ 180.814150][ T6060] BTRFS info (device loop4): disk space caching is enabled [ 180.879044][ T6060] BTRFS info (device loop4): has skinny extents [ 180.899885][ T25] audit: type=1800 audit(1720066080.701:76): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.497" name="bus" dev="loop0" ino=20 res=0 errno=0 [ 181.131289][ T6060] BTRFS info (device loop4): clearing free space tree [ 181.138294][ T6060] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.159095][ T6060] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.192136][ T6060] BTRFS info (device loop4): balance: start -d -m -s [ 181.221895][ T6060] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 181.306669][ T6060] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 181.341804][ T6134] loop2: detected capacity change from 0 to 128 [ 181.414401][ T6060] BTRFS info (device loop4): balance: canceled [ 182.374333][ T6098] loop1: detected capacity change from 0 to 32768 [ 183.559854][ T6145] loop0: detected capacity change from 0 to 2048 [ 183.580708][ T6098] XFS (loop1): Mounting V5 Filesystem [ 183.658089][ T6145] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.671362][ T6098] XFS (loop1): Ending clean mount [ 183.693159][ T6157] loop3: detected capacity change from 0 to 512 [ 183.718151][ T6151] loop2: detected capacity change from 0 to 2048 [ 183.730669][ T6098] XFS (loop1): Quotacheck needed: Please wait. [ 183.748494][ T6161] loop4: detected capacity change from 0 to 512 [ 183.805963][ T6157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 183.816425][ T6098] XFS (loop1): Quotacheck: Done. [ 183.849262][ T6157] System zones: 1-12 [ 183.878038][ T5765] XFS (loop1): Unmounting Filesystem [ 183.899506][ T6157] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.513: inline data xattr refers to an external xattr inode [ 183.995544][ T6157] EXT4-fs (loop3): Remounting filesystem read-only [ 184.005133][ T6151] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.033865][ T6157] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.513: couldn't read orphan inode 12 (err -117) [ 184.065548][ T6161] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.099336][ T6161] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff) [ 184.115697][ T6157] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 184.326550][ T25] audit: type=1800 audit(1720066084.121:77): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.513" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 184.434942][ T6157] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 36: comm syz.3.513: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 184.526897][ T6157] EXT4-fs (loop3): Remounting filesystem read-only [ 186.915771][ T6195] loop4: detected capacity change from 0 to 2048 [ 187.142144][ T6195] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.594359][ T6209] loop4: detected capacity change from 0 to 512 [ 187.629722][ T6211] loop1: detected capacity change from 0 to 2048 [ 187.666086][ T6198] loop2: detected capacity change from 0 to 32768 [ 187.668628][ T6215] loop3: detected capacity change from 0 to 512 [ 187.709156][ T6209] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.723658][ T6211] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.744622][ T6209] ext4 filesystem being mounted at /20/bus supports timestamps until 2038 (0x7fffffff) [ 187.776228][ T6185] loop0: detected capacity change from 0 to 32768 [ 187.801955][ T6215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.821776][ T6185] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.521 (6185) [ 187.849642][ T6198] XFS (loop2): Mounting V5 Filesystem [ 187.855285][ T6215] ext4 filesystem being mounted at /26/bus supports timestamps until 2038 (0x7fffffff) [ 188.049355][ T6185] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 188.058601][ T6185] BTRFS info (device loop0): force zlib compression, level 3 [ 188.075087][ T6185] BTRFS info (device loop0): force clearing of disk cache [ 188.083000][ T6185] BTRFS info (device loop0): setting nodatasum [ 188.089821][ T6185] BTRFS info (device loop0): allowing degraded mounts [ 188.190272][ T6198] XFS (loop2): Ending clean mount [ 188.673755][ T6198] XFS (loop2): Quotacheck needed: Please wait. [ 188.713276][ T6185] BTRFS info (device loop0): enabling disk space caching [ 188.792299][ T6185] BTRFS info (device loop0): disk space caching is enabled [ 188.808694][ T6185] BTRFS info (device loop0): has skinny extents [ 188.892753][ T6198] XFS (loop2): Quotacheck: Done. [ 189.113278][ T6236] loop1: detected capacity change from 0 to 512 [ 189.933715][ T6185] BTRFS error (device loop0): open_ctree failed [ 189.970698][ T5610] XFS (loop2): Unmounting Filesystem [ 189.986052][ T6236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 190.012036][ T6236] System zones: 1-12 [ 190.024265][ T6236] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.532: inline data xattr refers to an external xattr inode [ 190.047920][ T6236] EXT4-fs (loop1): Remounting filesystem read-only [ 190.054561][ T6236] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.532: couldn't read orphan inode 12 (err -117) [ 190.080744][ T6236] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 190.337339][ T25] audit: type=1800 audit(1720066090.131:78): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.532" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 190.438859][ T6236] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 36: comm syz.1.532: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 190.535700][ T6236] EXT4-fs (loop1): Remounting filesystem read-only [ 190.600263][ T6282] loop0: detected capacity change from 0 to 128 [ 190.830525][ T6286] loop1: detected capacity change from 0 to 2048 [ 190.917147][ T6286] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.437219][ T6292] loop4: detected capacity change from 0 to 32768 [ 192.541628][ T6292] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.547 (6292) [ 192.625409][ T6289] loop0: detected capacity change from 0 to 32768 [ 192.643897][ T6319] loop1: detected capacity change from 0 to 512 [ 192.663111][ T6292] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 192.703521][ T6292] BTRFS info (device loop4): force zlib compression, level 3 [ 192.722135][ T6319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 192.782991][ T6319] System zones: 1-12 [ 192.784928][ T6292] BTRFS info (device loop4): force clearing of disk cache [ 192.794933][ T6292] BTRFS info (device loop4): setting nodatasum [ 192.801726][ T6292] BTRFS info (device loop4): allowing degraded mounts [ 192.808709][ T6292] BTRFS info (device loop4): enabling disk space caching [ 192.809603][ T6319] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.555: inline data xattr refers to an external xattr inode [ 192.816478][ T6292] BTRFS info (device loop4): disk space caching is enabled [ 192.837748][ T6289] XFS (loop0): Mounting V5 Filesystem [ 192.844868][ T6292] BTRFS info (device loop4): has skinny extents [ 192.893749][ T6319] EXT4-fs (loop1): Remounting filesystem read-only [ 192.919097][ T6319] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.555: couldn't read orphan inode 12 (err -117) [ 192.933408][ T6289] XFS (loop0): Ending clean mount [ 192.942144][ T6319] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 192.970491][ T6289] XFS (loop0): Quotacheck needed: Please wait. [ 193.017871][ T6289] XFS (loop0): Quotacheck: Done. [ 193.067255][ T25] audit: type=1804 audit(1720066092.861:79): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.546" name="/newroot/21/file0/bus" dev="loop0" ino=6154 res=1 errno=0 [ 193.134157][ T25] audit: type=1800 audit(1720066092.921:80): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.555" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 193.173892][ T6319] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 36: comm syz.1.555: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 193.201553][ T6319] EXT4-fs (loop1): Remounting filesystem read-only [ 193.205946][ T5636] XFS (loop0): Unmounting Filesystem [ 193.246460][ T6292] BTRFS info (device loop4): clearing free space tree [ 193.279608][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 193.288645][ T6292] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.319051][ T6292] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.453201][ T6292] BTRFS info (device loop4): balance: start -d -m -s [ 193.467846][ T6292] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 193.514027][ T6292] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 194.024826][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.032209][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.637146][ T6292] BTRFS info (device loop4): found 9 extents, stage: move data extents [ 194.682732][ T6292] BTRFS info (device loop4): balance: canceled [ 194.716136][ T6364] loop1: detected capacity change from 0 to 2048 [ 194.876337][ T6364] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.095269][ T25] audit: type=1800 audit(1720066094.891:81): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.561" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 196.266258][ T6385] loop0: detected capacity change from 0 to 512 [ 196.384814][ T6385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 196.419751][ T6385] System zones: 1-12 [ 196.458773][ T6385] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.568: inline data xattr refers to an external xattr inode [ 196.494741][ T6385] EXT4-fs (loop0): Remounting filesystem read-only [ 196.529189][ T4003] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 196.542656][ T6385] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.568: couldn't read orphan inode 12 (err -117) [ 196.629430][ T6385] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 196.747016][ T25] audit: type=1800 audit(1720066096.541:82): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.568" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 196.795336][ T6385] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 36: comm syz.0.568: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 196.891257][ T4003] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 197.071826][ T4003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.124398][ T6385] EXT4-fs (loop0): Remounting filesystem read-only [ 197.958749][ T4003] usb 4-1: config 0 descriptor?? [ 198.001270][ T4003] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 198.005328][ T6374] loop4: detected capacity change from 0 to 32768 [ 198.127716][ T6374] XFS (loop4): Mounting V5 Filesystem [ 198.292129][ T6374] XFS (loop4): log mount failed [ 198.392336][ T6408] loop0: detected capacity change from 0 to 32768 [ 198.432798][ T6408] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.573 (6408) [ 198.472166][ T6408] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 198.489161][ T6408] BTRFS info (device loop0): force zlib compression, level 3 [ 198.527011][ T6408] BTRFS info (device loop0): force clearing of disk cache [ 198.551112][ T6408] BTRFS info (device loop0): setting nodatasum [ 198.571279][ T6408] BTRFS info (device loop0): allowing degraded mounts [ 198.594697][ T6408] BTRFS info (device loop0): enabling disk space caching [ 198.615779][ T6408] BTRFS info (device loop0): disk space caching is enabled [ 198.639108][ T6408] BTRFS info (device loop0): has skinny extents [ 198.767673][ T6422] loop4: detected capacity change from 0 to 1024 [ 198.857519][ T6422] EXT4-fs (loop4): Ignoring removed orlov option [ 198.876863][ T6422] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 198.882160][ T6411] loop2: detected capacity change from 0 to 32768 [ 198.894565][ T6408] BTRFS info (device loop0): clearing free space tree [ 198.908134][ T6408] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.918578][ T6408] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.951595][ T6422] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 198.957290][ T6408] BTRFS info (device loop0): balance: start -d -m -s [ 198.988696][ T6408] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 199.106657][ T6411] XFS (loop2): Mounting V5 Filesystem [ 199.123493][ T6408] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 199.287548][ T6408] BTRFS info (device loop0): balance: canceled [ 199.298302][ T6411] XFS (loop2): Ending clean mount [ 199.321799][ T6411] XFS (loop2): Quotacheck needed: Please wait. [ 199.370508][ T4003] usb 4-1: USB disconnect, device number 14 [ 199.525610][ T6411] XFS (loop2): Quotacheck: Done. [ 199.591463][ T25] audit: type=1804 audit(1720066099.391:83): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.576" name="/newroot/30/file0/bus" dev="loop2" ino=6154 res=1 errno=0 [ 199.692414][ T5610] XFS (loop2): Unmounting Filesystem [ 199.930925][ T6460] loop3: detected capacity change from 0 to 512 [ 199.999226][ T6460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 200.027780][ T6464] loop4: detected capacity change from 0 to 2048 [ 200.043668][ T6460] System zones: 1-12 [ 200.048822][ T6460] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.583: inline data xattr refers to an external xattr inode [ 200.069303][ T6460] EXT4-fs (loop3): Remounting filesystem read-only [ 200.079958][ T6460] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.583: couldn't read orphan inode 12 (err -117) [ 200.111990][ T6460] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 200.150959][ T6464] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.167379][ T25] audit: type=1800 audit(1720066099.961:84): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.583" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 200.201899][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 200.232603][ T6460] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 36: comm syz.3.583: bad entry in directory: directory entry overrun - offset=256, inode=19, rec_len=768, size=1012 fake=0 [ 200.255549][ T6460] EXT4-fs (loop3): Remounting filesystem read-only [ 200.256216][ T25] audit: type=1800 audit(1720066099.981:85): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.584" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 201.068899][ T6484] loop0: detected capacity change from 0 to 32768 [ 201.132239][ T6480] loop4: detected capacity change from 0 to 32768 [ 201.203897][ T6480] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.588 (6480) [ 201.350098][ T6484] XFS (loop0): Mounting V5 Filesystem [ 201.355654][ T6480] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 201.421226][ T6480] BTRFS info (device loop4): force zlib compression, level 3 [ 201.428629][ T6480] BTRFS info (device loop4): force clearing of disk cache [ 201.439350][ T6480] BTRFS info (device loop4): setting nodatasum [ 201.444742][ T6484] XFS (loop0): Ending clean mount [ 201.455765][ T6480] BTRFS info (device loop4): allowing degraded mounts [ 201.466749][ T6484] XFS (loop0): Quotacheck needed: Please wait. [ 201.508625][ T6484] XFS (loop0): Quotacheck: Done. [ 201.516463][ T6480] BTRFS info (device loop4): enabling disk space caching [ 201.549045][ T6480] BTRFS info (device loop4): disk space caching is enabled [ 201.593410][ T6480] BTRFS info (device loop4): has skinny extents [ 201.603326][ T25] audit: type=1804 audit(1720066101.401:86): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.590" name="/newroot/26/file0/bus" dev="loop0" ino=6154 res=1 errno=0 [ 201.664356][ T6501] loop1: detected capacity change from 0 to 1024 [ 201.747444][ T5636] XFS (loop0): Unmounting Filesystem [ 201.825606][ T6501] EXT4-fs (loop1): Ignoring removed orlov option [ 201.839217][ T6501] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 201.896841][ T6501] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 201.966864][ T6480] BTRFS info (device loop4): clearing free space tree [ 201.989254][ T6480] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.049270][ T6480] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.118327][ T6499] loop3: detected capacity change from 0 to 32768 [ 202.136569][ T6480] BTRFS info (device loop4): balance: start -d -m -s [ 202.147135][ T6480] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 202.222529][ T6480] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 202.347200][ T6480] BTRFS info (device loop4): found 9 extents, stage: move data extents [ 202.403325][ T6480] BTRFS info (device loop4): balance: canceled [ 202.413233][ T6499] XFS (loop3): Mounting V5 Filesystem [ 202.459046][ T3556] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 202.548547][ T6499] XFS (loop3): Ending clean mount [ 202.597872][ T6499] XFS (loop3): Quotacheck needed: Please wait. [ 202.738119][ T6499] XFS (loop3): Quotacheck: Done. [ 202.797061][ T25] audit: type=1804 audit(1720066102.591:87): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.592" name="/newroot/39/file0/bus" dev="loop3" ino=6154 res=1 errno=0 [ 202.847672][ T6553] loop4: detected capacity change from 0 to 512 [ 202.859208][ T3556] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 202.868346][ T3556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.879833][ T3556] usb 1-1: config 0 descriptor?? [ 202.906073][ T6553] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 202.917385][ T6553] ext4 filesystem being mounted at /30/bus supports timestamps until 2038 (0x7fffffff) [ 202.941087][ T3556] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 202.948723][ T5512] XFS (loop3): Unmounting Filesystem [ 203.965760][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 204.200514][ T6559] loop3: detected capacity change from 0 to 40427 [ 204.337636][ T6559] F2FS-fs (loop3): invalid crc value [ 204.369072][ T6559] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.455899][ T3556] usb 1-1: USB disconnect, device number 5 [ 204.489248][ T6559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 204.566477][ T6571] loop4: detected capacity change from 0 to 32768 [ 204.637027][ T6571] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.606 (6571) [ 204.709435][ T6571] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 204.746965][ T6571] BTRFS info (device loop4): force zlib compression, level 3 [ 204.758367][ T6571] BTRFS info (device loop4): force clearing of disk cache [ 204.781191][ T6571] BTRFS info (device loop4): setting nodatasum [ 204.817265][ T6571] BTRFS info (device loop4): allowing degraded mounts [ 204.848331][ T6571] BTRFS info (device loop4): enabling disk space caching [ 204.865835][ T6571] BTRFS info (device loop4): disk space caching is enabled [ 204.886043][ T6571] BTRFS info (device loop4): has skinny extents [ 205.233956][ T6571] BTRFS info (device loop4): clearing free space tree [ 205.238269][ T6603] loop0: detected capacity change from 0 to 1024 [ 205.269073][ T6571] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.319682][ T6603] EXT4-fs (loop0): Ignoring removed orlov option [ 205.358196][ T6603] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 205.366249][ T6571] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.473505][ T6603] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 205.522594][ T6571] BTRFS info (device loop4): balance: start -d -m -s [ 205.571997][ T6571] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 205.653246][ T6571] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 206.359740][ T6571] BTRFS info (device loop4): balance: canceled [ 206.424783][ T6620] loop2: detected capacity change from 0 to 512 [ 206.446639][ T6594] loop3: detected capacity change from 0 to 32768 [ 206.510314][ T6620] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.528672][ T6622] loop1: detected capacity change from 0 to 512 [ 206.554104][ T6620] ext4 filesystem being mounted at /41/bus supports timestamps until 2038 (0x7fffffff) [ 206.762932][ T6594] XFS (loop3): Mounting V5 Filesystem [ 206.772268][ T6622] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.800365][ T6622] ext4 filesystem being mounted at /23/bus supports timestamps until 2038 (0x7fffffff) [ 207.437260][ T6594] XFS (loop3): Ending clean mount [ 207.461357][ T6594] XFS (loop3): Quotacheck needed: Please wait. [ 207.538013][ T6594] XFS (loop3): Quotacheck: Done. [ 207.628606][ T25] audit: type=1804 audit(1720066107.421:88): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.607" name="/newroot/41/file0/bus" dev="loop3" ino=6154 res=1 errno=0 [ 207.762588][ T6642] loop4: detected capacity change from 0 to 2048 [ 207.776980][ T5512] XFS (loop3): Unmounting Filesystem [ 207.866422][ T6642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.979213][ T3569] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 208.332654][ T6635] loop0: detected capacity change from 0 to 40427 [ 208.408081][ T6650] loop3: detected capacity change from 0 to 1024 [ 208.426198][ T3569] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 208.446871][ T6635] F2FS-fs (loop0): invalid crc value [ 208.460521][ T6635] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.479284][ T3569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.511466][ T6650] EXT4-fs (loop3): Ignoring removed orlov option [ 208.517834][ T6650] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 208.537096][ T3569] usb 3-1: config 0 descriptor?? [ 208.565457][ T6650] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 208.584386][ T6635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.610676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 208.628828][ T3569] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 209.309331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 209.469188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 209.479010][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 209.489486][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 209.498425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 209.507371][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 210.761445][ T3569] usb 3-1: USB disconnect, device number 8 [ 211.768391][ T6676] loop4: detected capacity change from 0 to 32768 [ 211.797770][ T6693] loop2: detected capacity change from 0 to 512 [ 211.863821][ T6673] loop0: detected capacity change from 0 to 32768 [ 211.917059][ T6699] loop3: detected capacity change from 0 to 2048 [ 211.960467][ T6693] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.972667][ T6693] ext4 filesystem being mounted at /43/bus supports timestamps until 2038 (0x7fffffff) [ 211.987818][ T6673] XFS (loop0): Mounting V5 Filesystem [ 212.000751][ T6676] XFS (loop4): Mounting V5 Filesystem [ 212.045430][ T6699] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.456734][ T25] audit: type=1800 audit(1720066112.251:89): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.635" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 212.562548][ T6673] XFS (loop0): Ending clean mount [ 212.804220][ T6673] XFS (loop0): Quotacheck needed: Please wait. [ 212.819616][ T6676] XFS (loop4): Ending clean mount [ 212.834800][ T6676] XFS (loop4): Quotacheck needed: Please wait. [ 212.945099][ T6673] XFS (loop0): Quotacheck: Done. [ 212.946228][ T6676] XFS (loop4): Quotacheck: Done. [ 212.963534][ T6729] loop1: detected capacity change from 0 to 512 [ 212.991480][ T5636] XFS (loop0): Unmounting Filesystem [ 213.125552][ T5462] XFS (loop4): Unmounting Filesystem [ 213.266314][ T6729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.292449][ T6729] ext4 filesystem being mounted at /31/bus supports timestamps until 2038 (0x7fffffff) [ 215.965942][ T6754] loop2: detected capacity change from 0 to 512 [ 216.192197][ T6768] loop4: detected capacity change from 0 to 2048 [ 216.196548][ T6754] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.234588][ T6754] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff) [ 216.301000][ T6768] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.631382][ T25] audit: type=1800 audit(1720066116.381:90): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.649" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 219.114272][ T6796] loop3: detected capacity change from 0 to 512 [ 219.604814][ T6796] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.662114][ T6796] ext4 filesystem being mounted at /52/bus supports timestamps until 2038 (0x7fffffff) [ 219.750029][ T6785] loop1: detected capacity change from 0 to 32768 [ 220.003820][ T6785] XFS (loop1): Mounting V5 Filesystem [ 220.158627][ T6785] XFS (loop1): Ending clean mount [ 220.165491][ T6785] XFS (loop1): Quotacheck needed: Please wait. [ 220.245663][ T6785] XFS (loop1): Quotacheck: Done. [ 220.469757][ T5765] XFS (loop1): Unmounting Filesystem [ 226.575271][ T6850] loop2: detected capacity change from 0 to 512 [ 226.710690][ T6850] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.756468][ T6850] ext4 filesystem being mounted at /48/bus supports timestamps until 2038 (0x7fffffff) [ 227.099710][ T6855] loop1: detected capacity change from 0 to 32768 [ 228.100189][ T6855] XFS (loop1): Mounting V5 Filesystem [ 228.257444][ T6855] XFS (loop1): Ending clean mount [ 228.370930][ T6855] XFS (loop1): Quotacheck needed: Please wait. [ 229.320088][ T6855] XFS (loop1): Quotacheck: Done. [ 229.894953][ T6890] loop4: detected capacity change from 0 to 2048 [ 229.914207][ T5765] XFS (loop1): Unmounting Filesystem [ 230.122118][ T6890] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.256795][ T25] audit: type=1800 audit(1720066130.051:91): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 230.533807][ T6906] loop1: detected capacity change from 0 to 512 [ 230.701061][ T6906] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.719988][ T6910] netlink: 'syz.4.683': attribute type 2 has an invalid length. [ 230.728199][ T6906] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff) [ 230.906269][ T6918] loop2: detected capacity change from 0 to 512 [ 231.874631][ T6918] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.283819][ T6918] ext4 filesystem being mounted at /53/bus supports timestamps until 2038 (0x7fffffff) [ 233.405808][ T6940] loop4: detected capacity change from 0 to 2048 [ 233.551713][ T6940] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.866508][ T25] audit: type=1800 audit(1720066133.661:92): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.693" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 235.102271][ T6954] loop1: detected capacity change from 0 to 256 [ 235.265297][ T6957] netlink: 'syz.0.700': attribute type 2 has an invalid length. [ 236.769657][ T6967] netlink: 'syz.1.705': attribute type 2 has an invalid length. [ 237.454217][ T6978] loop1: detected capacity change from 0 to 2048 [ 238.013253][ T6978] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.205612][ T7026] loop1: detected capacity change from 0 to 2048 [ 243.399614][ T7026] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.184166][ T7047] netlink: 'syz.4.719': attribute type 2 has an invalid length. [ 245.377015][ T7054] loop4: detected capacity change from 0 to 512 [ 245.518063][ T7054] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.529161][ T7054] ext4 filesystem being mounted at /60/bus supports timestamps until 2038 (0x7fffffff) [ 245.762040][ T7059] loop1: detected capacity change from 0 to 256 [ 246.238451][ T7064] loop1: detected capacity change from 0 to 2048 [ 246.330892][ T7064] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.965017][ T7062] loop2: detected capacity change from 0 to 32768 [ 246.979781][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 247.101964][ T7062] XFS (loop2): Mounting V5 Filesystem [ 247.190320][ T7062] XFS (loop2): Ending clean mount [ 247.239405][ T7062] XFS (loop2): Quotacheck needed: Please wait. [ 247.350801][ T7062] XFS (loop2): Quotacheck: Done. [ 247.401214][ T25] audit: type=1804 audit(1720066147.201:93): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.730" name="/newroot/61/file0/bus" dev="loop2" ino=6154 res=1 errno=0 [ 247.524759][ T5610] XFS (loop2): Unmounting Filesystem [ 248.407474][ T7090] netlink: 'syz.3.737': attribute type 2 has an invalid length. [ 248.491765][ T7096] netlink: 'syz.4.739': attribute type 2 has an invalid length. [ 249.977367][ T7111] loop3: detected capacity change from 0 to 512 [ 251.180088][ T7111] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.593076][ T7111] ext4 filesystem being mounted at /63/bus supports timestamps until 2038 (0x7fffffff) [ 253.800816][ T7145] netlink: 'syz.1.752': attribute type 2 has an invalid length. [ 253.882516][ T7149] loop2: detected capacity change from 0 to 512 [ 254.139810][ T7149] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.396812][ T7149] ext4 filesystem being mounted at /64/bus supports timestamps until 2038 (0x7fffffff) [ 255.466526][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.474587][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.893103][ T7170] loop3: detected capacity change from 0 to 2048 [ 257.045045][ T7176] netlink: 'syz.4.762': attribute type 2 has an invalid length. [ 257.076607][ T7170] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.247268][ T7181] netlink: 'syz.0.763': attribute type 2 has an invalid length. [ 257.284391][ T7184] loop2: detected capacity change from 0 to 512 [ 257.379729][ T7184] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.439177][ T7189] loop4: detected capacity change from 0 to 512 [ 257.470750][ T7184] ext4 filesystem being mounted at /65/bus supports timestamps until 2038 (0x7fffffff) [ 258.078508][ T7189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.144447][ T7189] ext4 filesystem being mounted at /67/bus supports timestamps until 2038 (0x7fffffff) [ 258.182514][ T7195] loop1: detected capacity change from 0 to 512 [ 258.371980][ T7195] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.383299][ T7195] ext4 filesystem being mounted at /65/bus supports timestamps until 2038 (0x7fffffff) [ 262.338200][ T7233] netlink: 'syz.4.776': attribute type 2 has an invalid length. [ 263.184571][ T7239] loop4: detected capacity change from 0 to 512 [ 263.279892][ T7239] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.469195][ T7239] ext4 filesystem being mounted at /71/bus supports timestamps until 2038 (0x7fffffff) [ 264.565525][ T7248] loop4: detected capacity change from 0 to 512 [ 265.110187][ T7248] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.136063][ T7248] ext4 filesystem being mounted at /72/bus supports timestamps until 2038 (0x7fffffff) [ 266.053032][ T7259] loop3: detected capacity change from 0 to 512 [ 266.214674][ T7259] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.296177][ T7259] ext4 filesystem being mounted at /66/bus supports timestamps until 2038 (0x7fffffff) [ 272.052093][ T6138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.234380][ T7285] loop3: detected capacity change from 0 to 32768 [ 272.263598][ T6138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.441579][ T6138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.451652][ T7305] loop4: detected capacity change from 0 to 512 [ 272.509777][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 272.589086][ T6138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.659132][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 272.715461][ T7305] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.750927][ T7305] ext4 filesystem being mounted at /75/bus supports timestamps until 2038 (0x7fffffff) [ 273.833305][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.844112][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.890101][ T7290] device bridge_slave_0 entered promiscuous mode [ 273.923218][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.969102][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.001669][ T7290] device bridge_slave_1 entered promiscuous mode [ 274.026348][ T7324] netlink: 'syz.0.798': attribute type 2 has an invalid length. [ 274.192311][ T7290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.351186][ T7290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.732050][ T7290] team0: Port device team_slave_0 added [ 274.762711][ T3555] Bluetooth: hci0: command 0x041b tx timeout [ 274.807520][ T7290] team0: Port device team_slave_1 added [ 275.612272][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.667693][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.719936][ T7339] loop4: detected capacity change from 0 to 2048 [ 275.844878][ T7290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.856593][ T7339] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro,. Quota mode: none. [ 275.981235][ T7339] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 276.016142][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.046755][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.091618][ T7339] EXT4-fs (loop4): Remounting filesystem read-only [ 276.172624][ T7290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.798752][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.802'. [ 276.810536][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 276.827932][ T3555] Bluetooth: hci0: command 0x040f tx timeout [ 277.433942][ T7290] device hsr_slave_0 entered promiscuous mode [ 277.473808][ T7290] device hsr_slave_1 entered promiscuous mode [ 277.481172][ T7290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.491059][ T7290] Cannot create hsr debugfs directory [ 278.021056][ T3556] Bluetooth: hci3: command 0x0406 tx timeout [ 278.048562][ T3549] Bluetooth: hci1: command 0x0406 tx timeout [ 278.430400][ T7373] netlink: 'syz.0.806': attribute type 2 has an invalid length. [ 279.447279][ T3555] Bluetooth: hci0: command 0x0419 tx timeout [ 279.458011][ T7382] netlink: 'syz.0.810': attribute type 2 has an invalid length. [ 279.474573][ T7379] loop2: detected capacity change from 0 to 512 [ 279.860195][ T7379] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.902222][ T7400] loop4: detected capacity change from 0 to 2048 [ 279.919736][ T6138] device hsr_slave_0 left promiscuous mode [ 279.952960][ T6138] device hsr_slave_1 left promiscuous mode [ 280.006551][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.018746][ T7379] ext4 filesystem being mounted at /74/bus supports timestamps until 2038 (0x7fffffff) [ 280.027753][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.036651][ T7400] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro,. Quota mode: none. [ 280.051998][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.110566][ T7400] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 280.153260][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.222840][ T7400] EXT4-fs (loop4): Remounting filesystem read-only [ 280.250892][ T6138] device bridge_slave_1 left promiscuous mode [ 280.257024][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.283271][ T6138] device bridge_slave_0 left promiscuous mode [ 280.299115][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.366284][ T6138] device veth1_macvtap left promiscuous mode [ 280.386447][ T7417] loop3: detected capacity change from 0 to 2048 [ 280.393629][ T6138] device veth0_macvtap left promiscuous mode [ 280.407725][ T6138] device veth1_vlan left promiscuous mode [ 280.445854][ T6138] device veth0_vlan left promiscuous mode [ 280.453826][ T7417] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.128035][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 281.203216][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 281.265658][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.308907][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.412804][ T6138] bond0 (unregistering): Released all slaves [ 281.547374][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.816'. [ 281.570155][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'. [ 281.692153][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 282.054634][ T7290] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.185464][ T7290] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 282.218210][ T7290] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.272538][ T7290] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.334283][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 282.720318][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.727385][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.805626][ T7425] device bridge_slave_0 entered promiscuous mode [ 282.819173][ T1065] Bluetooth: hci5: command 0x0409 tx timeout [ 282.857940][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.954631][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.033905][ T7425] device bridge_slave_1 entered promiscuous mode [ 283.143627][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.188858][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.202614][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.229058][ T3549] Bluetooth: hci4: command 0x0406 tx timeout [ 283.235881][ T3549] Bluetooth: hci2: command 0x0406 tx timeout [ 283.264566][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.284748][ T7290] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.301122][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.342965][ T7473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.828'. [ 283.372447][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.828'. [ 283.458561][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.473770][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.501502][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.508649][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.123224][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.167404][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.218069][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.225141][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.265975][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.286686][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.378612][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.389425][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.428763][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.484109][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.528629][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.562336][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.634621][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.757106][ T7290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.825573][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.867402][ T7425] team0: Port device team_slave_0 added [ 284.884558][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.897995][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.917213][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.942078][ T7425] team0: Port device team_slave_1 added [ 284.952599][ T4003] Bluetooth: hci5: command 0x041b tx timeout [ 285.020224][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.121100][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.336358][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.415101][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.454842][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.567989][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.837733][ T7290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.919376][ T7425] device hsr_slave_0 entered promiscuous mode [ 285.990396][ T7425] device hsr_slave_1 entered promiscuous mode [ 286.086777][ T7425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.098971][ T7425] Cannot create hsr debugfs directory [ 286.120373][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.140912][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.276474][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.295674][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.328081][ T7290] device veth0_vlan entered promiscuous mode [ 286.416797][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.456014][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.508409][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.529627][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.571008][ T7290] device veth1_vlan entered promiscuous mode [ 286.654464][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.682766][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.818278][ T7425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.913843][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 286.973935][ T7290] device veth0_macvtap entered promiscuous mode [ 286.986599][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.005481][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.041759][ T7425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.069060][ T3551] Bluetooth: hci5: command 0x040f tx timeout [ 287.120197][ T7290] device veth1_macvtap entered promiscuous mode [ 287.139260][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.149744][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.218834][ T7425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.355448][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.396261][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.446318][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.487339][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.517820][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.537293][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.561857][ T7500] loop2: detected capacity change from 0 to 32768 [ 287.568362][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.598023][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.630979][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.649177][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.658278][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.698708][ T7500] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.831 (7500) [ 287.722745][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.766194][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.831004][ T7500] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 287.833469][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.892473][ T7500] BTRFS info (device loop2): force zlib compression, level 3 [ 287.927761][ T7500] BTRFS info (device loop2): force clearing of disk cache [ 287.940072][ T7500] BTRFS info (device loop2): setting nodatasum [ 287.956031][ T7500] BTRFS info (device loop2): allowing degraded mounts [ 287.971555][ T7500] BTRFS info (device loop2): enabling disk space caching [ 287.989177][ T7500] BTRFS info (device loop2): disk space caching is enabled [ 287.996385][ T7500] BTRFS info (device loop2): has skinny extents [ 288.002963][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.033360][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.058971][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.079145][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.105673][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.240217][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.332967][ T7425] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.551710][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.571054][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.612362][ T7290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.743247][ T7290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.792798][ T7290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.816498][ T7290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.928757][ T7500] BTRFS error (device loop2): open_ctree failed [ 289.128169][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.140418][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.149907][ T3729] Bluetooth: hci5: command 0x0419 tx timeout [ 289.171186][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.237325][ T7425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.277476][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.291874][ T7425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.298880][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.333596][ T7425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.376283][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.409131][ T7425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.536390][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 289.547315][ T7567] loop2: detected capacity change from 0 to 2048 [ 289.553883][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'. [ 289.626338][ T7569] netlink: 'syz.1.789': attribute type 2 has an invalid length. [ 289.676528][ T7567] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro,. Quota mode: none. [ 289.685929][ T7573] loop4: detected capacity change from 0 to 2048 [ 289.758024][ T7567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 289.829095][ T7567] EXT4-fs (loop2): Remounting filesystem read-only [ 289.849209][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.878781][ T7573] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro,. Quota mode: none. [ 290.108206][ T7573] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.189257][ T7573] EXT4-fs (loop4): Remounting filesystem read-only [ 290.226648][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.240633][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.259226][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.326832][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.339635][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.357115][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.364229][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.389531][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.413348][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.458334][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.465439][ T3729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.496309][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.553808][ T7586] netlink: 'syz.2.841': attribute type 2 has an invalid length. [ 290.556887][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.582961][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.631106][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.650902][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.679852][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.688640][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.729410][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.750803][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.792972][ T7425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.681490][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.711442][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.722422][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.739525][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.776622][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.848'. [ 291.789121][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'. [ 291.842787][ T6138] device hsr_slave_0 left promiscuous mode [ 291.855669][ T6138] device hsr_slave_1 left promiscuous mode [ 291.885244][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.909031][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.931030][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.955666][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.008493][ T6138] device bridge_slave_1 left promiscuous mode [ 292.038898][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.050353][ T7590] loop4: detected capacity change from 0 to 32768 [ 292.086131][ T6138] device bridge_slave_0 left promiscuous mode [ 292.104228][ T7590] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.844 (7590) [ 292.129309][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.153382][ T6138] device veth1_macvtap left promiscuous mode [ 292.173724][ T7590] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 292.174698][ T6138] device veth0_macvtap left promiscuous mode [ 292.206413][ T7590] BTRFS info (device loop4): force zlib compression, level 3 [ 292.219130][ T7590] BTRFS info (device loop4): force clearing of disk cache [ 292.237001][ T6138] device veth1_vlan left promiscuous mode [ 292.249247][ T6138] device veth0_vlan left promiscuous mode [ 292.257134][ T7590] BTRFS info (device loop4): setting nodatasum [ 292.290046][ T7590] BTRFS info (device loop4): allowing degraded mounts [ 292.325905][ T7590] BTRFS info (device loop4): enabling disk space caching [ 292.368447][ T7590] BTRFS info (device loop4): disk space caching is enabled [ 292.451625][ T7590] BTRFS info (device loop4): has skinny extents [ 292.821259][ T7590] BTRFS info (device loop4): clearing free space tree [ 292.828257][ T7590] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 292.838985][ T7590] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.900366][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 292.925688][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 292.995914][ T7590] BTRFS info (device loop4): balance: start -d -m -s [ 293.003959][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.014529][ T7590] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 293.087922][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.105388][ T7590] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 293.256905][ T7590] BTRFS info (device loop4): balance: canceled [ 293.527035][ T6138] bond0 (unregistering): Released all slaves [ 293.665263][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 293.842062][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.884936][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.902711][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.981971][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.016651][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.045152][ T7425] device veth0_vlan entered promiscuous mode [ 294.073568][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.135140][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.162951][ T7425] device veth1_vlan entered promiscuous mode [ 294.191866][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.223110][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.289595][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.345170][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 294.366554][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.398069][ T3951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.428229][ T7425] device veth0_macvtap entered promiscuous mode [ 294.465801][ T7425] device veth1_macvtap entered promiscuous mode [ 294.564006][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.627331][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.678041][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.767589][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.797715][ T7656] loop1: detected capacity change from 0 to 512 [ 294.798772][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.658994][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.674204][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.699088][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.739631][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.761724][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.777722][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.800835][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.830279][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.850230][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.858'. [ 295.887056][ T7656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.898421][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 295.943040][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.991202][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.045554][ T7656] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 296.056828][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.077996][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.108136][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.235554][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.308902][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.323043][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.359327][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.392398][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.406551][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.451655][ T7425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.500698][ T7425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.538993][ T7425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.547705][ T7425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.750588][ T5800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.758615][ T5800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.822392][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.843397][ T5834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.873236][ T5834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.932980][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 297.063361][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 300.284698][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.869'. [ 300.309209][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 302.998870][ T7731] loop3: detected capacity change from 0 to 512 [ 304.170214][ T7747] loop2: detected capacity change from 0 to 512 [ 304.311683][ T7747] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.356465][ T7731] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.409149][ T7747] ext4 filesystem being mounted at /87/bus supports timestamps until 2038 (0x7fffffff) [ 304.434548][ T7731] ext4 filesystem being mounted at /3/bus supports timestamps until 2038 (0x7fffffff) [ 306.190932][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'. [ 306.247502][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 411.408880][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 411.415901][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6138/1:b..l [ 411.424306][ C1] (detected by 1, t=10502 jiffies, g=32405, q=265) [ 411.430889][ C1] task:kworker/u4:13 state:R running task stack:21016 pid: 6138 ppid: 2 flags:0x00004000 [ 411.442633][ C1] Workqueue: netns cleanup_net [ 411.447420][ C1] Call Trace: [ 411.450690][ C1] [ 411.453616][ C1] __schedule+0x12c4/0x45b0 [ 411.458140][ C1] ? mark_lock+0x98/0x340 [ 411.462467][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 411.468442][ C1] ? release_firmware_map_entry+0x190/0x190 [ 411.474326][ C1] ? release_firmware_map_entry+0x190/0x190 [ 411.480218][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 411.485497][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 411.490602][ C1] ? __cond_resched+0x20/0x20 [ 411.495267][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 411.501247][ C1] irqentry_exit+0x53/0x80 [ 411.505653][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 411.511634][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 411.516908][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0c 7e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 411.536507][ C1] RSP: 0018:ffffc90002dc78c0 EFLAGS: 00000206 [ 411.542567][ C1] RAX: 0000000000000001 RBX: 1ffff920005b8f24 RCX: 1ffff920005b8ec4 [ 411.550526][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b3ca0 RDI: ffffffff8ad8f740 [ 411.558486][ C1] RBP: ffffc90002dc7a20 R08: dffffc0000000000 R09: fffffbfff1f7f219 [ 411.566446][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005b8f20 [ 411.574407][ C1] R13: dffffc0000000000 R14: ffffc90002dc7920 R15: 0000000000000246 [ 411.582397][ C1] ? read_lock_is_recursive+0x10/0x10 [ 411.587770][ C1] ? __might_sleep+0xc0/0xc0 [ 411.592365][ C1] rcu_lock_acquire+0x2a/0x30 [ 411.597035][ C1] ? rcu_lock_acquire+0x5/0x30 [ 411.601795][ C1] inet_twsk_purge+0x129/0x9d0 [ 411.606557][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 411.611922][ C1] ? __might_sleep+0xc0/0xc0 [ 411.616499][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 411.621689][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 411.627059][ C1] ? tcp_sk_exit+0xa0/0xa0 [ 411.631468][ C1] tcp_sk_exit_batch+0x28/0x90 [ 411.636221][ C1] ? tcp_sk_exit+0xa0/0xa0 [ 411.640626][ C1] cleanup_net+0x763/0xb60 [ 411.645041][ C1] ? ops_free_list+0x340/0x340 [ 411.649802][ C1] process_one_work+0x8a1/0x10c0 [ 411.654747][ C1] ? worker_detach_from_pool+0x260/0x260 [ 411.660372][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 411.665907][ C1] ? kthread_data+0x4e/0xc0 [ 411.670404][ C1] ? wq_worker_running+0x97/0x170 [ 411.675425][ C1] worker_thread+0xaca/0x1280 [ 411.680093][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 411.685997][ C1] kthread+0x3f6/0x4f0 [ 411.690059][ C1] ? rcu_lock_release+0x20/0x20 [ 411.694897][ C1] ? kthread_blkcg+0xd0/0xd0 [ 411.699476][ C1] ret_from_fork+0x1f/0x30 [ 411.703897][ C1] [ 411.706904][ C1] rcu: rcu_preempt kthread starved for 10517 jiffies! g32405 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 411.718085][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 411.728038][ C1] rcu: RCU grace-period kthread stack dump: [ 411.733909][ C1] task:rcu_preempt state:R running task stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 411.744674][ C1] Call Trace: [ 411.747941][ C1] [ 411.750863][ C1] __schedule+0x12c4/0x45b0 [ 411.755358][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 411.761246][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 411.767142][ C1] ? __mod_timer+0xa8e/0xeb0 [ 411.771731][ C1] ? release_firmware_map_entry+0x190/0x190 [ 411.777616][ C1] ? mod_timer_pending+0x20/0x20 [ 411.782544][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 411.787915][ C1] schedule+0x11b/0x1f0 [ 411.792066][ C1] schedule_timeout+0x1b9/0x300 [ 411.796907][ C1] ? console_conditional_schedule+0x40/0x40 [ 411.802793][ C1] ? update_process_times+0x200/0x200 [ 411.808171][ C1] ? prepare_to_swait_event+0x321/0x340 [ 411.813712][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 411.818557][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 411.823747][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 411.829890][ C1] ? rcu_gp_init+0xdae/0x1140 [ 411.834562][ C1] ? rcu_gp_init+0x1140/0x1140 [ 411.839324][ C1] ? finish_swait+0xc5/0x1d0 [ 411.843909][ C1] rcu_gp_kthread+0xa4/0x360 [ 411.848488][ C1] ? _raw_spin_unlock+0x40/0x40 [ 411.853334][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 411.858435][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 411.864325][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 411.869349][ C1] kthread+0x3f6/0x4f0 [ 411.873405][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 411.878505][ C1] ? kthread_blkcg+0xd0/0xd0 [ 411.883085][ C1] ret_from_fork+0x1f/0x30 [ 411.887507][ C1] [ 411.890513][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 411.896830][ C1] Sending NMI from CPU 1 to CPUs 0: [ 411.902021][ C0] NMI backtrace for cpu 0 [ 411.902035][ C0] CPU: 0 PID: 7771 Comm: syz.4.887 Not tainted 5.15.161-syzkaller #0 [ 411.902055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 411.902063][ C0] RIP: 0010:rcu_is_watching+0x56/0xa0 [ 411.902081][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 90 16 5f 00 48 c7 c3 08 b3 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 1a 8b 03 65 ff 0d 05 5d 97 7e 74 08 24 01 5b 41 5e 41 5f [ 411.902092][ C0] RSP: 0018:ffffc90000007ca0 EFLAGS: 00000802 [ 411.902105][ C0] RAX: 0000000000000000 RBX: ffff8880b9a3b308 RCX: ffffffff8162a9bc [ 411.902116][ C0] RDX: 0000000000000000 RSI: ffffffff8ad8f720 RDI: ffffffff8ad8f6e0 [ 411.902126][ C0] RBP: ffffc90000007e08 R08: dffffc0000000000 R09: fffffbfff1bc8d86 [ 411.902136][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000000fa0 [ 411.902145][ C0] R13: dffffc0000000000 R14: ffffffff8c35f800 R15: dffffc0000000000 [ 411.902155][ C0] FS: 00007f1987ce46c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 411.902168][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.902178][ C0] CR2: 0000001b30b19ff8 CR3: 0000000069869000 CR4: 00000000003506f0 [ 411.902191][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.902199][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.902208][ C0] Call Trace: [ 411.902213][ C0] [ 411.902218][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 411.902233][ C0] ? read_lock_is_recursive+0x10/0x10 [ 411.902249][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 411.902263][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 411.902284][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 411.902298][ C0] ? nmi_handle+0xf7/0x370 [ 411.902312][ C0] ? rcu_is_watching+0x56/0xa0 [ 411.902325][ C0] ? default_do_nmi+0x62/0x150 [ 411.902340][ C0] ? exc_nmi+0xa8/0x100 [ 411.902353][ C0] ? end_repeat_nmi+0x16/0x31 [ 411.902370][ C0] ? lock_acquire+0xcc/0x4f0 [ 411.902383][ C0] ? rcu_is_watching+0x56/0xa0 [ 411.902396][ C0] ? rcu_is_watching+0x56/0xa0 [ 411.902410][ C0] ? rcu_is_watching+0x56/0xa0 [ 411.902423][ C0] [ 411.902428][ C0] [ 411.902432][ C0] lock_acquire+0xdd/0x4f0 [ 411.902447][ C0] ? read_lock_is_recursive+0x10/0x10 [ 411.902461][ C0] ? hrtimer_interrupt+0x53c/0x980 [ 411.902474][ C0] ? ktime_get+0x7f/0x270 [ 411.902487][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 411.902501][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 411.902515][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 411.902532][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 411.902547][ C0] ? hrtimer_interrupt+0xf7/0x980 [ 411.902560][ C0] ? _raw_spin_lock+0x40/0x40 [ 411.902579][ C0] hrtimer_interrupt+0xf7/0x980 [ 411.902596][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 411.902610][ C0] ? sched_clock_cpu+0x15/0x3b0 [ 411.902629][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 411.902646][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 411.902661][ C0] [ 411.902665][ C0] [ 411.902669][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 411.902684][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 411.902699][ C0] Code: 21 80 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 be 11 3b f7 48 89 df e8 96 65 3c f7 e8 b1 1d 5f f7 fb bf 01 00 00 00 d6 ab 2f f7 65 8b 05 57 b2 da 75 85 c0 74 02 5b c3 e8 24 cf d8 [ 411.902710][ C0] RSP: 0018:ffffc90002f97bc0 EFLAGS: 00000282 [ 411.902721][ C0] RAX: 6255e5c30d15da00 RBX: ffff88807dcdb780 RCX: ffffffff913f0f03 [ 411.902732][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001 [ 411.902741][ C0] RBP: 0000000000000000 R08: ffffffff8186db40 R09: ffffed100fb9b6f1 [ 411.902751][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 411.902760][ C0] R13: dffffc0000000000 R14: ffff88807dcdbc18 R15: ffff88807dcdb780 [ 411.902773][ C0] ? trace_hardirqs_on+0x30/0x80 [ 411.902792][ C0] get_signal+0x13ee/0x14e0 [ 411.902813][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 411.902830][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 411.902847][ C0] ? __might_fault+0xb4/0x110 [ 411.902864][ C0] ? _copy_from_user+0x10f/0x170 [ 411.902878][ C0] ? restore_altstack+0x274/0x400 [ 411.902894][ C0] ? get_sigframe_size+0x10/0x10 [ 411.902909][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 411.902928][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 411.902945][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 411.902960][ C0] exit_to_user_mode_loop+0x97/0x130 [ 411.902974][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 411.902988][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 411.903004][ C0] do_syscall_64+0x47/0xb0 [ 411.903017][ C0] ? clear_bhb_loop+0x15/0x70 [ 411.903031][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.903044][ C0] RIP: 0033:0x7f1989263bd7 [ 411.903062][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 411.903073][ C0] RSP: 002b:00007f1987ce4048 EFLAGS: 00000246 [ 411.903084][ C0] RAX: 0000000000000049 RBX: 00007f19893f1f60 RCX: 00007f1989263bd9 [ 411.903093][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000007 [ 411.903101][ C0] RBP: 00007f19892d2a98 R08: 0000000000000000 R09: 0000000000000000 [ 411.903110][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.903119][ C0] R13: 000000000000000b R14: 00007f19893f1f60 R15: 00007ffd9ff25278 [ 411.903135][ C0]