last executing test programs: 2m44.8852343s ago: executing program 3 (id=4): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a00)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfff, 0x85, 0x10000000, 0x101, 0x80000001}, 0x2, 0xcf}, [{0x100, 0x401, 0x3, 0x3ff, 0x0, 0x9}, {0x0, 0x5, 0x7, 0x3, 0xffff3bf3, 0x6}, {0xfffffff9, 0x0, 0xc, 0x95, 0x1, 0x53}, {0x7fff, 0x4, 0x2, 0x43d6, 0x5, 0x4}, {0xfffffffb, 0xaf4, 0xff, 0x0, 0x4, 0xfffffff9}, {0x7, 0x8, 0x1, 0x7, 0xfffeffff, 0xcb66}, {0x5, 0x7, 0x6, 0x2, 0xb, 0x17e}, {0x6, 0xe, 0x0, 0x5, 0x1, 0x2}, {0x2, 0x4, 0x6, 0xff, 0xe7}, {0x8, 0x3, 0x630, 0x8000, 0x4, 0xa6a5}, {0x5, 0x5, 0x1ff, 0x10000, 0xfffffffd, 0x94000000}, {0x7, 0x3, 0x2, 0xf28, 0x7, 0x8}, {0x7, 0xe6, 0x2, 0x0, 0x8001, 0x4}, {0x6, 0x2, 0xf, 0x6, 0x0, 0xe51f}, {0xffff8000, 0x10, 0x5, 0x0, 0x6, 0x3}, {0x9, 0xc, 0x10, 0x0, 0x6, 0x1}, {0x0, 0x140000, 0x4, 0x200, 0x1, 0xfffffff6}, {0x9, 0x10001, 0x0, 0x4, 0x2}, {0x80000000, 0x2, 0x3, 0x1, 0x772, 0x5}, {0x0, 0x9, 0x1, 0x80, 0x0, 0x8}, {0x5, 0x72b, 0x4, 0x3e1, 0x1000, 0x68f087b1}, {0x7, 0xc, 0xa0, 0x3, 0x4, 0x2}, {0x8, 0xb2, 0xe, 0xd91, 0x7, 0x8}, {0x24, 0xfffffffc, 0x9, 0x100, 0x1000, 0x8}, {0x40, 0x3, 0x7e, 0xb, 0x401, 0x8001}, {0x7, 0x5, 0x8, 0xadb, 0xf, 0x3}, {0x0, 0xfffffffe, 0x7, 0x3, 0xfa5f, 0x7}, {0x5, 0xf186, 0x4, 0x2, 0x7, 0x2}, {0x25ea92ec, 0x2, 0x5, 0x5, 0x10, 0x6}, {0x3, 0x2, 0x4, 0xde08, 0x4, 0x4}, {0x8, 0x6, 0x4, 0x3, 0x96c4}, {0x10, 0x7f, 0x6fe4, 0x1, 0x8, 0xffff}, {0x9, 0x10001, 0x800, 0x0, 0x10001, 0x3}, {0x2, 0x80, 0x4, 0x8, 0x4, 0x10001}, {0x8, 0x8000, 0xffffff7f, 0x7fffffff, 0x400, 0xb88}, {0xff2, 0x2, 0x1, 0x80000000, 0x48f4, 0x5}, {0x9, 0x8, 0x5, 0x1, 0x8000, 0x6}, {0x200, 0x8001, 0x0, 0xfffeffff, 0x7fff, 0xf}, {0x11, 0xfffffff4, 0xa48, 0x20, 0xd, 0x4}, {0x0, 0x0, 0x4, 0x7, 0xa32, 0x7fffffff}, {0x5, 0x0, 0x5, 0x81, 0x36b31344, 0x7}, {0x34, 0xc196, 0x7, 0x9, 0x6, 0xfffffffe}, {0x2, 0x0, 0xfffffe01, 0xffff0000, 0xf, 0xadc1}, {0x7, 0x1, 0x5, 0xde59, 0x6, 0xaa7c}, {0x80000001, 0x9, 0x7, 0x3, 0x9, 0x9}, {0x200, 0x4, 0x7fff, 0xff800000, 0x6, 0x800}, {0x9, 0x8, 0xfc4, 0x3, 0x7fffffff, 0x32}, {0x2, 0x6, 0x4ce0, 0x10, 0x5, 0x5}, {0x7, 0x6, 0x1, 0x4, 0x6}, {0xffffffff, 0x3, 0xfffff800, 0x10, 0x7fffffff, 0xfffffffb}, {0x7, 0x6, 0xfffffffa, 0x1, 0x80000001, 0x8}, {0xfffffff9, 0x8, 0x9, 0x8, 0x0, 0x2}, {0x5, 0x1ff, 0x7, 0xe, 0x8, 0x6}, {0x2, 0x2, 0xea, 0x1, 0x4, 0x8}, {0x5, 0x99, 0x1, 0x3, 0xc, 0xec}, {0x2, 0x7f, 0x4, 0x6, 0xec36, 0x9}, {0x8, 0x3, 0x24000000, 0x5, 0x4, 0xff}, {0x7ff, 0xcf1, 0x7f, 0xd3, 0x3ff}, {0xfffffffb, 0x8, 0x9, 0x2, 0xc, 0x5}, {0x9, 0x8, 0x8001, 0x9, 0x6, 0x6}, {0x1ff, 0x7, 0xac, 0x254, 0x7, 0x80000000}, {0x0, 0x7, 0x0, 0x1, 0x6, 0x5}, {0x7, 0x1, 0x400, 0x7}, {0x1b7, 0x4, 0x6, 0xe6, 0x401, 0x6}, {0x5, 0xfffffff7, 0x7, 0xca1, 0x5, 0xfffffffc}, {0x7, 0x5, 0x4, 0x9, 0x8, 0x10}, {0xb, 0x3, 0x5, 0x7, 0x0, 0x2}, {0x7, 0x10, 0x4, 0x4, 0x2, 0x3}, {0xf, 0x9, 0x3, 0xc, 0xa, 0x8}, {0xfff, 0x26, 0x1ff, 0x8, 0x9, 0x2}, {0x7, 0x0, 0xa013c2a, 0xb, 0x3, 0x80}, {0x2, 0x8, 0x81, 0xa4, 0xc8, 0x80e7}, {0x2, 0xfffffb5e, 0x80, 0x8001, 0xc}, {0xffffffff, 0x3, 0x9, 0x0, 0x3, 0x7be}, {0x8001, 0xfffffff9, 0x2, 0xfffffff5, 0x1, 0xffff}, {0x88, 0xb, 0x7, 0x6, 0x1, 0xbdda}, {0x4, 0x7, 0x4, 0x9, 0x8, 0x86}, {0x7f, 0xffffffad, 0x7, 0x7, 0x601, 0x2}, {0x69c6, 0x8, 0x2, 0x1, 0xd, 0x1ff}, {0xff, 0x2, 0x9, 0x81, 0x1ff, 0x1ff}, {0x8000, 0x4, 0xfa95, 0x4, 0x3}, {0x6, 0xe19, 0x47d1a8c0, 0x638e, 0xffc00000, 0x7f}, {0x800, 0x92ad, 0x6, 0x0, 0x1, 0x8}, {0x7, 0xfffeffff, 0x0, 0x1, 0x6553}, {0x606, 0x100, 0x7, 0x7fffffff, 0xc5d, 0x9}, {0x2, 0xff, 0x2, 0xfffffffd, 0x3, 0x7}, {0x5, 0x642, 0xf, 0x81, 0x2, 0x7fff}, {0x10001, 0x79, 0x0, 0x7, 0xecf, 0x10}, {0x1, 0x8, 0x7, 0x30b96ad4, 0x2, 0x55f}, {0x0, 0x3, 0x7, 0x3, 0x6, 0xfffffffc}, {0xb, 0x1, 0x0, 0x5, 0x2, 0x5}, {0x3a6, 0x4, 0x3, 0x1, 0x4, 0x40}, {0x6, 0x4, 0x401, 0x0, 0x4, 0x5}, {0x7, 0x9ff, 0x9, 0x85, 0xec, 0x5}, {0x2, 0x6, 0x0, 0x1000, 0x1, 0x1}, {0x7, 0x7, 0x101, 0x800, 0x8, 0x5150792f}, {0x38, 0x1, 0x29, 0x81, 0x364c, 0x7}, {0x0, 0x69, 0x8001, 0x2, 0x2800, 0x10}, {0x1, 0x4, 0x7f, 0x9}, {0x9314, 0x6dc, 0x80000000, 0x10000, 0x1, 0x6}, {0x3, 0x0, 0x1, 0x0, 0xe32, 0x1}, {0x275, 0x7ff, 0x714, 0xff, 0x800, 0x3f}, {0x6, 0x0, 0x0, 0x63, 0xd7, 0x7}, {0xffffff81, 0x2, 0x1ff, 0xd, 0x8001, 0x1}, {0x9, 0x6, 0x8, 0x6, 0x8, 0x200}, {0x2, 0x3, 0x3, 0x7, 0xfff, 0x8ec}, {0x8f, 0x400, 0x2, 0x1410, 0x80000001, 0x101}, {0x400, 0x5, 0x3, 0x59c, 0x3, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x101, 0x81}, {0x4, 0x5, 0x4, 0xff000000, 0x2, 0x9}, {0x0, 0x10000, 0x8, 0x400, 0x3}, {0xe, 0x7, 0x968, 0x9, 0xfffffff8, 0x8}, {0xfff, 0x100, 0xffffffff, 0x0, 0x3, 0x7fffffff}, {0x38000, 0xfffffffc, 0xa55, 0x2, 0x1, 0x3}, {0x8, 0x1, 0x4, 0xb, 0x7fff, 0x3}, {0x7, 0x6, 0x8, 0xb, 0x2, 0x5}, {0x7, 0x3, 0xfffffff4, 0xc8c2, 0x9, 0x9}, {0xfffffffe, 0x0, 0x400, 0x9, 0x8, 0x3}, {0x65da, 0x7, 0xc, 0x10, 0xaf5, 0x2}, {0x2, 0x101, 0x40000, 0x0, 0x81, 0x5ee}, {0x0, 0x80, 0x7d, 0x6, 0x5, 0x7}, {0x1, 0x6, 0x6, 0x1, 0x0, 0x7}, {0x0, 0xffffff80, 0x5, 0x10000}, {0x1000, 0x57a, 0x1, 0x150, 0x48, 0xfffffff7}, {0xff, 0x2, 0xfffff062, 0x4, 0x6, 0x839}, {0x3, 0x4, 0x4, 0x800, 0x3, 0x5}, {0x6, 0x20000, 0x1, 0x4, 0x7d37e82b, 0x1}, {0x5, 0x2, 0x1, 0x5, 0x7f, 0xf}], [{0x3, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x2701bacba0e67511, 0xb2e20321f287c22d}, {0x2, 0x89d99ddbf36fb21a}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2m44.51398825s ago: executing program 3 (id=17): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m44.344434668s ago: executing program 5 (id=19): creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x107502, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) 2m44.200189085s ago: executing program 5 (id=20): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r1}, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4ad) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) clock_gettime(0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) personality(0x500006) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) brk(0x20ffc004) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) kcmp(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 2m44.127851479s ago: executing program 3 (id=22): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0) 2m43.558757246s ago: executing program 5 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r1, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) 2m42.245893373s ago: executing program 3 (id=25): ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2960a00a538ae4646ac1e0301ac1414aa177c9078ac"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r6}) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2m42.242736077s ago: executing program 5 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) 2m41.974640112s ago: executing program 5 (id=29): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback, 0x14, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m40.779326031s ago: executing program 5 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x15, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) 2m26.460427787s ago: executing program 32 (id=25): ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2960a00a538ae4646ac1e0301ac1414aa177c9078ac"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r6}) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2m25.300024081s ago: executing program 33 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x15, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) 8.385160798s ago: executing program 7 (id=644): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 7.64309036s ago: executing program 7 (id=649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) 7.410688862s ago: executing program 2 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x80000000, 0x8000000002}) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f000000a6c0), 0x0, 0x20010100, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000002c0)) 6.996680655s ago: executing program 7 (id=655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x850d97, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r2, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{0x0}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000dc0)={[{@jqfmt_vfsv0}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@nodelalloc}, {@nodioread_nolock}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5.281309626s ago: executing program 6 (id=666): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xffffffffffffff7b}) 5.260095897s ago: executing program 2 (id=667): socket$nl_route(0x10, 0x3, 0x0) openat$misdntimer(0xffffff9c, 0x0, 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x7, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x32}, @in6=@mcast1, {0x0, 0xb0a, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) 4.972550683s ago: executing program 6 (id=669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.833153275s ago: executing program 0 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x15) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r5}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000001440)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.746768967s ago: executing program 6 (id=672): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 4.393893478s ago: executing program 4 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r1, 0x786946cc39350ec1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x17}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4050) 3.650824852s ago: executing program 2 (id=676): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 3.605192565s ago: executing program 4 (id=677): r0 = syz_open_dev$sndctrl(0x0, 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmmsg$unix(r3, &(0x7f0000010b40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000680)="8d9e91309a3839b9ba7832d569cd183f5a4f0bb9510b20097d3eda040c484bbbae43488c82a3f5bd2baa150f9c92b515fdc4fe80f28f60f6a41311b6ef180f9a53fd9562d8c62475eafa326bb63aad6ad3e49101c7c461df568ba36abb294d1af612b215f10f22da4e07d85a6484f974f0c89a7bf50aaafe7f6b6b227096e17c314789a63291f948159c10478ddacd28112e6bdca07d08b6b6c1464b359237890bac52e5b62c7e7a379082555dc7785be7205580bd1f9e62c9c9fe3777", 0xbd}, {&(0x7f0000000ac0)}, {&(0x7f0000002000)}, {0x0}], 0x4, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x800}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001ac0)="381f7b0205d3f32b454f7bd76c69679f5391613a769bf48e3a1a71d1a4aaa000ccd896c8669d0d81b85a65d8009d134a0c6373e83b552d64888b9fc07bfad4dc661b07d5681b6b9f683b23f2356e8f5e865025c392ee7974b87b3f3fc2f33506e07d2a4e6444ec0dbaaceb9e506d44ac167d6060f2702ad35ddb2a1f7ae935afa2b9640e4f967bfdaba2733d88cd6be2feec8da736", 0x95}, {&(0x7f00000009c0)="2da918b56f2d83e362e06a96a2bb7776e9f0e89dec4eb0c79025e60c67be8bb1b1", 0x21}, {&(0x7f0000001b80)="80c3aff8dfe5a9319e31252a38acaae8586c8009383102165e76d1fd4234a430e4401699ccb0e5390a53b89c1d8b1fc6bdb12ed9e824ae7f85560b8ff9687b3029fa0e08760fcde659359e4f291f8f7327b6ead2d7fe14d46a06701ed3549ee2bac01babfbb68b98deffd99c27b6eb529105e300fe1fd653bf9983a07264772a595c40e173bda7549685206b661ac096", 0x90}, {&(0x7f0000001c40)="980c37247a342bded8c7600e6c266058142541266b513c154087e176765857d8b148f57888cf0bc4", 0x28}, {&(0x7f0000001c80)="9f4ea0ebd8a6de390d516d905b0eae9edca31b67d3200e8f787ab25b83834c196edd20996e6776fbe38d26bcbd0dfe5cf88eb68043", 0x35}, {&(0x7f0000001d00)="a5d0e7734f9f64014a2cda05dd8e83d9444a00d3b3c38298d25c236a047059ae38", 0x21}, {&(0x7f0000001d40)="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", 0xfa}], 0x7, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40, 0x4004004}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000007300), 0x0, &(0x7f0000007400)=[@rights={{0x20, 0x1, 0x1, [r1, r4, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r4, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x98, 0x48040}}, {{&(0x7f00000074c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000008880)=[{&(0x7f0000007540)="2d3344741e819943db3ec8e9a8850a0af4029a104fe060efa58aecffe538b36295b63a8152a9a7e3e67b91b0b2223f400bd07823670122b76daa7d00e41f410edcea8c1e33fcddc686bed1ed2ef9ef26d6d426a964649ddb37afaeede19971adfad7883936038d4f402fc6d593fd9297107934a1a35e41fb6e4e80e58790883eb8bce71df2eefcf0f568e5", 0x8b}, {&(0x7f00000076c0)="3f57a144c9b5d92a2116fbebdf93410859e56f43f82f0a5a543b29ac11efe184f628b34dff7f91d5c06016100a3d790d375aa68ca08fb1e82d3fdde38cf71a18543b0df18f65fd012f9af57c83148b2c8664f35590bbfe4bf2a37343012860e822bc304712821df3200368b0792fe1a86ea21659b98642f8781feea19abc", 0x7e}, {0x0}, {&(0x7f0000008840)="d706e9b5502d57a7a5f044fa5b22ebb122ee6d351c916c6b758114aa071befcfdf00ff10f51e7d7055fe03b7ec78d17d720744945336", 0x36}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x60, 0x40011}}, {{&(0x7f000000ec00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000ff80)=[{&(0x7f000000ed40)}, {0x0}, {&(0x7f0000001e80)="c72f2f336e91a8d056532d83f8912f07e9b60e77355ade5c2f0241a8118922ed8aa54a1b8cf830bf56ac15c5d198a0395efd25b51f62da55ae4cedadbd33a8ce2777b0e55ff66392b08d322203db87287170d089dc86c482befe8facd5f3dbcb2fec9e00a3f962ba186de4c0a67cc1c42186134a489bd4a9ad81700feb1efc3384b9d6c3c88875fd8295443e2f94b2535d84d6b471452c0f85d95fcd2dc76ca6f9ec84b0ee71e83350", 0xa9}], 0x3, &(0x7f0000010200)=ANY=[], 0x30, 0x40}}, {{&(0x7f0000010240)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000010500)=[{&(0x7f00000102c0)="266dd1d4534b30c91f69619cafa3cc2f5d0ea7cd45840527caa9af613e0d32f2e4c07ff8c945bed42b5b44c3c24abeaff2fb82445d635c7356394fac7b10", 0x3e}, {&(0x7f0000010340)="fdd29c834d3836a02efada8c6a48c696f6db58a10e889de33e7c196838c896743755d0fd256e6e43697cfad68bdfcdd5b92504beeed693f95b497b3a26e1c56ff9fa817677b209bbac3dcf6f80c5ac5ae01ccd565b8749f56af9bf200b74ddedca36a3840f1177776ae812eeb04e7c0d95142398d0a40e96cf963e99bc7a208f3d8e5291adaf799071e0b3c9beb0ba202532d822e43b6496712189029a5c257a4dc73208b6163c91e3b2e387a6ceb04d", 0xb0}, {&(0x7f0000010440)}], 0x3, &(0x7f00000107c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x20004040}}, {{&(0x7f0000010800)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000010940)=[{0x0}], 0x1, &(0x7f0000000780), 0x0, 0x20040080}}], 0x7, 0x20004041) 3.569417117s ago: executing program 7 (id=678): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) readv(r0, 0x0, 0x0) close_range(r0, r0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r6 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000200)={0x40, 0x4, "f6bdc12abad991705f3e04209420ec1a152c5c5e74ed6f76451c9930b12c11fd", 0x4, 0x8, 0x1, 0x3, 0x82}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)=0x1) 3.524037982s ago: executing program 0 (id=679): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000480)=""/236, 0x0, 0xec, 0x1, 0x400, 0x10000, @value}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000800)=[{0x20, 0x0, 0x0, 0x0, @time={0x10b, 0x3}, {}, {0x0, 0x3}, @connect={{0x0, 0x9}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x2}}], 0x38) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff", 0x4}], 0x2) truncate(&(0x7f0000000340)='./file0\x00', 0x4) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.902400905s ago: executing program 1 (id=681): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xffffffffffffff7b}) 2.79753612s ago: executing program 6 (id=682): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0x78e1, 0x10}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffc}}) io_uring_enter(r0, 0x47fa, 0x9bbe, 0x0, 0x0, 0x0) 2.705271814s ago: executing program 1 (id=683): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x264, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x1, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) 2.446370985s ago: executing program 4 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.213615635s ago: executing program 0 (id=685): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.14798686s ago: executing program 1 (id=686): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0xffffffffbea26ac3, 0xfffffffffffffff8, 0x1, 0x9, 0x3, [0x7, 0x2, 0x3, 0x5]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xe4428, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.147458366s ago: executing program 2 (id=687): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be04", 0x2}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x6044}, 0x6) 2.065285454s ago: executing program 4 (id=688): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) 2.06494197s ago: executing program 7 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r1, 0x786946cc39350ec1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x17}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4050) 1.897884253s ago: executing program 0 (id=690): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000340)=@usbdevfs_driver={0x8, 0x81, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040)=0xfffffffd, 0x4) write(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 1.891972589s ago: executing program 7 (id=691): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x850d97, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r2, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{0x0}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000dc0)={[{@jqfmt_vfsv0}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@nodelalloc}, {@nodioread_nolock}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3U1rG0cfAPD/ynLenycOhEB7KIYcmpJGju2+pNBDeixtaKC9p8LemGApCpYcYjfQ5NBceimhUEoDpR+g9x5Dv0A/RaANhBJMe+hFZeWVo8SSrThKrFS/H6w9s7vy7Gj2P57RSCiAkTWZ/ShEvBIR3yQRhzuOFSM/OLl+3trD63PZlkSz+emfSST5vvb5Sf77YDtTjPj1q4iThc3l1ldWF8uVSrqU56ca1StT9ZXVU5eq5YV0Ib08Mzt75u3ZmffefWdgdX3j/N/ff3L3wzNfH1/77uf7R24ncTYO5cc66/EMbnRmJmMyf07G4+wTJ04PoLBhkuz2BbAjY3mcj0fWBxyOsTzqgf++LyOiCYyoRPzDiGqPA9pz+wHNg18aDz5YnwBtrn9x/bWR2NeaGx1YSx6bGWXz3YkBlJ+V8csfd25nWwzudQiAbd24GRGni8XN/V+S9387d7qPc54sQ/8HL87dbPzzZrfxT2Fj/BNdxj8Hu8TuTmwf/4X7Ayimp2z8937X8e/GotXEWJ77X2vMN55cvFRJs77t/xFxIsb3Zvmt1nPOrN1r9jrWOf7Ltqz89lgwv477xb2PP2a+3Cg/S507PbgZ8WrX8W+y0f5Jl/bPno/zfZZxLL3zWq9j29f/+Wr+FPF61/Z/tKKVbL0+OdW6H6bad8Vmf9069luv8ne7/ln7H9i6/hNJ53pt/enL+HHfP2mvYzu9//ckn7XSe/J918qNxtJ0xJ7k4837Zx49tp1vn5/V/8Txrfu/bvf//oj4vM/63zp6q+epw9D+80/V/k+fuPfRFz/0Kr+/9n+rlTqR7+mn/+v3Ap/luQMAAAAAAIBhU4iIQ5EUShvpQqFUWn9/x9E4UKjU6o2TF2vLl+ej9VnZiRgvtFe6D3e8H2I6fz9sOz/zRH42Io5ExLdj+1v50lytMr/blQcAAAAAAAAAAAAAAAAAAIAhcbDH5/8zv4/t9tUBz52v/IbRtW38D+KbnoCh5P8/jC7xD6NL/MPoEv8wusQ/jC7xD6NL/MPoEv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAwUOfPncu25trD63NZfv7qyvJi7eqp+bS+WKouz5XmaktXSgu12kIlLc3Vqtv9vUqtdmV6JpavTTXSemOqvrJ6oVpbvty4cKlaXkgvpOMvpFYAAAAAAAAAAAAAAAAAAADwcqmvrC6WK5V0SUJiR4nicFyGxIATu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj/wYAAP//Gis4ow==") msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1.650153176s ago: executing program 4 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x15) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r5}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000001440)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) 973.912564ms ago: executing program 1 (id=693): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 945.342101ms ago: executing program 2 (id=694): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 901.328667ms ago: executing program 0 (id=695): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xffffffffffffff7b}) 300.666807ms ago: executing program 6 (id=696): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000003"], 0x80}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9803", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) 294.324737ms ago: executing program 0 (id=697): timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x1000021, 0x800000000004}, &(0x7f0000bbdffc)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='dvmrp0\x00', 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[], 0x2000, 0x800) msgctl$IPC_RMID(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0x101, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009de8bd4663c767e54b154965ceff4224"], 0x67) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="0200"]) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181402, 0x0) fsync(r8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0xfffffffffffffd50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) recvfrom(r3, &(0x7f0000000100)=""/189, 0xbd, 0x21, &(0x7f0000000040)=@generic={0x2, "03c9480259f6f98d8a1329dbe1c81b1cc3146e57d2eb436071b51e6559415123228c15aba5bb8d1bde2c97aa06c73d8c22c0d139b133f14b86c5c7f8c093ac65b2e95e13f6f08bef9a15f1b90856186a329c19482e2106d9f1a8f8e7f2b0a51913890f7c5930f537ac75512437543d8e1c0d00e7240ea6991495bcc23fad"}, 0x80) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 218.340089ms ago: executing program 1 (id=698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0x1a010102}]}}}]}, 0x3c}}, 0x4000080) 188.900778ms ago: executing program 2 (id=699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) 679.326µs ago: executing program 1 (id=700): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\b~'], 0x14}}, 0x4000054) 426.146µs ago: executing program 6 (id=701): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=702): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 66.655292][ T5812] cgroup: Unknown subsys name 'net' [ 66.761701][ T5812] cgroup: Unknown subsys name 'cpuset' [ 66.769032][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.721830][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.925792][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.933301][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.940931][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.941085][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.948303][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.962797][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.970376][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.970506][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.984780][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.985501][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.991939][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.998846][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.013436][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.020797][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.028002][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.029645][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.035537][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.042105][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.049121][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.063259][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.069715][ T5139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.070484][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.085249][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.086668][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.092627][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.100540][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.106963][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.113463][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.120279][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.127148][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.134313][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.142180][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.149488][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.155300][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.169170][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.178241][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.451791][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 70.525524][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 70.648762][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.655955][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.663210][ T5823] bridge_slave_0: entered allmulticast mode [ 70.669909][ T5823] bridge_slave_0: entered promiscuous mode [ 70.686457][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.707099][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.732150][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.739254][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.746721][ T5823] bridge_slave_1: entered allmulticast mode [ 70.753598][ T5823] bridge_slave_1: entered promiscuous mode [ 70.811594][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.817920][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.831248][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.853459][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.864597][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.874033][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.881342][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.888475][ T5826] bridge_slave_0: entered allmulticast mode [ 70.895165][ T5826] bridge_slave_0: entered promiscuous mode [ 70.905379][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 70.946123][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.953266][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.960513][ T5826] bridge_slave_1: entered allmulticast mode [ 70.967020][ T5826] bridge_slave_1: entered promiscuous mode [ 71.001633][ T5823] team0: Port device team_slave_0 added [ 71.031173][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.038228][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.045441][ T5827] bridge_slave_0: entered allmulticast mode [ 71.052342][ T5827] bridge_slave_0: entered promiscuous mode [ 71.065818][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.072943][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.080156][ T5828] bridge_slave_0: entered allmulticast mode [ 71.086668][ T5828] bridge_slave_0: entered promiscuous mode [ 71.094739][ T5823] team0: Port device team_slave_1 added [ 71.104723][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.119725][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.126819][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.134265][ T5827] bridge_slave_1: entered allmulticast mode [ 71.140933][ T5827] bridge_slave_1: entered promiscuous mode [ 71.147200][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.154657][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.161786][ T5828] bridge_slave_1: entered allmulticast mode [ 71.168299][ T5828] bridge_slave_1: entered promiscuous mode [ 71.190382][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.237586][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.244797][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.271107][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.322101][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.331608][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.338633][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.364607][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.383759][ T5826] team0: Port device team_slave_0 added [ 71.397075][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.408245][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.420134][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.438869][ T5826] team0: Port device team_slave_1 added [ 71.452019][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.459121][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.466378][ T5825] bridge_slave_0: entered allmulticast mode [ 71.473193][ T5825] bridge_slave_0: entered promiscuous mode [ 71.499644][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.506717][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.514351][ T5824] bridge_slave_0: entered allmulticast mode [ 71.521100][ T5824] bridge_slave_0: entered promiscuous mode [ 71.539120][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.546175][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.572179][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.583183][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.590577][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.597716][ T5825] bridge_slave_1: entered allmulticast mode [ 71.604392][ T5825] bridge_slave_1: entered promiscuous mode [ 71.625875][ T5828] team0: Port device team_slave_0 added [ 71.631816][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.638888][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.646489][ T5824] bridge_slave_1: entered allmulticast mode [ 71.653387][ T5824] bridge_slave_1: entered promiscuous mode [ 71.660236][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.667171][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.693159][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.719195][ T5827] team0: Port device team_slave_0 added [ 71.726220][ T5828] team0: Port device team_slave_1 added [ 71.747413][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.758686][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.771575][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.788365][ T5823] hsr_slave_0: entered promiscuous mode [ 71.794928][ T5823] hsr_slave_1: entered promiscuous mode [ 71.802337][ T5827] team0: Port device team_slave_1 added [ 71.829276][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.863678][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.871070][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.897136][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.909836][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.916769][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.942755][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.980478][ T5825] team0: Port device team_slave_0 added [ 71.986587][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.993830][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.019838][ T5832] Bluetooth: hci0: command tx timeout [ 72.019894][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.037691][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.044877][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.070977][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.086974][ T5826] hsr_slave_0: entered promiscuous mode [ 72.093536][ T5826] hsr_slave_1: entered promiscuous mode [ 72.099577][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.107125][ T5826] Cannot create hsr debugfs directory [ 72.113675][ T5824] team0: Port device team_slave_0 added [ 72.121189][ T5824] team0: Port device team_slave_1 added [ 72.130893][ T5825] team0: Port device team_slave_1 added [ 72.169575][ T5832] Bluetooth: hci5: command tx timeout [ 72.225262][ T5828] hsr_slave_0: entered promiscuous mode [ 72.231499][ T5828] hsr_slave_1: entered promiscuous mode [ 72.237466][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.245452][ T5828] Cannot create hsr debugfs directory [ 72.251281][ T5832] Bluetooth: hci1: command tx timeout [ 72.256658][ T5832] Bluetooth: hci2: command tx timeout [ 72.260726][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.262082][ T5841] Bluetooth: hci3: command tx timeout [ 72.269820][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.274285][ T5842] Bluetooth: hci4: command tx timeout [ 72.305709][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.317577][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.324552][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.350852][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.362331][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.369279][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.395233][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.431639][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.438592][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.464756][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.484737][ T5827] hsr_slave_0: entered promiscuous mode [ 72.490989][ T5827] hsr_slave_1: entered promiscuous mode [ 72.496971][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.504576][ T5827] Cannot create hsr debugfs directory [ 72.559715][ T5824] hsr_slave_0: entered promiscuous mode [ 72.565901][ T5824] hsr_slave_1: entered promiscuous mode [ 72.572250][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.579849][ T5824] Cannot create hsr debugfs directory [ 72.647250][ T5825] hsr_slave_0: entered promiscuous mode [ 72.654752][ T5825] hsr_slave_1: entered promiscuous mode [ 72.661121][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.668663][ T5825] Cannot create hsr debugfs directory [ 72.843372][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.852661][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.862049][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.885324][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.925927][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.943263][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.951842][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.963418][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.991416][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.003054][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.012121][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.029147][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.091845][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.113135][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.121753][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.135590][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.148618][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.182387][ T5827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.200710][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.215967][ T5827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.224470][ T5827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.236446][ T5827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.255514][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.262613][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.286292][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.296241][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.305993][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.316930][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.330274][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.337342][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.348383][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.406470][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.443995][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.462961][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.470088][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.487288][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.521581][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.528681][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.542149][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.549227][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.609181][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.626157][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.633229][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.645507][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.665903][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.699157][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.741191][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.748260][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.761102][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.768295][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.797539][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.817187][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.847002][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.874371][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.881478][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.901990][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.913029][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.920129][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.985805][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.992954][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.030291][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.037375][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.078771][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.089836][ T5841] Bluetooth: hci0: command tx timeout [ 74.110272][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.122036][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.135989][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.244508][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.253682][ T5841] Bluetooth: hci5: command tx timeout [ 74.306282][ T5828] veth0_vlan: entered promiscuous mode [ 74.329284][ T5823] veth0_vlan: entered promiscuous mode [ 74.335008][ T5841] Bluetooth: hci4: command tx timeout [ 74.335437][ T5842] Bluetooth: hci1: command tx timeout [ 74.341479][ T5832] Bluetooth: hci3: command tx timeout [ 74.346549][ T5842] Bluetooth: hci2: command tx timeout [ 74.375417][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.413241][ T5823] veth1_vlan: entered promiscuous mode [ 74.427319][ T5828] veth1_vlan: entered promiscuous mode [ 74.455705][ T5826] veth0_vlan: entered promiscuous mode [ 74.494806][ T5826] veth1_vlan: entered promiscuous mode [ 74.538875][ T5828] veth0_macvtap: entered promiscuous mode [ 74.556600][ T5825] veth0_vlan: entered promiscuous mode [ 74.571773][ T5826] veth0_macvtap: entered promiscuous mode [ 74.584611][ T5826] veth1_macvtap: entered promiscuous mode [ 74.592573][ T5823] veth0_macvtap: entered promiscuous mode [ 74.602525][ T5828] veth1_macvtap: entered promiscuous mode [ 74.628480][ T5823] veth1_macvtap: entered promiscuous mode [ 74.637276][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.647127][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.658950][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.670455][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.684313][ T5825] veth1_vlan: entered promiscuous mode [ 74.698260][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.707806][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.717189][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.726703][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.735631][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.753155][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.763906][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.774530][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.792092][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.801475][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.811003][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.820378][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.829076][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.843166][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.853746][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.863970][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.874464][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.885619][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.895331][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.905937][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.915985][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.926749][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.937540][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.968226][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.977908][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.987226][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.996059][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.007554][ T5827] veth0_vlan: entered promiscuous mode [ 75.037652][ T5827] veth1_vlan: entered promiscuous mode [ 75.077772][ T5825] veth0_macvtap: entered promiscuous mode [ 75.098211][ T5825] veth1_macvtap: entered promiscuous mode [ 75.120218][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.131497][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.140641][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.148521][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.175808][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.181973][ T5827] veth0_macvtap: entered promiscuous mode [ 75.189801][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.203313][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.212573][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.214059][ T5827] veth1_macvtap: entered promiscuous mode [ 75.242680][ T5824] veth0_vlan: entered promiscuous mode [ 75.267060][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.279514][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.289341][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.301656][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.311578][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.322107][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.332734][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.344537][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.344560][ T5824] veth1_vlan: entered promiscuous mode [ 75.379255][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.393209][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.403246][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.416279][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.428041][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.441161][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.455242][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.473309][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.484042][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.494043][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.504708][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.514987][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.525961][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.536394][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.546889][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.558127][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.567237][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.569003][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.585589][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.595609][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.606185][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.608735][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.616298][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.634383][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.644276][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.654749][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.665946][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.675387][ T5827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.684232][ T5827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.693095][ T5827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.701840][ T5827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.719666][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.727588][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.803359][ T5824] veth0_macvtap: entered promiscuous mode [ 75.835729][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.844675][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.859096][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.868449][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.572652][ T5842] Bluetooth: hci0: command tx timeout [ 76.578469][ T5842] Bluetooth: hci5: command tx timeout [ 76.584093][ T5842] Bluetooth: hci4: command tx timeout [ 76.589565][ T5842] Bluetooth: hci3: command tx timeout [ 76.594997][ T5842] Bluetooth: hci1: command tx timeout [ 76.600452][ T5842] Bluetooth: hci2: command tx timeout [ 76.607501][ T29] audit: type=1326 audit(1733465866.286:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 76.648340][ T29] audit: type=1326 audit(1733465866.286:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 76.678753][ T29] audit: type=1326 audit(1733465866.286:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 76.797475][ T29] audit: type=1326 audit(1733465866.286:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c5077e880 code=0x7ffc0000 [ 76.848369][ T5824] veth1_macvtap: entered promiscuous mode [ 76.855357][ T29] audit: type=1326 audit(1733465866.286:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c5077e880 code=0x7ffc0000 [ 76.878177][ T29] audit: type=1326 audit(1733465866.286:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 76.904167][ T29] audit: type=1326 audit(1733465866.286:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 76.949409][ T29] audit: type=1326 audit(1733465866.286:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 76.993550][ T29] audit: type=1326 audit(1733465866.296:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 77.015441][ T29] audit: type=1326 audit(1733465866.296:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 77.082918][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.101991][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.146133][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.156972][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.167084][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.073763][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.083854][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.094700][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.104543][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.115180][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.210185][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.365752][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.377388][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.401276][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.439324][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.439562][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.439584][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.439599][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.439616][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.439632][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.439650][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.440542][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.668409][ T5841] Bluetooth: hci2: command tx timeout [ 78.668538][ T5841] Bluetooth: hci1: command tx timeout [ 78.668633][ T5841] Bluetooth: hci3: command tx timeout [ 78.668728][ T5841] Bluetooth: hci4: command tx timeout [ 78.668841][ T5841] Bluetooth: hci5: command tx timeout [ 78.668936][ T5841] Bluetooth: hci0: command tx timeout [ 78.873980][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.874028][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.874067][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.874105][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.892993][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.893015][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.070497][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.070523][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.153224][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.153247][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.199522][ T5924] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.271121][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.271142][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.364482][ T5924] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 79.364522][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.366023][ T5924] usb 5-1: config 0 descriptor?? [ 79.545499][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.545526][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.596580][ T5924] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 79.596609][ T5924] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 79.637612][ T5924] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 79.637644][ T5924] [drm] Initialized udl on minor 2 [ 79.821506][ T5924] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 79.821669][ T5924] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 79.825777][ T5837] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 79.827058][ T5837] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 79.827149][ T5837] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 79.832267][ T5924] usb 5-1: USB disconnect, device number 2 [ 79.840295][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.840323][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.484494][ T5985] netlink: 68 bytes leftover after parsing attributes in process `syz.5.20'. [ 80.680349][ T5887] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.871905][ T5887] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 80.871944][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.871970][ T5887] usb 1-1: Product: syz [ 80.871990][ T5887] usb 1-1: Manufacturer: syz [ 80.872009][ T5887] usb 1-1: SerialNumber: syz [ 80.881815][ T5887] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 82.099493][ T5837] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 83.345643][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 83.345776][ T29] audit: type=1326 audit(1733465872.926:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 83.408791][ T29] audit: type=1326 audit(1733465872.926:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 83.598642][ T29] audit: type=1326 audit(1733465872.936:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 84.325919][ T5837] usb 1-1: Service connection timeout for: 256 [ 84.332866][ T5837] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 84.579428][ T29] audit: type=1326 audit(1733465872.936:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c5077e880 code=0x7ffc0000 [ 84.667724][ T29] audit: type=1326 audit(1733465872.946:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 84.690345][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.786765][ T29] audit: type=1326 audit(1733465872.956:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 85.166376][ T29] audit: type=1326 audit(1733465872.956:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 85.188458][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.176092][ T29] audit: type=1326 audit(1733465872.956:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 86.198170][ T29] audit: type=1326 audit(1733465872.966:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 86.220148][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.665708][ T29] audit: type=1326 audit(1733465872.966:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 86.687712][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.224240][ T6026] infiniband syz2: set active [ 87.229818][ T6026] infiniband syz2: added team_slave_1 [ 87.439599][ C1] sched: DL replenish lagged too much [ 87.444168][ T6026] RDS/IB: syz2: added [ 87.452384][ T6026] smc: adding ib device syz2 with port count 1 [ 87.458625][ T6026] smc: ib device syz2 port 1 has pnetid [ 88.013949][ T6032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.37'. [ 90.614762][ T93] cfg80211: failed to load regulatory.db [ 98.617797][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.625201][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.636011][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.643901][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.654734][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.662181][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.392708][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 99.407564][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 99.418252][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 99.431922][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 99.444520][ T5842] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 99.456151][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.729604][ T5842] Bluetooth: hci6: command tx timeout [ 101.530167][ T5842] Bluetooth: hci7: command tx timeout [ 101.945915][ T5953] usb 1-1: USB disconnect, device number 2 [ 101.972137][ T5837] ath9k_htc: Failed to initialize the device [ 101.978725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.987925][ T5953] usb 1-1: ath9k_htc: USB layer deinitialized [ 101.997085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.208527][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.372287][ T6065] Bluetooth: MGMT ver 1.23 [ 102.376927][ T6065] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 102.722374][ T6046] wg2: entered promiscuous mode [ 102.742105][ T6046] wg2: entered allmulticast mode [ 102.813595][ T6054] pim6reg1: entered promiscuous mode [ 102.829150][ T6054] pim6reg1: entered allmulticast mode [ 102.839501][ T5842] Bluetooth: hci6: command tx timeout [ 103.609961][ T5842] Bluetooth: hci7: command tx timeout [ 103.844059][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.869981][ T6073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.191524][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'. [ 104.232403][ T6086] bridge0: port 3(vlan2) entered blocking state [ 104.249112][ T6086] bridge0: port 3(vlan2) entered disabled state [ 104.285080][ T6084] futex_wake_op: syz.4.52 tries to shift op by -1; fix this program [ 104.287884][ T6086] vlan2: entered allmulticast mode [ 104.322125][ T6086] vlan2: left allmulticast mode [ 104.338854][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.445758][ T5842] Bluetooth: hci6: command tx timeout [ 106.451312][ T5842] Bluetooth: hci7: command tx timeout [ 106.777916][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.147754][ T6121] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 107.176759][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 107.281117][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.508013][ T6135] overlayfs: failed to resolve './file1': -2 [ 108.542614][ T5841] Bluetooth: hci7: command tx timeout [ 108.548036][ T5841] Bluetooth: hci6: command tx timeout [ 108.791918][ T6049] chnl_net:caif_netlink_parms(): no params data found [ 109.045313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.142220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.347004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.749203][ T6176] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.166860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.268062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.370511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.495424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.216874][ T6194] ipvlan2: entered promiscuous mode [ 111.480868][ T6220] capability: warning: `syz.1.70' uses 32-bit capabilities (legacy support in use) [ 112.268766][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 112.954299][ T53] bridge_slave_1: left allmulticast mode [ 112.960098][ T53] bridge_slave_1: left promiscuous mode [ 112.989609][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.059995][ T53] bridge_slave_0: left allmulticast mode [ 113.065744][ T53] bridge_slave_0: left promiscuous mode [ 113.072501][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.353621][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.368121][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.388279][ T53] bond0 (unregistering): Released all slaves [ 113.677193][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.713415][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.724662][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.737683][ T6058] bridge_slave_0: entered allmulticast mode [ 113.763994][ T6058] bridge_slave_0: entered promiscuous mode [ 113.793713][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.802299][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.813224][ T6049] bridge_slave_0: entered allmulticast mode [ 113.820391][ T6049] bridge_slave_0: entered promiscuous mode [ 113.827819][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.841315][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.848805][ T6058] bridge_slave_1: entered allmulticast mode [ 113.865323][ T6058] bridge_slave_1: entered promiscuous mode [ 113.979007][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.989045][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.000972][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.007776][ T6049] bridge_slave_1: entered allmulticast mode [ 114.018816][ T6049] bridge_slave_1: entered promiscuous mode [ 114.021461][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.042128][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00 [ 114.054483][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.065407][ T9] usb 5-1: config 0 descriptor?? [ 114.200865][ T6269] trusted_key: encrypted_key: insufficient parameters specified [ 114.231009][ T6049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.618696][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.703348][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.715224][ T6049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.828232][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 114.845102][ T9] usb 5-1: USB disconnect, device number 3 [ 115.001386][ T6049] team0: Port device team_slave_0 added [ 115.696942][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 115.696987][ T29] audit: type=1326 audit(1733465905.776:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.1.84" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ac097ff19 code=0x0 [ 116.175253][ T6286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.187639][ T6058] team0: Port device team_slave_0 added [ 116.204646][ T6058] team0: Port device team_slave_1 added [ 116.214188][ T6049] team0: Port device team_slave_1 added [ 116.378327][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.385541][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.411873][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.521236][ T53] hsr_slave_0: left promiscuous mode [ 116.527850][ T53] hsr_slave_1: left promiscuous mode [ 116.549558][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.568055][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.576627][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.584686][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.598863][ T53] veth1_macvtap: left promiscuous mode [ 116.608847][ T53] veth0_macvtap: left promiscuous mode [ 116.619614][ T53] veth1_vlan: left promiscuous mode [ 116.624888][ T53] veth0_vlan: left promiscuous mode [ 116.985794][ T6310] loop1: detected capacity change from 0 to 512 [ 116.995690][ T6310] ======================================================= [ 116.995690][ T6310] WARNING: The mand mount option has been deprecated and [ 116.995690][ T6310] and is ignored by this kernel. Remove the mand [ 116.995690][ T6310] option from the mount to silence this warning. [ 116.995690][ T6310] ======================================================= [ 117.213576][ T6310] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.92: corrupted xattr block 95: invalid header [ 117.236827][ T6310] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 117.250736][ T6310] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.92: bg 0: block 7: invalid block bitmap [ 117.269558][ T6310] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 117.279588][ T6310] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.92: corrupted xattr block 95: invalid header [ 117.293915][ T6310] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 117.303292][ T6310] EXT4-fs (loop1): 1 orphan inode deleted [ 117.314600][ T6310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.641022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.247693][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.328210][ T53] team0 (unregistering): Port device team_slave_1 removed [ 119.369043][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 119.386610][ T53] team0 (unregistering): Port device team_slave_0 removed [ 119.467818][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.476657][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.503819][ T6049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.520315][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.527358][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.565158][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.587912][ T6323] warning: `syz.0.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.599882][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.607475][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.635153][ T6049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.989521][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.117016][ T6049] hsr_slave_0: entered promiscuous mode [ 121.125345][ T6049] hsr_slave_1: entered promiscuous mode [ 121.138314][ T6049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.168565][ T6049] Cannot create hsr debugfs directory [ 121.225701][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 121.236570][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.107'. [ 121.283203][ T6058] hsr_slave_0: entered promiscuous mode [ 121.318355][ T6058] hsr_slave_1: entered promiscuous mode [ 121.334650][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.349699][ T6058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.354223][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.357392][ T6058] Cannot create hsr debugfs directory [ 121.370860][ T25] usb 3-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00 [ 121.393645][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.466692][ T25] usb 3-1: config 0 descriptor?? [ 121.688773][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 122.821580][ T6380] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 122.968885][ T5882] usb 3-1: USB disconnect, device number 2 [ 123.642642][ T6396] syz.0.120 uses old SIOCAX25GETINFO [ 123.751250][ T6397] syz.0.120 uses obsolete (PF_INET,SOCK_PACKET) [ 123.772889][ T6396] syzkaller1: entered promiscuous mode [ 123.778543][ T6396] syzkaller1: entered allmulticast mode [ 123.796813][ T6396] netlink: 80 bytes leftover after parsing attributes in process `syz.0.120'. [ 123.949845][ T6049] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.960692][ T6049] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 123.974566][ T6049] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.033367][ T6049] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.070915][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.136262][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.292461][ T6419] fuse: Invalid rootmode [ 124.354544][ T6419] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 124.364338][ T6058] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.471309][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.531955][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.564710][ T6058] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.578565][ T6058] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.649874][ T6058] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.682709][ T6049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.816179][ T6049] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.890172][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.897304][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.937819][ T53] bridge_slave_1: left allmulticast mode [ 124.944251][ T53] bridge_slave_1: left promiscuous mode [ 124.952314][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.021620][ T53] bridge_slave_0: left allmulticast mode [ 125.027283][ T53] bridge_slave_0: left promiscuous mode [ 125.034064][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.155537][ T6463] netlink: 80 bytes leftover after parsing attributes in process `syz.2.133'. [ 125.202696][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.213401][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.224479][ T53] bond0 (unregistering): Released all slaves [ 125.239166][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 125.269763][ T6460] syzkaller1: entered promiscuous mode [ 125.280541][ T6460] syzkaller1: entered allmulticast mode [ 125.362774][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.369932][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.927213][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.113530][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.241040][ T6049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.285190][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.292306][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.537511][ T53] hsr_slave_0: left promiscuous mode [ 126.846095][ T53] hsr_slave_1: left promiscuous mode [ 127.019600][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.055165][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.137056][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.190990][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.268906][ T53] veth1_macvtap: left promiscuous mode [ 127.308297][ T53] veth0_macvtap: left promiscuous mode [ 127.353848][ T53] veth1_vlan: left promiscuous mode [ 127.405036][ T53] veth0_vlan: left promiscuous mode [ 128.458501][ T6528] netlink: 860 bytes leftover after parsing attributes in process `syz.0.151'. [ 128.733958][ T53] team0 (unregistering): Port device team_slave_1 removed [ 128.747853][ T53] team0 (unregistering): Port device team_slave_0 removed [ 128.826356][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.833594][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.897399][ T6543] loop2: detected capacity change from 0 to 1024 [ 129.027053][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.047439][ T6553] loop0: detected capacity change from 0 to 512 [ 129.088916][ T6049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.123651][ T6553] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.207753][ T6553] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.411126][ T6562] loop4: detected capacity change from 0 to 512 [ 129.433363][ T6560] fuse: Bad value for 'rootmode' [ 129.481961][ T6553] EXT4-fs (loop0): 1 truncate cleaned up [ 129.535486][ T6562] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.157: corrupted xattr block 95: invalid header [ 129.552959][ T6562] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.157: bg 0: block 7: invalid block bitmap [ 129.566757][ T6562] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 129.576791][ T6562] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.157: corrupted xattr block 95: invalid header [ 129.595157][ T6562] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 129.604550][ T6562] EXT4-fs (loop4): 1 orphan inode deleted [ 129.615652][ T6562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.970881][ T6553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.159397][ T29] audit: type=1326 audit(1733465920.306:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6beb7ff19 code=0x7ffc0000 [ 130.279612][ T29] audit: type=1326 audit(1733465920.306:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6beb7ff19 code=0x7ffc0000 [ 130.422967][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.455246][ T29] audit: type=1326 audit(1733465920.306:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6beb7ff19 code=0x7ffc0000 [ 130.508689][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.604626][ T29] audit: type=1326 audit(1733465920.306:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe6beb7ff19 code=0x7ffc0000 [ 130.604672][ T29] audit: type=1326 audit(1733465920.306:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe6beb7ff53 code=0x7ffc0000 [ 130.604713][ T29] audit: type=1326 audit(1733465920.356:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6beb7e9cf code=0x7ffc0000 [ 130.604751][ T29] audit: type=1326 audit(1733465920.376:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe6beb7ffa7 code=0x7ffc0000 [ 130.604789][ T29] audit: type=1326 audit(1733465920.376:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6beb7e880 code=0x7ffc0000 [ 130.604828][ T29] audit: type=1326 audit(1733465920.386:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe6beb7eb7a code=0x7ffc0000 [ 130.604867][ T29] audit: type=1326 audit(1733465920.386:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6beb7ff19 code=0x7ffc0000 [ 130.773907][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.858167][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.881476][ T6049] veth0_vlan: entered promiscuous mode [ 130.912085][ T6049] veth1_vlan: entered promiscuous mode [ 131.042720][ T6049] veth0_macvtap: entered promiscuous mode [ 131.064984][ T6049] veth1_macvtap: entered promiscuous mode [ 131.128013][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.128094][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.128311][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.128375][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.128433][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.128496][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.128556][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.128617][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.134526][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.148492][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.148559][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.148617][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.148679][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.148735][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.148796][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.148856][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.149034][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.154625][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.174787][ T6049] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.174942][ T6049] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.174981][ T6049] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.175131][ T6049] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.327979][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.328006][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.923441][ T6170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.923469][ T6170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.262864][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.262943][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.705497][ T6058] veth0_vlan: entered promiscuous mode [ 132.730356][ T6058] veth1_vlan: entered promiscuous mode [ 132.836682][ T6058] veth0_macvtap: entered promiscuous mode [ 132.842968][ T6058] veth1_macvtap: entered promiscuous mode [ 132.869261][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.869285][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.869299][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.869317][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.872836][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.872857][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.872870][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.872888][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.872906][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.872969][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.873725][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.882271][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.882293][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.882307][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.882325][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.882344][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.882362][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.882376][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.882393][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.882411][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.882429][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.883256][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.886844][ T6058] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.886886][ T6058] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.886924][ T6058] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.886961][ T6058] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.134242][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.134267][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.246973][ T6631] Zero length message leads to an empty skb [ 133.288424][ T6636] loop6: detected capacity change from 0 to 512 [ 133.360147][ T6636] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 133.388135][ T6170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.388157][ T6170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.452009][ T6636] EXT4-fs (loop6): 1 truncate cleaned up [ 133.452668][ T6636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.006266][ T6049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.988400][ T6578] tty tty23: ldisc open failed (-12), clearing slot 22 [ 135.995938][ T6601] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 139.487394][ T6702] loop4: detected capacity change from 0 to 512 [ 139.499812][ T6702] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.063543][ T6702] EXT4-fs (loop4): 1 truncate cleaned up [ 140.076032][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.564062][ T6719] overlayfs: failed to resolve './file1': -2 [ 140.809467][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 140.809488][ T29] audit: type=1326 audit(1733465930.966:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 140.833426][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 140.857641][ T29] audit: type=1326 audit(1733465930.966:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 140.881395][ T29] audit: type=1326 audit(1733465930.966:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 140.904151][ T29] audit: type=1326 audit(1733465930.966:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 140.904362][ T6727] fuse: Bad value for 'rootmode' [ 140.926649][ T29] audit: type=1326 audit(1733465930.966:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 140.926691][ T29] audit: type=1326 audit(1733465930.966:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 140.926728][ T29] audit: type=1326 audit(1733465930.966:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c5077ff53 code=0x7ffc0000 [ 140.926766][ T29] audit: type=1326 audit(1733465930.966:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c5077e9cf code=0x7ffc0000 [ 140.926803][ T29] audit: type=1326 audit(1733465930.966:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6c5077ffa7 code=0x7ffc0000 [ 140.926840][ T29] audit: type=1326 audit(1733465930.966:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c5077e880 code=0x7ffc0000 [ 141.277771][ T6727] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 141.318449][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.143228][ T6767] syzkaller1: entered promiscuous mode [ 143.148804][ T6767] syzkaller1: entered allmulticast mode [ 143.156398][ T6767] netlink: 80 bytes leftover after parsing attributes in process `syz.1.208'. [ 143.482669][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.210'. [ 143.663626][ T6782] loop1: detected capacity change from 0 to 512 [ 143.697629][ T6782] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.768668][ T6782] EXT4-fs (loop1): 1 truncate cleaned up [ 144.481820][ T6782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.127377][ T6782] EXT4-fs (loop1): shut down requested (1) [ 145.420875][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.630568][ T6826] fuse: Bad value for 'rootmode' [ 145.653825][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 145.714092][ T6826] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 146.462371][ T6843] overlayfs: failed to resolve './file1': -2 [ 146.553529][ T6844] netlink: 'syz.1.223': attribute type 3 has an invalid length. [ 146.874465][ T6851] IPVS: length: 60 != 8 [ 148.985771][ T5882] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 150.607540][ T5882] usb 8-1: device descriptor read/all, error -71 [ 151.072400][ T6879] loop2: detected capacity change from 0 to 512 [ 151.087255][ T6879] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 151.108463][ T6879] EXT4-fs (loop2): 1 truncate cleaned up [ 151.122135][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.242'. [ 151.134919][ T6879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.164581][ T6879] EXT4-fs (loop2): shut down requested (1) [ 151.190286][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 151.190305][ T29] audit: type=1326 audit(1733465941.356:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348277ff19 code=0x7ffc0000 [ 151.271550][ T29] audit: type=1326 audit(1733465941.386:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f348277ff19 code=0x7ffc0000 [ 151.356883][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.366846][ T29] audit: type=1326 audit(1733465941.386:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348277ff19 code=0x7ffc0000 [ 151.408623][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 151.428780][ T6894] IPVS: length: 60 != 8 [ 151.447417][ T29] audit: type=1326 audit(1733465941.386:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f348277ff19 code=0x7ffc0000 [ 151.597950][ T29] audit: type=1326 audit(1733465941.386:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f348277ff53 code=0x7ffc0000 [ 151.624008][ T29] audit: type=1326 audit(1733465941.396:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f348277e9cf code=0x7ffc0000 [ 152.192031][ T29] audit: type=1326 audit(1733465941.396:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f348277ffa7 code=0x7ffc0000 [ 152.227425][ T29] audit: type=1326 audit(1733465941.396:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f348277e880 code=0x7ffc0000 [ 152.251038][ T29] audit: type=1326 audit(1733465941.396:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f348277eb7a code=0x7ffc0000 [ 152.278674][ T29] audit: type=1326 audit(1733465941.406:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348277ff19 code=0x7ffc0000 [ 152.938628][ T6912] netlink: 828 bytes leftover after parsing attributes in process `syz.7.252'. [ 153.922325][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 154.162408][ T6940] loop6: detected capacity change from 0 to 512 [ 154.269849][ T6945] devtmpfs: Too few inodes for current use [ 154.627263][ T6940] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 154.665710][ T6940] EXT4-fs (loop6): 1 truncate cleaned up [ 154.673136][ T6940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.813623][ T6940] EXT4-fs (loop6): shut down requested (1) [ 155.437115][ T6049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.404680][ T6973] 9pnet_virtio: no channels available for device syz [ 156.639405][ T5953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.836888][ T6984] netlink: 828 bytes leftover after parsing attributes in process `syz.1.269'. [ 156.908028][ T5953] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 156.917220][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.950906][ T5953] usb 5-1: config 0 descriptor?? [ 156.985238][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.273'. [ 157.352019][ T5953] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 157.366549][ T5953] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 157.615598][ T5953] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 157.622584][ T5953] [drm] Initialized udl on minor 2 [ 158.419682][ T5953] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 158.441136][ T5953] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 158.964418][ T5953] usb 5-1: USB disconnect, device number 4 [ 158.971769][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 158.979884][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 158.987771][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 161.445210][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 162.317804][ T7040] netlink: 68 bytes leftover after parsing attributes in process `syz.4.282'. [ 162.435221][ T7038] loop6: detected capacity change from 0 to 16 [ 162.450510][ T7038] erofs (device loop6): unsupported chunk format ffff of nid 36 [ 163.524577][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.286'. [ 164.869446][ T5953] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 165.066409][ T5953] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 165.082123][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.172642][ T5953] usb 2-1: config 0 descriptor?? [ 168.128246][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.301'. [ 168.399792][ T7118] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 168.419834][ T7094] loop7: detected capacity change from 0 to 16 [ 168.769274][ T7094] erofs (device loop7): unsupported chunk format ffff of nid 36 [ 169.449963][ T5953] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 169.459990][ T5953] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 169.468016][ T5953] [drm:udl_init] *ERROR* Selecting channel failed [ 169.478950][ T5953] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 169.539695][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 169.715157][ T7131] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 169.753097][ T5953] [drm] Initialized udl on minor 2 [ 169.769110][ T5953] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 169.784858][ T5953] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 169.840490][ T5953] usb 2-1: USB disconnect, device number 2 [ 170.483129][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 170.652868][ T7147] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 170.799482][ T5953] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.149442][ T5953] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 171.185441][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.312897][ T5953] usb 5-1: config 0 descriptor?? [ 172.466403][ T5953] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 172.475103][ T5953] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 172.490249][ T7171] fuse: Unknown parameter 'use00000000000000000000' [ 172.513760][ T5953] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 172.533048][ T5953] [drm] Initialized udl on minor 2 [ 172.547026][ T7174] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 172.621873][ T7179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.687720][ T5953] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 172.750170][ T5953] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 173.258168][ T93] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.274481][ T93] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.282458][ T93] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 173.289069][ T5953] usb 5-1: USB disconnect, device number 5 [ 173.410550][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.328'. [ 173.599720][ T7197] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 174.825541][ T7210] loop2: detected capacity change from 0 to 16 [ 174.945893][ T7210] erofs (device loop2): unsupported chunk format ffff of nid 36 [ 176.268031][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 176.319907][ T5814] udevd[5814]: failed to send result of seq 12812 to main daemon: Connection refused [ 177.551105][ T7263] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 178.315943][ T7283] loop4: detected capacity change from 0 to 16 [ 178.504907][ T7283] erofs (device loop4): unsupported chunk format ffff of nid 36 [ 179.284929][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.355'. [ 182.095796][ T7314] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 182.115327][ T5882] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 183.142143][ T7316] loop4: detected capacity change from 0 to 512 [ 183.686981][ T7316] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.364: corrupted xattr block 95: invalid header [ 183.702106][ T7316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.364: bg 0: block 7: invalid block bitmap [ 183.850108][ T7316] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 183.860106][ T7316] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.364: corrupted xattr block 95: invalid header [ 183.874106][ T7316] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 183.883227][ T7316] EXT4-fs (loop4): 1 orphan inode deleted [ 183.890007][ T7316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.983439][ T7339] loop1: detected capacity change from 0 to 16 [ 183.992117][ T7339] erofs (device loop1): unsupported chunk format ffff of nid 36 [ 184.252241][ T5882] usb 7-1: device not accepting address 2, error -71 [ 185.196201][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.274511][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 185.274530][ T29] audit: type=1326 audit(1733465975.436:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 185.332537][ T7367] nbd2: detected capacity change from 0 to 32 [ 185.370567][ T7367] block nbd2: shutting down sockets [ 185.375872][ T29] audit: type=1326 audit(1733465975.476:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 185.398016][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.420553][ T29] audit: type=1326 audit(1733465975.486:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 185.443655][ T29] audit: type=1326 audit(1733465975.486:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 185.465796][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.472733][ T29] audit: type=1326 audit(1733465975.486:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5077ff19 code=0x7ffc0000 [ 186.964426][ T7397] loop4: detected capacity change from 0 to 16 [ 187.091649][ T7397] erofs (device loop4): unsupported chunk format ffff of nid 36 [ 187.821597][ T7424] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 188.144227][ T7434] loop2: detected capacity change from 0 to 512 [ 188.206925][ T7434] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.392: corrupted xattr block 95: invalid header [ 188.236788][ T7434] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.392: bg 0: block 7: invalid block bitmap [ 188.256273][ T7434] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 188.266305][ T7434] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.392: corrupted xattr block 95: invalid header [ 188.281028][ T7434] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 188.290264][ T7434] EXT4-fs (loop2): 1 orphan inode deleted [ 188.297529][ T7434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.533951][ T7453] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 189.253461][ T7462] loop7: detected capacity change from 0 to 16 [ 189.271780][ T7462] erofs (device loop7): unsupported chunk format ffff of nid 36 [ 189.694186][ T7470] overlayfs: failed to resolve './file1': -2 [ 189.952854][ T7467] 9pnet_virtio: no channels available for device syz [ 190.379738][ T7481] futex_wake_op: syz.0.407 tries to shift op by -1; fix this program [ 191.064445][ T7478] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 191.951868][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.176147][ T7516] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 192.211560][ T7512] loop6: detected capacity change from 0 to 16 [ 192.996381][ T7522] 9pnet_virtio: no channels available for device syz [ 193.839493][ T7512] erofs (device loop6): unsupported chunk format ffff of nid 36 [ 194.665547][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.875789][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.970719][ T7560] loop4: detected capacity change from 0 to 512 [ 196.250250][ T7560] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.434: corrupted xattr block 95: invalid header [ 196.265548][ T7560] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.434: bg 0: block 7: invalid block bitmap [ 196.291605][ T7560] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 196.301613][ T7560] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.434: corrupted xattr block 95: invalid header [ 196.330722][ T7560] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 196.340409][ T7560] EXT4-fs (loop4): 1 orphan inode deleted [ 196.351330][ T7560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.622616][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.435'. [ 196.844383][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 196.844507][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 196.850498][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 196.856456][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 197.736022][ T7572] netlink: 84 bytes leftover after parsing attributes in process `syz.6.429'. [ 198.797180][ T7582] 9pnet_virtio: no channels available for device syz [ 198.856944][ T7577] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 199.206572][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.333446][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.447'. [ 199.677460][ T7610] VFS: could not find a valid V7 on nullb0. [ 199.988470][ T7604] loop0: detected capacity change from 0 to 2048 [ 200.062677][ T7604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.087963][ T7604] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.168401][ T7614] loop6: detected capacity change from 0 to 1024 [ 201.810898][ T7632] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 202.651832][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.655807][ T7614] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 202.674498][ T7635] qrtr: Invalid version 48 [ 202.687177][ T5842] Bluetooth: hci4: unexpected event for opcode 0x200f [ 202.922923][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.462'. [ 203.045080][ T5842] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 203.055412][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: kworker/u9:7 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 203.066283][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.076350][ T5842] Workqueue: hci4 hci_rx_work [ 203.081075][ T5842] Call Trace: [ 203.084367][ T5842] [ 203.087305][ T5842] dump_stack_lvl+0x241/0x360 [ 203.092015][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.097237][ T5842] ? __pfx__printk+0x10/0x10 [ 203.101837][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.107473][ T5842] ? __kmalloc_cache_noprof+0x243/0x390 [ 203.113030][ T5842] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 203.118322][ T5842] sysfs_create_dir_ns+0x2ce/0x3a0 [ 203.123444][ T5842] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 203.129079][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.134715][ T5842] kobject_add_internal+0x435/0x8d0 [ 203.139931][ T5842] kobject_add+0x152/0x220 [ 203.144361][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.149998][ T5842] ? do_raw_spin_unlock+0x13c/0x8b0 [ 203.155374][ T5842] ? device_add+0x3e7/0xbf0 [ 203.159880][ T5842] ? __pfx_kobject_add+0x10/0x10 [ 203.164824][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.170455][ T5842] ? _raw_spin_unlock+0x28/0x50 [ 203.175308][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.180942][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.186574][ T5842] ? get_device_parent+0x165/0x410 [ 203.191684][ T5842] device_add+0x4e5/0xbf0 [ 203.196015][ T5842] hci_conn_add_sysfs+0xe8/0x200 [ 203.200960][ T5842] le_conn_complete_evt+0xc9f/0x12e0 [ 203.206257][ T5842] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 203.211979][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.217610][ T5842] ? __mutex_unlock_slowpath+0x21e/0x790 [ 203.223252][ T5842] ? __pfx___mutex_lock+0x10/0x10 [ 203.228287][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.233914][ T5842] ? skb_pull_data+0x112/0x230 [ 203.238687][ T5842] hci_le_conn_complete_evt+0x18c/0x420 [ 203.244240][ T5842] hci_event_packet+0xa57/0x1540 [ 203.249194][ T5842] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 203.254481][ T5842] ? __pfx_hci_event_packet+0x10/0x10 [ 203.259862][ T5842] ? do_raw_spin_unlock+0x13c/0x8b0 [ 203.265059][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.270688][ T5842] ? rcu_is_watching+0x15/0xb0 [ 203.275460][ T5842] ? hci_send_to_monitor+0xd8/0x7f0 [ 203.280657][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.286287][ T5842] ? kcov_remote_start+0x97/0x7d0 [ 203.291315][ T5842] hci_rx_work+0x3f3/0xdb0 [ 203.295746][ T5842] ? process_scheduled_works+0x976/0x1840 [ 203.301466][ T5842] process_scheduled_works+0xa68/0x1840 [ 203.307027][ T5842] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.313007][ T5842] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 203.318557][ T5842] ? assign_work+0x364/0x3d0 [ 203.323150][ T5842] worker_thread+0x870/0xd30 [ 203.327749][ T5842] ? __kthread_parkme+0x169/0x1d0 [ 203.332775][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 203.337885][ T5842] kthread+0x2f2/0x390 [ 203.342046][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 203.347162][ T5842] ? __pfx_kthread+0x10/0x10 [ 203.351755][ T5842] ret_from_fork+0x4d/0x80 [ 203.356173][ T5842] ? __pfx_kthread+0x10/0x10 [ 203.360768][ T5842] ret_from_fork_asm+0x1a/0x30 [ 203.365538][ T5842] [ 203.369975][ T5842] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 203.384503][ T5842] Bluetooth: hci4: failed to register connection device [ 203.632901][ T7679] loop2: detected capacity change from 0 to 2048 [ 204.916533][ T7691] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 206.020765][ T7679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.121504][ T7679] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.231215][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.6.478'. [ 206.439737][ T7670] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz.2.466: path /89/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 206.775522][ T5832] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 206.784103][ T5832] Bluetooth: hci4: Injecting HCI hardware error event [ 206.793637][ T5832] Bluetooth: hci4: hardware error 0x00 [ 206.846425][ T7733] loop0: detected capacity change from 0 to 1024 [ 206.849076][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.484'. [ 207.206396][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.660778][ T7733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.836066][ T1206] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 207.999560][ T1206] usb 8-1: Using ep0 maxpacket: 32 [ 208.077722][ T1206] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 208.147487][ T1206] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.262446][ T1206] usb 8-1: config 0 descriptor?? [ 208.298818][ T1206] gspca_main: sunplus-2.14.0 probing 041e:400b [ 208.625229][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.054995][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 209.087884][ T7794] loop4: detected capacity change from 0 to 2048 [ 209.139829][ T1206] gspca_sunplus: reg_r err -71 [ 209.144680][ T1206] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 209.156196][ T1206] usb 8-1: USB disconnect, device number 4 [ 209.156776][ T7794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.216420][ T7794] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.237620][ T25] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 209.364916][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 209.526352][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.191213][ T25] usb 2-1: config 0 descriptor?? [ 211.309178][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.703952][ T25] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 211.712675][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 212.143627][ T25] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 212.322606][ T25] [drm] Initialized udl on minor 2 [ 212.535745][ T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.545203][ T25] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 212.552892][ T5953] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.562278][ T5953] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 212.570932][ T25] usb 2-1: USB disconnect, device number 3 [ 213.244326][ T7876] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 213.387171][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.516'. [ 213.434538][ T7884] vlan2: entered promiscuous mode [ 214.924182][ T7910] loop4: detected capacity change from 0 to 512 [ 214.932287][ T7910] ext4: Unknown parameter 'noacl' [ 218.008460][ T7955] 9pnet: Could not find request transport: rdma˙˙˙˙18446744073709551615 [ 218.510352][ T5832] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 218.794523][ T1206] IPVS: starting estimator thread 0... [ 218.851070][ T7977] loop0: detected capacity change from 0 to 512 [ 218.889790][ T7984] IPVS: using max 32 ests per chain, 76800 per kthread [ 219.017004][ T7977] ext4: Unknown parameter 'noacl' [ 220.181476][ T8012] devtmpfs: Too few inodes for current use [ 221.449365][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 221.518011][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 221.619964][ T8027] netlink: 300 bytes leftover after parsing attributes in process `syz.7.558'. [ 221.674699][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 221.732102][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.791992][ T9] usb 2-1: config 0 descriptor?? [ 222.003549][ T9] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 222.012873][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 222.020919][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 222.589602][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 222.596701][ T9] [drm] Initialized udl on minor 2 [ 222.614331][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.622367][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 222.629856][ T5832] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 222.638228][ T5832] Bluetooth: hci2: Injecting HCI hardware error event [ 222.645216][ T5832] Bluetooth: hci2: hardware error 0x00 [ 222.654881][ T968] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.655563][ T8047] syzkaller1: entered promiscuous mode [ 222.662785][ T9] usb 2-1: USB disconnect, device number 4 [ 222.663211][ T968] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 222.682072][ T968] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 222.732648][ T8047] syzkaller1: entered allmulticast mode [ 222.938985][ T8048] netlink: 80 bytes leftover after parsing attributes in process `syz.2.562'. [ 223.262937][ T8066] siw: device registration error -23 [ 223.302654][ T8068] Trying to write to read-only block-device nullb0 [ 224.911807][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 225.157984][ T29] audit: type=1800 audit(1733466015.316:139): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.578" name="/" dev="9p" ino=2 res=0 errno=0 [ 225.186066][ T8103] netfs: Couldn't get user pages (rc=-14) [ 225.955986][ T8116] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 226.033743][ T8123] syzkaller1: entered promiscuous mode [ 226.039416][ T8123] syzkaller1: entered allmulticast mode [ 226.050716][ T8123] netlink: 80 bytes leftover after parsing attributes in process `syz.6.584'. [ 226.697157][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 227.711752][ T8152] hub 1-0:1.0: USB hub found [ 227.729797][ T8152] hub 1-0:1.0: 1 port detected [ 227.766284][ T8148] loop7: detected capacity change from 0 to 2048 [ 227.858060][ T8161] netlink: 240 bytes leftover after parsing attributes in process `syz.4.590'. [ 228.014349][ T8148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.026658][ T8148] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.058128][ T8174] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 229.391799][ T8180] EXT4-fs error (device loop7): ext4_readdir:261: inode #2: block 16: comm syz.7.588: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 230.229537][ T6058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.288857][ T8204] syzkaller1: entered promiscuous mode [ 230.294578][ T8204] syzkaller1: entered allmulticast mode [ 230.302997][ T8204] netlink: 80 bytes leftover after parsing attributes in process `syz.2.604'. [ 230.547156][ T8213] overlayfs: refusing to follow metacopy origin for (/file0) [ 231.260261][ T8223] tipc: Started in network mode [ 231.273347][ T8223] tipc: Node identity ac14140f, cluster identity 4711 [ 231.308343][ T8223] tipc: New replicast peer: 255.255.255.255 [ 231.349753][ T8223] tipc: Enabled bearer , priority 10 [ 231.356050][ T8231] tipc: Cannot configure node identity twice [ 231.389425][ T8231] tipc: Cannot configure node identity twice [ 232.800465][ T8271] syzkaller1: entered promiscuous mode [ 232.805967][ T8271] syzkaller1: entered allmulticast mode [ 232.838816][ T9] tipc: Node number set to 2886997007 [ 232.951158][ T8271] netlink: 80 bytes leftover after parsing attributes in process `syz.1.623'. [ 233.022496][ T8281] x_tables: duplicate underflow at hook 4 [ 233.615073][ T8299] overlayfs: failed to resolve './file1': -2 [ 234.030655][ T8297] loop6: detected capacity change from 0 to 1024 [ 234.186040][ T8297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.432384][ T8315] syzkaller1: entered promiscuous mode [ 234.506036][ T8315] syzkaller1: entered allmulticast mode [ 234.687007][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 234.695890][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 234.921331][ T8315] netlink: 80 bytes leftover after parsing attributes in process `syz.1.638'. [ 235.341845][ T6049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.591775][ T8347] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 237.334393][ T8365] overlayfs: failed to resolve './file1': -2 [ 237.577346][ T8388] loop7: detected capacity change from 0 to 1024 [ 238.424471][ T8395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.430441][ T8395] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 238.442511][ T8400] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 238.604853][ T8407] netlink: 80 bytes leftover after parsing attributes in process `syz.6.663'. [ 238.638186][ T8388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.689387][ T8395] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 238.695345][ T8395] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 238.777221][ T8395] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 238.784555][ T8395] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 238.796995][ T8395] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 238.804084][ T8395] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 239.088273][ T8416] IPVS: length: 60 != 8 [ 239.450789][ T8427] tipc: Enabling of bearer rejected, failed to enable media [ 239.994997][ T8438] tipc: Started in network mode [ 240.013271][ T8438] tipc: Node identity 800, cluster identity 4711 [ 240.646106][ T8440] overlayfs: failed to resolve './file1': -2 [ 240.702449][ T8438] tipc: Node number set to 2048 [ 240.708058][ T8438] tipc: Cannot configure node identity twice [ 240.872735][ T8458] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 240.872735][ T8458] program syz.0.679 not setting count and/or reply_len properly [ 240.920146][ T8458] netlink: 'syz.0.679': attribute type 10 has an invalid length. [ 240.960637][ T6058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.068288][ T8465] 9pnet_virtio: no channels available for device syz [ 241.456680][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.464166][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.513098][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.520276][ T8458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.527695][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.534825][ T8458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.614482][ T8458] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 242.343448][ T8493] tipc: Started in network mode [ 242.348337][ T8493] tipc: Node identity 800, cluster identity 4711 [ 242.357034][ T8493] tipc: Node number set to 2048 [ 242.362610][ T8493] tipc: Cannot configure node identity twice [ 242.592594][ T8502] devtmpfs: Too few inodes for current use [ 244.004081][ T8510] loop7: detected capacity change from 0 to 1024 [ 244.122160][ T8510] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.391959][ T8541] 9pnet_fd: Insufficient options for proto=fd [ 244.404995][ T8544] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 244.418020][ T8544] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 244.912385][ C0] ------------[ cut here ]------------ [ 244.917902][ C0] refcount_t: underflow; use-after-free. [ 244.924416][ C0] WARNING: CPU: 0 PID: 8554 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 244.933864][ C0] Modules linked in: [ 244.937769][ C0] CPU: 0 UID: 0 PID: 8554 Comm: syz.6.701 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 244.948398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.958495][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 244.964728][ C0] Code: e0 1e 5f 8c e8 87 c5 95 fc 90 0f 0b 90 90 eb 99 e8 2b 1e d5 fc c6 05 2d 2c 39 0b 01 90 48 c7 c7 40 1f 5f 8c e8 67 c5 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 1e d5 fc c6 05 07 2c 39 0b 01 90 [ 244.984392][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00010246 [ 244.990514][ C0] RAX: 073c02f51bd7cf00 RBX: ffff88804838a864 RCX: ffff88801cf93c00 [ 244.998510][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.006561][ C0] RBP: 0000000000000003 R08: ffffffff81601c02 R09: fffffbfff1cfa210 [ 245.014755][ C0] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888032799068 [ 245.022778][ C0] R13: ffff88804838a864 R14: 1ffff110064f3218 R15: ffff888032799000 [ 245.030801][ C0] FS: 00007f4a8d2c36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 245.039812][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.046411][ C0] CR2: 000000110c3011a7 CR3: 00000000589a2000 CR4: 0000000000350ef0 [ 245.054433][ C0] Call Trace: [ 245.057720][ C0] [ 245.060592][ C0] ? __warn+0x165/0x4d0 [ 245.064774][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 245.070557][ C0] ? report_bug+0x2b3/0x500 [ 245.075088][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 245.080702][ C0] ? handle_bug+0x60/0x90 [ 245.085069][ C0] ? exc_invalid_op+0x1a/0x50 [ 245.089806][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 245.094861][ C0] ? __warn_printk+0x292/0x360 [ 245.099673][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 245.105255][ C0] ? refcount_warn_saturate+0x159/0x1d0 [ 245.110860][ C0] j1939_session_put+0x1ed/0x440 [ 245.115914][ C0] j1939_can_recv+0x758/0xb20 [ 245.120636][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 245.125854][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.130682][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 245.135904][ C0] can_rcv_filter+0x35b/0x7f0 [ 245.140627][ C0] can_receive+0x327/0x480 [ 245.145061][ C0] ? can_receive+0x1c9/0x480 [ 245.149694][ C0] can_rcv+0x144/0x260 [ 245.153784][ C0] ? __pfx_can_rcv+0x10/0x10 [ 245.158394][ C0] __netif_receive_skb+0x2e2/0x650 [ 245.163564][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 245.168611][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 245.174294][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.179968][ C0] ? __pfx_lock_release+0x10/0x10 [ 245.185016][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.191391][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 245.196530][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.201352][ C0] ? process_backlog+0x33b/0x15b0 [ 245.206411][ C0] process_backlog+0x662/0x15b0 [ 245.211324][ C0] ? process_backlog+0x33b/0x15b0 [ 245.216389][ C0] ? __pfx_process_backlog+0x10/0x10 [ 245.221731][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.227390][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 245.232455][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.238804][ C0] __napi_poll+0xcd/0x490 [ 245.243197][ C0] net_rx_action+0x89b/0x1240 [ 245.247917][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 245.253083][ C0] ? __pfx_lock_release+0x10/0x10 [ 245.258145][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.263825][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 245.269771][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.276130][ C0] handle_softirqs+0x2d6/0x9b0 [ 245.280951][ C0] ? do_softirq+0x11b/0x1e0 [ 245.285501][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 245.290843][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.296492][ C0] do_softirq+0x11b/0x1e0 [ 245.300878][ C0] [ 245.303818][ C0] [ 245.306759][ C0] ? __pfx_do_softirq+0x10/0x10 [ 245.311660][ C0] ? lock_release+0xbf/0xa30 [ 245.316270][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 245.321950][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.327601][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.333286][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.338078][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 245.343333][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.348988][ C0] ? j1939_sk_sendmsg+0x1293/0x14c0 [ 245.354238][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 245.360013][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.365672][ C0] j1939_sk_sendmsg+0x1293/0x14c0 [ 245.370748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.376410][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 245.381832][ C0] ? __import_iovec+0x590/0x870 [ 245.386716][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.392391][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 245.397346][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.403023][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 245.408419][ C0] __sock_sendmsg+0x223/0x270 [ 245.413163][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 245.417957][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.423294][ C0] ? __fget_files+0x2a/0x410 [ 245.427904][ C0] ? __fget_files+0x2a/0x410 [ 245.432544][ C0] __sys_sendmsg+0x269/0x350 [ 245.437160][ C0] ? __pfx_futex_wake+0x10/0x10 [ 245.442065][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.447208][ C0] ? j1939_sk_connect+0x442/0x5c0 [ 245.452308][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.457968][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.464350][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.470032][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.474828][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.480496][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.485285][ C0] do_syscall_64+0xf3/0x230 [ 245.489845][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.495771][ C0] RIP: 0033:0x7f4a8c57ff19 [ 245.500272][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.520010][ C0] RSP: 002b:00007f4a8d2c3058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.528446][ C0] RAX: ffffffffffffffda RBX: 00007f4a8c745fa0 RCX: 00007f4a8c57ff19 [ 245.536498][ C0] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 245.544529][ C0] RBP: 00007f4a8c5f3986 R08: 0000000000000000 R09: 0000000000000000 [ 245.552541][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.560566][ C0] R13: 0000000000000000 R14: 00007f4a8c745fa0 R15: 00007ffd2850ba58 [ 245.568562][ C0] [ 245.571617][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 245.578908][ C0] CPU: 0 UID: 0 PID: 8554 Comm: syz.6.701 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 245.589510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.599572][ C0] Call Trace: [ 245.602862][ C0] [ 245.605716][ C0] dump_stack_lvl+0x241/0x360 [ 245.610429][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.615660][ C0] ? __pfx__printk+0x10/0x10 [ 245.620274][ C0] ? _printk+0xd5/0x120 [ 245.624454][ C0] ? __init_begin+0x41000/0x41000 [ 245.629506][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.635163][ C0] ? vscnprintf+0x5d/0x90 [ 245.639512][ C0] panic+0x349/0x880 [ 245.643433][ C0] ? __warn+0x174/0x4d0 [ 245.647609][ C0] ? __pfx_panic+0x10/0x10 [ 245.652059][ C0] __warn+0x344/0x4d0 [ 245.656239][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 245.661814][ C0] report_bug+0x2b3/0x500 [ 245.666170][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 245.671746][ C0] handle_bug+0x60/0x90 [ 245.675937][ C0] exc_invalid_op+0x1a/0x50 [ 245.680471][ C0] asm_exc_invalid_op+0x1a/0x20 [ 245.685348][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 245.691518][ C0] Code: e0 1e 5f 8c e8 87 c5 95 fc 90 0f 0b 90 90 eb 99 e8 2b 1e d5 fc c6 05 2d 2c 39 0b 01 90 48 c7 c7 40 1f 5f 8c e8 67 c5 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 1e d5 fc c6 05 07 2c 39 0b 01 90 [ 245.711129][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00010246 [ 245.717199][ C0] RAX: 073c02f51bd7cf00 RBX: ffff88804838a864 RCX: ffff88801cf93c00 [ 245.725169][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.733145][ C0] RBP: 0000000000000003 R08: ffffffff81601c02 R09: fffffbfff1cfa210 [ 245.741116][ C0] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888032799068 [ 245.749092][ C0] R13: ffff88804838a864 R14: 1ffff110064f3218 R15: ffff888032799000 [ 245.757070][ C0] ? __warn_printk+0x292/0x360 [ 245.761846][ C0] ? refcount_warn_saturate+0x159/0x1d0 [ 245.767399][ C0] j1939_session_put+0x1ed/0x440 [ 245.772348][ C0] j1939_can_recv+0x758/0xb20 [ 245.777192][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 245.782397][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.787178][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 245.792380][ C0] can_rcv_filter+0x35b/0x7f0 [ 245.797064][ C0] can_receive+0x327/0x480 [ 245.801483][ C0] ? can_receive+0x1c9/0x480 [ 245.806086][ C0] can_rcv+0x144/0x260 [ 245.810169][ C0] ? __pfx_can_rcv+0x10/0x10 [ 245.814764][ C0] __netif_receive_skb+0x2e2/0x650 [ 245.819884][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 245.824911][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 245.830550][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.836181][ C0] ? __pfx_lock_release+0x10/0x10 [ 245.841213][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.847543][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 245.852661][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.857432][ C0] ? process_backlog+0x33b/0x15b0 [ 245.862469][ C0] process_backlog+0x662/0x15b0 [ 245.867328][ C0] ? process_backlog+0x33b/0x15b0 [ 245.872363][ C0] ? __pfx_process_backlog+0x10/0x10 [ 245.877658][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.883292][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 245.888313][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.894651][ C0] __napi_poll+0xcd/0x490 [ 245.899013][ C0] net_rx_action+0x89b/0x1240 [ 245.903715][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 245.908930][ C0] ? __pfx_lock_release+0x10/0x10 [ 245.913966][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.919604][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 245.925504][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.931845][ C0] handle_softirqs+0x2d6/0x9b0 [ 245.936635][ C0] ? do_softirq+0x11b/0x1e0 [ 245.941156][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 245.946469][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.952120][ C0] do_softirq+0x11b/0x1e0 [ 245.956469][ C0] [ 245.959399][ C0] [ 245.962326][ C0] ? __pfx_do_softirq+0x10/0x10 [ 245.967187][ C0] ? lock_release+0xbf/0xa30 [ 245.971783][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 245.977508][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.983152][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.988781][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.993558][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 245.998768][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.004399][ C0] ? j1939_sk_sendmsg+0x1293/0x14c0 [ 246.009606][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 246.015339][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.020976][ C0] j1939_sk_sendmsg+0x1293/0x14c0 [ 246.026008][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.031652][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 246.037032][ C0] ? __import_iovec+0x590/0x870 [ 246.041893][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.047522][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 246.052459][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.058093][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 246.063473][ C0] __sock_sendmsg+0x223/0x270 [ 246.068163][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 246.072935][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.078223][ C0] ? __fget_files+0x2a/0x410 [ 246.082814][ C0] ? __fget_files+0x2a/0x410 [ 246.087405][ C0] __sys_sendmsg+0x269/0x350 [ 246.092001][ C0] ? __pfx_futex_wake+0x10/0x10 [ 246.096857][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.101971][ C0] ? j1939_sk_connect+0x442/0x5c0 [ 246.107018][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.112653][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.119001][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.124632][ C0] ? rcu_is_watching+0x15/0xb0 [ 246.129410][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.135049][ C0] ? rcu_is_watching+0x15/0xb0 [ 246.139828][ C0] do_syscall_64+0xf3/0x230 [ 246.144344][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.150246][ C0] RIP: 0033:0x7f4a8c57ff19 [ 246.154657][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.174262][ C0] RSP: 002b:00007f4a8d2c3058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.182681][ C0] RAX: ffffffffffffffda RBX: 00007f4a8c745fa0 RCX: 00007f4a8c57ff19 [ 246.190654][ C0] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 246.198624][ C0] RBP: 00007f4a8c5f3986 R08: 0000000000000000 R09: 0000000000000000 [ 246.206599][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.214602][ C0] R13: 0000000000000000 R14: 00007f4a8c745fa0 R15: 00007ffd2850ba58 [ 246.222597][ C0] [ 246.225832][ C0] Kernel Offset: disabled [ 246.230153][ C0] Rebooting in 86400 seconds..