last executing test programs: 3m59.19026406s ago: executing program 3 (id=152): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800800, &(0x7f00000000c0)={[{@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlate}, {@fat=@debug}, {@numtail}, {@shortname_mixed}, {@fat=@check_strict}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount$nfs(&(0x7f0000000100)='\xd2\xa6.', 0x0, 0x0, 0x44, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3m55.35464121s ago: executing program 3 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mlock2(&(0x7f0000a1b000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000480)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@nodiscard}, {@dax_inode}, {@init_itable}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x80000001}}, {@nombcache}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e4, &(0x7f0000000880)="$eJzs3c9vG1kdAPDvjOP+zJIscFhWYnfFLkpXUDvZ0N2Iw1IkRE+VKOVeQuJEUZw4ip22iSqUijtICAESJ05ckPgDkFD/BIRUCe6oIBCCFg4cACOPxyUNdpK2rqebfD7SdN6bZ+f7fY3yPG/myRPAifVWRFyOiFJEvBsRE/nxNN+udNqvdV/36OGdhc6WRLt9/a9JJPmx3s9K8v35iNiNiDMR8fUrEd9K/j9uc3tndb5er23m9WprbaPa3N65uLI2v1xbrq3Pzs68P/fB3KW56aH0czIiPvzKH3/4vZ999cNfff7W72/8+cK3O2mN5+17+zFM3a6Xs/+LnrGI2HwRwQpQyvflAe3fLY0wGQAADtU5x/94RHwmO/+fiFJ2dgoAAAAcJ+0vjce/koj2Mzn1bG8DAAAARirN1sAmaSVfCzAeaVqpdNfwfjLOpfVGs/W5pcbW+mJ3rexklNOllXptOl8rPBnlpFOfydfY9urv7avPRsSrEfGDibNZvbLQqC8WffEDAAAATojz++b//5jI5v+ni84LAAAAGLLJohMAAAAAXjjzfwAAADj+zP8BAADgWPva1audrd17/vXize2t1cbNi4u15mplbWuhstDY3KgsNxrL2Xf2rR328+qNxsYXYn3rdrVVa7aqze2dG2uNrfXWjZUnHoENAAAAjNCrb977XRIRu188m20dp4pOChiJ5JD27CEhD/LKH0aQEDAypaITAAozVnQCQGHKRScAFO6w6wADF+/8evi5AAAAL8bUpwbf/3dtAI63tOgEAICRc/8fTq7ykysALxWXCVCUjx3S/vz3/9vtp0oIAAAYuvFsS9JKfi9wPNK0Uol4JXssQDlZWqnXpvP5wW8nyqc79Znsncmha4YBAAAAAAAAAAAAAAAAAAAAAAAAgK52O4k2AAAAcKxFpH9Ksm/zj5iaeGd8//WBU8k/J7J9RNz6yfUf3Z5vtTZnOsf/9vh468f58feKuIIBAAAAJ0LpaV7cm6f35vEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEyPHt5Z6G2jjPuXL0fEZN/4b57JdmeiHBHn/p7E2J73JRFRGkL83bsR8Vq/+EknrZiMbhb94p8dQvx23omnjZ9GxPkhxIeT7F5n/Lnc7+8vjbeyff+/v7F8e16Dx780euNfacD488oRY7x+/xfVgfHvRrw+1n/86cVPBsR/+4jxv/mNnZ1Bbe2fRkwNGP/2xqq21jaqze2diytr88u15dr67OzM+3MfzF2am64urdRr+b99Y3z/07/8z0H9P3fA+HtQ/985Yv//ff/2w090i+V+8S+83f/z97UB8dP8s++zebnTPtUr73bLe73x89+8cVD/Fwf0//Hvv88HbSfmhSP2/91r33lwxJcCACPQ3N5Zna/Xa5sfxUIaL0UaCkMpnH450lDoFooemQAAgGH730l/0ZkAAAAAAAAAAAAAAAAAAADAyTWKrxPbH3O3mK4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzovwEAAP//F/DYbQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r6 = dup(r2) write$UHID_INPUT(r6, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 3m52.584075352s ago: executing program 3 (id=173): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000972d2b4bbf72ab59d5414993c6ae00"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000208bc5b52258bc81e733fa83842626a4b3b82660b43e1397d9976a3c5ad5307a666c58a4f21759d8e4e9ed83fcedc5ef85e0e33bd12ede089d06cc748d116b9a58df6bea43b1aa96a7b68b7755d248667ec099c1a87c25055186f8157e9b8229", @ANYRES16=r2, @ANYBLOB="1103fcffffff0000000013000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r5, 0x3) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 3m47.993989267s ago: executing program 3 (id=183): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 3m46.471420769s ago: executing program 3 (id=188): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'sit0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) close(0x3) 3m45.503999696s ago: executing program 3 (id=189): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$cgroup_pid(r4, 0x0, 0x0) 3m29.345390601s ago: executing program 32 (id=189): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$cgroup_pid(r4, 0x0, 0x0) 1m28.509961146s ago: executing program 0 (id=579): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xbc, 0x0, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb583}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8da5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21d3952}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x624a6e81}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5174}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefaa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1338ced0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5215836c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea62}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4554796}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x372}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1m28.398671277s ago: executing program 0 (id=581): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0xb, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, [@sadb_address={0x3, 0x18, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}}, 0x0) 1m28.230605768s ago: executing program 0 (id=586): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x3, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xe, 0x0, 0x3, 0x3ffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000]}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 1m27.067534437s ago: executing program 0 (id=590): r0 = io_uring_setup(0x4162, &(0x7f00000002c0)={0x0, 0x9770, 0x8, 0x3, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, 0x0, 0x0) 1m27.004496108s ago: executing program 0 (id=591): socket$kcm(0x2, 0x3, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, 0x0, 0x2) 1m26.914974948s ago: executing program 0 (id=593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m11.13182963s ago: executing program 33 (id=593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m2.675477985s ago: executing program 4 (id=661): socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 1m1.793551672s ago: executing program 4 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 1m1.634362474s ago: executing program 4 (id=665): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x2, {0x0, 0xff, 0x4}, {0x0, 0x0, 0x4}, 0xfd, 0xfd}, {0x2, 0x1, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, 0xff, 0x2}], 0x40) 1m1.519447765s ago: executing program 4 (id=666): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r4, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r4, &(0x7f0000004b80)={0x2020}, 0x2020) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x85, 0x0, &(0x7f0000005e80)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x20004000) 1m0.118128975s ago: executing program 4 (id=671): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 56.685695332s ago: executing program 4 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0x4000000}}, {{0xa, 0x20, 0x0, @private2}}}, 0x108) read$FUSE(0xffffffffffffffff, &(0x7f0000000fc0)={0x2020}, 0x2020) 56.685574571s ago: executing program 34 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0x4000000}}, {{0xa, 0x20, 0x0, @private2}}}, 0x108) read$FUSE(0xffffffffffffffff, &(0x7f0000000fc0)={0x2020}, 0x2020) 16.943920089s ago: executing program 6 (id=837): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0x40000000]}) 16.7853245s ago: executing program 6 (id=838): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8000000000008, 0x4, 0x0, 0xfffffffffffffa5a, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0) 15.980261387s ago: executing program 2 (id=843): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r2, &(0x7f0000002180)=""/4099, 0x1003) 15.800198528s ago: executing program 6 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x4, 0x20000002, 0x100003) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0xc, 0x7, 0x4}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r6, r5}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) 15.002336304s ago: executing program 2 (id=846): socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 14.824985266s ago: executing program 2 (id=848): ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000005c0)=ANY=[@ANYBLOB="13ffff"]) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x2c8, 0x3d8, 0x3d8, 0x2c8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffffff], 'veth1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x0, 0x2, 0x7, 0x10}, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x7, 0x18, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3}, {0xffffffffffffffff, 0x2, 0x6}, 0x80, 0x1ff}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1}, [0xffffffff, 0xffffff00], [], 'batadv_slave_1\x00', 'bond_slave_1\x00', {}, {}, 0x29, 0x2, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0x13, 0x1, "19"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.782275664s ago: executing program 2 (id=850): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x3, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xe, 0x0, 0x3, 0x3ffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000]}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 12.686017262s ago: executing program 5 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x17, 0x78, 0x1}, 0x18}, 0x1, 0x5502000000000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4092, 0xffc}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12.336406065s ago: executing program 6 (id=856): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r2, &(0x7f0000002180)=""/4099, 0x1003) 11.310932723s ago: executing program 5 (id=860): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x507, 0x0, 0x400, {0x0, 0x0, 0x0, 0x0, 0x10044}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c80}, 0x4000) 11.283459063s ago: executing program 6 (id=861): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x117, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) syz_io_uring_setup(0x2842, &(0x7f00000003c0)={0x0, 0xaa0e, 0x2, 0x0, 0xca}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r8, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x19, 0x0, 0x0, 0x1, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) 9.0928347s ago: executing program 6 (id=865): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x28bc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}}, 0x5000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x9) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x30) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x401, 0x2) 9.09267209s ago: executing program 5 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x4, 0x20000002, 0x100003) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0xc, 0x7, 0x4}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r6, r5}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) 6.005505684s ago: executing program 5 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffff49f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10000000) 5.770641656s ago: executing program 5 (id=871): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r4, &(0x7f0000002180)=""/4099, 0x1003) 4.907188262s ago: executing program 5 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f00000085000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r5, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r8 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r8) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 4.044352469s ago: executing program 1 (id=875): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d40)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4ac08, 0x4600}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x80000001, 0xa12e}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) 3.9944628s ago: executing program 7 (id=876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x101}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x81}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.874497271s ago: executing program 1 (id=877): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r5, &(0x7f0000000040)=""/4122, 0x101a) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 3.86262963s ago: executing program 7 (id=878): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000a9c300000861000000040000006200000000000000ff07000000000000000000c4a083bc61b6b220f8e589b4c843e57ea54a316378b51ae9cb68b997566b6ae7632d746a56df0aae557393a86d000afbc4ab74db026b5da12dc54a49c4421da9c60e84c568dd9b7f0ffb6c6aaa0598b295977df5ad366a0e8370"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfb\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\xd7\x8a\x8cn\x8c\xbeF\xdb.\x15\xdar,\xf0\x92\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'J\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00'/577, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x28, 0x2c, 0x3f, 0x0, 0x0, "", [@nested={0x4}, @typed={0x14, 0x11, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 3.066980717s ago: executing program 1 (id=879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x4, 0x20000002, 0x100003) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0xc, 0x7, 0x4}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r6, r5}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) 2.818603719s ago: executing program 7 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 1.545780558s ago: executing program 7 (id=881): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 1.524771339s ago: executing program 2 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) syz_emit_vhci(&(0x7f00000012c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "0d24b2002987f91c"}}}, 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='sched_switch\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f00000003c0)='pkcs7_test\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000500)="14a0fc15d269a3523a7dea685da36a300909cbe0aba8074bdfe7551333d7016251775fad74a68ddc5e18861e2e6a44a4eba2c2768aff295a2d166fc4048f2b1ee6b772659141fbee0423fdf5d750ae383fa2b1dee861052ec402a4eedbd535332d9219a6b4e01e0c1ef9bb43194f83b66448dfe6d9a03c8c5f0d6091e546a244b05fdd931e73f300f78053d4c832efe6a44022c456361e8fb7b4220b4bff57163b7debb9ec7cdc3d2eb7f07d77c3a78aeb10ac2fc4b5358a3d395828750457674ad03cbec0b7f18994f20edd750563be608a600dfd0c64989c324ff30cabb04850fd", 0xe2, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r8, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) 1.34254072s ago: executing program 7 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mlock2(&(0x7f0000a1b000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000480)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@nodiscard}, {@dax_inode}, {@init_itable}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x80000001}}, {@nombcache}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e4, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r6 = dup(r2) write$UHID_INPUT(r6, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 1.24415528s ago: executing program 1 (id=884): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r4, &(0x7f0000002180)=""/4099, 0x1003) 1.164375351s ago: executing program 1 (id=885): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001580), 0x101600, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtfilter={0x474, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x448, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x9, 0xf1, 0x2, 0x3, 0xe, 0xfff9, 0xb, 0x46, [{0x5, 0x3, 0x7fff, 0x4}, {0x5, 0x10, 0x6, 0x9}]}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x2, 0x6, 0x7fffffff, 0x2, 0x0, 0x2, 0x3, 0x7, 0x6, 0x4e6, 0x4, 0x2, 0xee4, 0x10001, 0x5, 0x2, 0x4, 0xf, 0xbc8, 0x8000, 0xd9, 0x7, 0xe, 0x6, 0x8, 0x6, 0x3, 0x7ff, 0x8, 0x10001, 0xbd9, 0x1, 0x3, 0xe, 0x9, 0x7, 0x5, 0x0, 0x5, 0xb, 0x4, 0x6, 0x101, 0x6, 0xffffffd9, 0x1, 0x21c, 0x7, 0x6, 0xf6, 0x80000001, 0xb, 0x3, 0xa254, 0x4, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x4, 0x1, 0x10000, 0x5, 0x7, 0xfff, 0x1d6, 0x401, 0x6, 0x8, 0xa1, 0x3, 0x4, 0x7, 0x14, 0x5, 0xfffffffc, 0x4, 0x0, 0x9, 0x8, 0x2, 0x1000, 0x7, 0x101, 0xfffffff9, 0x0, 0x0, 0x5, 0x101, 0x1, 0x91e2, 0x99c, 0x7, 0x4, 0x1, 0x7, 0x100, 0xff, 0x1, 0x7f, 0x5, 0x70, 0x8, 0x3, 0x2, 0xd, 0x6, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x2, 0x5eff, 0x4, 0x6, 0xfffffff8, 0x1, 0x3, 0x5, 0xdc, 0x7, 0x5e, 0x8, 0x3, 0x4, 0x1, 0x10000, 0x400, 0x9a, 0xbb0000, 0x7, 0x9, 0x8, 0xfffff895, 0x6, 0x5, 0x4, 0xffff0000, 0xfffffffa, 0x8, 0x5, 0xfffffff7, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xbb, 0x3, 0x1, 0x7, 0x800, 0x5, 0x400, 0x2, 0x3, 0x8, 0x0, 0x0, 0x5, 0x1, 0xfffffff8, 0xf, 0x401, 0x7fffffff, 0x3, 0x839b, 0x4, 0x4, 0x83, 0x0, 0xfffffffd, 0x7ff, 0x1c, 0x5, 0x8, 0x3, 0x8, 0x101, 0x200, 0x1, 0x7, 0xe6, 0x8, 0x10001, 0x4, 0x14ff, 0x7, 0x2, 0x40, 0x7, 0x3, 0x7ec1, 0x6, 0x1, 0x7, 0x5, 0x0, 0x36e13b6, 0x29cd, 0x80, 0x4, 0x800, 0x6, 0x200, 0x400, 0x0, 0x1da4, 0x80, 0xeb, 0xc6, 0x7fff, 0xa8a, 0xb, 0x2, 0x0, 0x2, 0x2, 0x3, 0x8, 0x7, 0x80000000, 0xb4, 0x2, 0xb, 0x989, 0x4, 0xe, 0x2, 0xf2fa, 0x8, 0x9d34, 0x0, 0xfffffffd, 0x113ffdbd, 0x2, 0x7, 0x8, 0x5, 0x576, 0x4, 0x1, 0x8, 0xffffff2e, 0x8, 0x8, 0x80b, 0x7]}]}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0x474}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000fddbdf25020000080000fd040000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 762.588675ms ago: executing program 2 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x4, 0x20000002, 0x100003) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000100)=0x8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0xc, 0x7, 0x4}}) 144.056689ms ago: executing program 1 (id=887): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x8e]}, &(0x7f0000000400)=0x50) 0s ago: executing program 7 (id=888): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0xff68, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7957fbdbfb2aa975531396fdcd06430f49d3102697a185091e299fd98504173205364a39062"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pread64(r0, &(0x7f00000004c0)=""/202, 0xca, 0xffffffffcebd6dfe) preadv(r6, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x3, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): 9 tx timeout [ 47.775921][ T1535] Bluetooth: hci2: command 0x0409 tx timeout [ 47.777685][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 47.778466][ T1535] Bluetooth: hci0: command 0x0409 tx timeout [ 47.780877][ T1535] Bluetooth: hci3: command 0x0409 tx timeout [ 47.788030][ T4030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.829408][ T4030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.869000][ T4030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.942732][ T4031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.987932][ T4031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.020955][ T4031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.057472][ T4031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.182181][ T4025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.212753][ T4025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.248619][ T4025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.313489][ T4025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.349579][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.377706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.381066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.394196][ T4023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.432615][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.444239][ T4023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.509711][ T4023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.560120][ T4023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.613755][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.616163][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.618275][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.619774][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.622217][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.640083][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.642341][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.644579][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.646217][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.648648][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.654369][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.660087][ T4024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.694857][ T4024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.744805][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.747525][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.749574][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.756462][ T4024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.789134][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.790672][ T4024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.854250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.857521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.859727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.877625][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.880149][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.882310][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.883861][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.888544][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.891618][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.902003][ T4030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.904197][ T4030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.914100][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.916379][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.918473][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.920354][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.921845][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.923710][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.927419][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.932520][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.934989][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.938282][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.940465][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.943246][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.967295][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.970099][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.972581][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.001155][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.003701][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.013763][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.016490][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.031527][ T4031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.034486][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.041694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.043800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.052555][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.078240][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.080331][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.091787][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.114822][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.136472][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.138290][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.144424][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.147860][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.149896][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.151321][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.153192][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.170686][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.173244][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.184848][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.196639][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.198362][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.200671][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.202767][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.204225][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.221902][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.223550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.227693][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.229894][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.232016][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.233503][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.236198][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.241196][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.251195][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.252845][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.265274][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.268002][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.269909][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.271361][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.273306][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.278383][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.289380][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.298425][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.303777][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.306169][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.308279][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.310800][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.313041][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.318871][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.321188][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.323453][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.326048][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.327551][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.329398][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.331601][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.333949][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.352586][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.355094][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.358021][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.360089][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.362207][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.363638][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.365523][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.368126][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.373625][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.378137][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.392240][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.395832][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.399375][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.401868][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.404338][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.408936][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.411111][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.417422][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.442316][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.444635][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.450714][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.453137][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.455356][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.461797][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.478965][ T4023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.481571][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.484592][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.488988][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.491734][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.493981][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.504198][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.515970][ T4030] device veth0_vlan entered promiscuous mode [ 49.517950][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.520080][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.522345][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.524292][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.551660][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.553781][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.562043][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.565285][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.570462][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.572504][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.590723][ T4031] device veth0_vlan entered promiscuous mode [ 49.592843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.595179][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.599127][ T4030] device veth1_vlan entered promiscuous mode [ 49.607024][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.609557][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.611197][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.632743][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.646036][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.648826][ T4031] device veth1_vlan entered promiscuous mode [ 49.663598][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.665974][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.668042][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.670246][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.689507][ T4030] device veth0_macvtap entered promiscuous mode [ 49.693841][ T4030] device veth1_macvtap entered promiscuous mode [ 49.713697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.717439][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.719643][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.722056][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.723663][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.725282][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.729024][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.741237][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.787642][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.789835][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.800564][ T4031] device veth0_macvtap entered promiscuous mode [ 49.807018][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.808712][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.810801][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.812889][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.815248][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.819537][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.821850][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.824037][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.827275][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.831577][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.836349][ T4025] device veth0_vlan entered promiscuous mode [ 49.838710][ T4031] device veth1_macvtap entered promiscuous mode [ 49.851277][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.856128][ T4074] Bluetooth: hci3: command 0x041b tx timeout [ 49.861383][ T4074] Bluetooth: hci0: command 0x041b tx timeout [ 49.862745][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.865000][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.867787][ T4074] Bluetooth: hci1: command 0x041b tx timeout [ 49.869212][ T4074] Bluetooth: hci2: command 0x041b tx timeout [ 49.869799][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.870495][ T4074] Bluetooth: hci4: command 0x041b tx timeout [ 49.892971][ T4023] device veth0_vlan entered promiscuous mode [ 49.904704][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.906755][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.908420][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.910102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.912352][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.914733][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.923646][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.933435][ T4030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.941133][ T4030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.942900][ T4030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.944629][ T4030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.950425][ T4025] device veth1_vlan entered promiscuous mode [ 49.957200][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.959542][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.962729][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.970264][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.972590][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.983417][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.992269][ T4023] device veth1_vlan entered promiscuous mode [ 49.997942][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.000255][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.003720][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.014241][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.017894][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.020034][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.022251][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.026688][ T4031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.028689][ T4031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.030505][ T4031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.032286][ T4031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.144541][ T4025] device veth0_macvtap entered promiscuous mode [ 50.155313][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.158306][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.160737][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.163098][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.166473][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.183863][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.194630][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.197848][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.212396][ T4025] device veth1_macvtap entered promiscuous mode [ 50.218446][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.220614][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.222787][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.243589][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.251740][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.253635][ T4023] device veth0_macvtap entered promiscuous mode [ 50.261844][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.263583][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.274294][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.276957][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.278965][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.280917][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.282990][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.292254][ T4024] device veth0_vlan entered promiscuous mode [ 50.294100][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.297744][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.301138][ T4023] device veth1_macvtap entered promiscuous mode [ 50.318088][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.320267][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.322276][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.324391][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.328495][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.332277][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.334631][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.339259][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.341361][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.353401][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.361926][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.364054][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.366520][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.367613][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.368238][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.372381][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.374541][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.377610][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.380449][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.382542][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.384470][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.395006][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.398095][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.400347][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.404343][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.418407][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.420525][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.422375][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.424384][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.431656][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.433843][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.437448][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.451994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.454418][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.457527][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.461214][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.464808][ T4023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.474999][ T4023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.480597][ T4023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.482443][ T4023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.492340][ T4024] device veth1_vlan entered promiscuous mode [ 50.500171][ T4025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.501973][ T4025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.503837][ T4025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.512183][ T4025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.561585][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.563681][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.572838][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.576741][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.593763][ T4024] device veth0_macvtap entered promiscuous mode [ 50.631737][ T4024] device veth1_macvtap entered promiscuous mode [ 50.712144][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.715021][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.775245][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.792341][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.794359][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.802072][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.804139][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.831351][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.840349][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.896160][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.896417][ T4113] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 50.897822][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.908740][ T4113] device syz_tun entered promiscuous mode [ 50.919910][ T4113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 50.922195][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.924382][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.927050][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.929375][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.931617][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.947514][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.949856][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.952216][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.985664][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.988239][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.990724][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.449178][ T4117] loop1: detected capacity change from 0 to 512 [ 51.610723][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.614062][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.673648][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.687091][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.689651][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.726498][ T4117] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.729143][ T4117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.732426][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.734268][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.751577][ T4024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.753504][ T4024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.755214][ T4024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.762270][ T4117] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.765550][ T4117] EXT4-fs (loop1): 1 truncate cleaned up [ 51.766801][ T4117] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 51.801596][ T4024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.835199][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.855331][ T4118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.862326][ T4118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.894093][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.936151][ T4071] Bluetooth: hci4: command 0x040f tx timeout [ 51.937623][ T4071] Bluetooth: hci2: command 0x040f tx timeout [ 51.939396][ T4071] Bluetooth: hci1: command 0x040f tx timeout [ 51.940612][ T4071] Bluetooth: hci0: command 0x040f tx timeout [ 51.955759][ T4071] Bluetooth: hci3: command 0x040f tx timeout [ 51.991248][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.992869][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.999892][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.090853][ T564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.093068][ T564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.096603][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.166570][ T564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.171985][ T564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.177037][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.292075][ T4126] loop3: detected capacity change from 0 to 512 [ 53.003511][ T4126] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 53.014418][ T4126] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 53.018986][ T4131] infiniband syz2: set active [ 53.020333][ T4131] infiniband syz2: added team_slave_1 [ 53.026636][ T4126] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 53.030455][ T4126] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 53.067330][ T4131] infiniband syz2: Couldn't open port 1 [ 53.090161][ T4131] RDS/IB: syz2: added [ 53.091270][ T4131] smc: adding ib device syz2 with port count 1 [ 53.092644][ T4131] smc: ib device syz2 port 1 has pnetid [ 53.106255][ T4126] EXT4-fs (loop3): 1 orphan inode deleted [ 53.107404][ T4126] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 54.113118][ T4074] Bluetooth: hci3: command 0x0419 tx timeout [ 54.114723][ T4074] Bluetooth: hci0: command 0x0419 tx timeout [ 54.135849][ T4074] Bluetooth: hci1: command 0x0419 tx timeout [ 54.180880][ T4074] Bluetooth: hci2: command 0x0419 tx timeout [ 54.182305][ T4074] Bluetooth: hci4: command 0x0419 tx timeout [ 58.019135][ T149] block nbd0: Attempted send on invalid socket [ 58.023998][ T149] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.398419][ T4169] netlink: 368 bytes leftover after parsing attributes in process `syz.3.18'. [ 59.489768][ T4175] loop0: detected capacity change from 0 to 256 [ 59.508960][ T4175] ======================================================= [ 59.508960][ T4175] WARNING: The mand mount option has been deprecated and [ 59.508960][ T4175] and is ignored by this kernel. Remove the mand [ 59.508960][ T4175] option from the mount to silence this warning. [ 59.508960][ T4175] ======================================================= [ 60.520899][ T4187] binder: 4177:4187 ioctl 4018620d 0 returned -22 [ 60.675374][ C0] sched: RT throttling activated [ 60.886382][ T4175] FAT-fs (loop0): Directory bread(block 64) failed [ 60.895574][ T4175] FAT-fs (loop0): Directory bread(block 65) failed [ 60.897068][ T4175] FAT-fs (loop0): Directory bread(block 66) failed [ 60.909165][ T4175] FAT-fs (loop0): Directory bread(block 67) failed [ 60.910573][ T4175] FAT-fs (loop0): Directory bread(block 68) failed [ 60.911946][ T4175] FAT-fs (loop0): Directory bread(block 69) failed [ 60.926925][ T4175] FAT-fs (loop0): Directory bread(block 70) failed [ 60.928510][ T4175] FAT-fs (loop0): Directory bread(block 71) failed [ 61.052217][ T4175] FAT-fs (loop0): Directory bread(block 72) failed [ 61.053776][ T4175] FAT-fs (loop0): Directory bread(block 73) failed [ 65.256372][ T4219] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 65.258071][ T4219] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.27'. [ 66.168204][ T4230] udc-core: couldn't find an available UDC or it's busy [ 66.169670][ T4230] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.575324][ T4225] loop3: detected capacity change from 0 to 32768 [ 66.622994][ T4235] udc-core: couldn't find an available UDC or it's busy [ 66.624611][ T4235] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.642719][ T4215] loop0: detected capacity change from 0 to 32768 [ 66.672513][ T4225] XFS (loop3): Mounting V5 Filesystem [ 66.706239][ T4215] XFS: ikeep mount option is deprecated. [ 66.732638][ T4225] XFS (loop3): Ending clean mount [ 66.752454][ T4215] XFS (loop0): Mounting V5 Filesystem [ 66.884217][ T1535] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 66.892332][ T1535] XFS (loop3): Unmount and run xfs_repair [ 66.894399][ T1535] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 66.900229][ T1535] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 66.902088][ T1535] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 66.912687][ T1535] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 66.915297][ T1535] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 66.919710][ T1535] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 66.922785][ T1535] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.925032][ T1535] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.927826][ T1535] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.930250][ T4225] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 66.930442][ T4215] XFS (loop0): Ending clean mount [ 66.939944][ T4215] XFS (loop0): Quotacheck needed: Please wait. [ 66.944447][ T4225] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 66.947652][ T4225] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 66.974475][ T4215] XFS (loop0): Quotacheck: Done. [ 67.026930][ T4023] XFS (loop3): Unmounting Filesystem [ 67.481401][ T26] audit: type=1326 audit(67.430:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 68.676594][ T26] audit: type=1326 audit(67.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 68.681134][ T26] audit: type=1326 audit(67.440:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 68.704354][ T26] audit: type=1326 audit(67.440:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 68.718995][ T26] audit: type=1326 audit(67.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 69.523029][ T26] audit: type=1326 audit(67.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=196 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 69.532311][ T4025] XFS (loop0): Unmounting Filesystem [ 69.591913][ T26] audit: type=1326 audit(67.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 69.605004][ T26] audit: type=1326 audit(67.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 69.626449][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.627895][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.632884][ T1960] cfg80211: failed to load regulatory.db [ 69.669788][ T26] audit: type=1326 audit(67.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 69.690026][ T26] audit: type=1326 audit(67.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4214 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8baf4e68 code=0x7ffc0000 [ 70.366164][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 72.515191][ T4289] binder: 4284:4289 tried to acquire reference to desc 0, got 1 instead [ 72.548257][ T4289] binder: 4284:4289 got transaction with invalid offsets ptr [ 72.549985][ T4289] binder: 4284:4289 transaction failed 29201/-14, size 0-16 line 3124 [ 72.790369][ T4292] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 74.283733][ T4289] ODEBUG: Out of memory. ODEBUG disabled [ 74.331450][ T4072] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.398461][ T4299] loop1: detected capacity change from 0 to 8192 [ 74.494420][ T4307] loop4: detected capacity change from 0 to 2048 [ 74.654462][ T4289] syz.2.45 (4289): drop_caches: 2 [ 74.660470][ T4307] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 144115188075855874)! [ 74.663027][ T4307] EXT4-fs (loop4): group descriptors corrupted! [ 77.711994][ T4355] udc-core: couldn't find an available UDC or it's busy [ 77.713310][ T4355] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.762926][ T4358] loop3: detected capacity change from 0 to 128 [ 77.939723][ T4358] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.757508][ T4337] loop4: detected capacity change from 0 to 32768 [ 79.027445][ T4375] loop3: detected capacity change from 0 to 256 [ 79.060800][ T4337] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.131899][ T4375] FAT-fs (loop3): Directory bread(block 64) failed [ 79.142998][ T4375] FAT-fs (loop3): Directory bread(block 65) failed [ 79.152320][ T4375] FAT-fs (loop3): Directory bread(block 66) failed [ 79.167730][ T4375] FAT-fs (loop3): Directory bread(block 67) failed [ 79.173454][ T4375] FAT-fs (loop3): Directory bread(block 68) failed [ 79.182310][ T4375] FAT-fs (loop3): Directory bread(block 69) failed [ 79.191603][ T4375] FAT-fs (loop3): Directory bread(block 70) failed [ 79.201137][ T4375] FAT-fs (loop3): Directory bread(block 71) failed [ 79.208430][ T4375] FAT-fs (loop3): Directory bread(block 72) failed [ 79.214713][ T4375] FAT-fs (loop3): Directory bread(block 73) failed [ 79.408283][ T4024] ocfs2: Unmounting device (7,4) on (node local) [ 80.734892][ T4389] loop2: detected capacity change from 0 to 512 [ 83.244752][ T4409] binder: 4378:4409 ioctl 54e3 0 returned -22 [ 83.319355][ T4409] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.321740][ T4409] F2FS-fs (loop3): Unable to read 1th superblock [ 85.392578][ T4409] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.423824][ T4409] F2FS-fs (loop3): Unable to read 2th superblock [ 86.785268][ T4437] loop0: detected capacity change from 0 to 32768 [ 86.908494][ T4437] XFS (loop0): Mounting V5 Filesystem [ 86.996138][ T4440] loop3: detected capacity change from 0 to 32768 [ 87.046504][ T4437] XFS (loop0): Ending clean mount [ 87.049777][ T4437] XFS (loop0): Quotacheck needed: Please wait. [ 87.110574][ T4437] XFS (loop0): Quotacheck: Done. [ 87.157412][ T4440] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.000055][ T4025] XFS (loop0): Unmounting Filesystem [ 89.838268][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 91.066842][ T4479] loop4: detected capacity change from 0 to 256 [ 91.871028][ T4023] ocfs2: Unmounting device (7,3) on (node local) [ 92.318505][ T4479] exfat: Deprecated parameter 'namecase' [ 92.371001][ T4479] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 92.373968][ T4479] exFAT-fs (loop4): failed to load alloc-bitmap [ 92.375250][ T4479] exFAT-fs (loop4): failed to recognize exfat type [ 94.954348][ T4499] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.994373][ T4497] loop1: detected capacity change from 0 to 1024 [ 95.018747][ T4510] loop0: detected capacity change from 0 to 512 [ 95.021295][ T4499] F2FS-fs (loop5): Unable to read 1th superblock [ 95.022932][ T4499] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.231957][ T4499] F2FS-fs (loop5): Unable to read 2th superblock [ 96.458016][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 98.711948][ T136] hfsplus: b-tree write err: -5, ino 4 [ 98.798751][ T4533] udc-core: couldn't find an available UDC or it's busy [ 98.800405][ T4533] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.106097][ T4544] netlink: 76 bytes leftover after parsing attributes in process `syz.2.120'. [ 102.731020][ T4548] loop2: detected capacity change from 0 to 8192 [ 102.931313][ T4562] loop1: detected capacity change from 0 to 512 [ 104.457077][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 104.838778][ T4566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.128'. [ 105.092277][ T4576] netlink: 76 bytes leftover after parsing attributes in process `syz.3.131'. [ 105.109322][ T4581] syz.4.133 uses obsolete (PF_INET,SOCK_PACKET) [ 105.814579][ T4582] binder: 4577:4582 ioctl 54e3 0 returned -22 [ 105.886322][ T4579] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.888609][ T4579] F2FS-fs (loop1): Unable to read 1th superblock [ 105.890082][ T4579] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.892909][ T4579] F2FS-fs (loop1): Unable to read 2th superblock [ 106.967579][ T4594] udc-core: couldn't find an available UDC or it's busy [ 106.969138][ T4594] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.472765][ T4608] udc-core: couldn't find an available UDC or it's busy [ 108.474173][ T4608] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.603191][ T4592] loop0: detected capacity change from 0 to 32768 [ 108.700530][ T4592] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.136 (4592) [ 108.737029][ T4592] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 108.739309][ T4592] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.741619][ T4592] BTRFS info (device loop0): use zstd compression, level 3 [ 108.743055][ T4592] BTRFS info (device loop0): using free space tree [ 108.744431][ T4592] BTRFS info (device loop0): has skinny extents [ 109.140893][ T4592] BTRFS info (device loop0): enabling ssd optimizations [ 109.287006][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 109.907526][ T4638] loop3: detected capacity change from 0 to 512 [ 110.406428][ T4646] binder: 4641:4646 ioctl 54e3 0 returned -22 [ 110.409204][ T4646] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.411429][ T4646] F2FS-fs (loop9): Unable to read 1th superblock [ 110.413538][ T4646] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.415610][ T4646] F2FS-fs (loop9): Unable to read 2th superblock [ 111.291328][ T4613] loop1: detected capacity change from 0 to 40427 [ 111.761673][ T4652] loop4: detected capacity change from 0 to 256 [ 112.731671][ T4652] FAT-fs (loop4): Unrecognized mount option "iocharset" or missing value [ 113.659790][ T4654] udc-core: couldn't find an available UDC or it's busy [ 113.661320][ T4654] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.696771][ T4659] loop3: detected capacity change from 0 to 256 [ 113.985171][ T4661] netlink: 'syz.0.153': attribute type 4 has an invalid length. [ 115.746696][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 116.966946][ T4686] binder: 4680:4686 ioctl 54e3 0 returned -22 [ 116.987772][ T4686] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.990643][ T4686] F2FS-fs (loop9): Unable to read 1th superblock [ 116.995308][ T4686] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.998287][ T4686] F2FS-fs (loop9): Unable to read 2th superblock [ 117.597228][ T4690] netlink: 'syz.4.161': attribute type 10 has an invalid length. [ 117.605624][ T4690] device syz_tun entered promiscuous mode [ 117.625306][ T4693] loop0: detected capacity change from 0 to 512 [ 117.632845][ T4690] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 117.901172][ T4694] loop1: detected capacity change from 0 to 256 [ 118.406096][ T4694] exfat: Deprecated parameter 'namecase' [ 118.410904][ T4698] udc-core: couldn't find an available UDC or it's busy [ 118.412473][ T4698] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.425228][ T4696] loop3: detected capacity change from 0 to 512 [ 118.438908][ T4693] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.441527][ T4693] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 118.443681][ T4693] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.162: Corrupt directory, running e2fsck is recommended [ 118.452692][ T4693] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 118.454596][ T4693] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.162: corrupted in-inode xattr [ 118.469361][ T4693] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.162: couldn't read orphan inode 15 (err -117) [ 118.470275][ T4694] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 118.472776][ T4693] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 118.474435][ T4694] exFAT-fs (loop1): failed to load alloc-bitmap [ 118.480112][ T4694] exFAT-fs (loop1): failed to recognize exfat type [ 120.396449][ T4719] Zero length message leads to an empty skb [ 121.855638][ T4726] binder: 4721:4726 ioctl 54e3 0 returned -22 [ 122.460165][ T4742] loop2: detected capacity change from 0 to 128 [ 122.494547][ T4742] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.510341][ T4742] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.679522][ T4752] loop2: detected capacity change from 0 to 256 [ 123.833976][ T4752] exfat: Deprecated parameter 'namecase' [ 124.115191][ T4752] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 124.120661][ T4752] exFAT-fs (loop2): failed to load alloc-bitmap [ 124.122206][ T4752] exFAT-fs (loop2): failed to recognize exfat type [ 124.979408][ T4763] udc-core: couldn't find an available UDC or it's busy [ 124.988470][ T4763] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.154852][ T4765] loop0: detected capacity change from 0 to 512 [ 125.209614][ T4763] udc-core: couldn't find an available UDC or it's busy [ 125.210996][ T4763] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.350762][ T4758] loop2: detected capacity change from 0 to 32768 [ 126.459883][ T4758] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.461787][ T4758] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.506917][ T4758] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 126.506917][ T4758] inode = 3 8331 [ 126.506917][ T4758] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 126.529750][ T4758] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 126.531950][ T4758] gfs2: fsid=syz:syz.0: File system withdrawn [ 126.546830][ T4758] CPU: 0 PID: 4758 Comm: syz.2.181 Not tainted 5.15.173-syzkaller #0 [ 126.548541][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.550620][ T4758] Call trace: [ 126.551292][ T4758] dump_backtrace+0x0/0x530 [ 126.552149][ T4758] show_stack+0x2c/0x3c [ 126.553013][ T4758] dump_stack_lvl+0x108/0x170 [ 126.553965][ T4758] dump_stack+0x1c/0x58 [ 126.554782][ T4758] gfs2_withdraw+0xeac/0x12a4 [ 126.555781][ T4758] gfs2_consist_inode_i+0xcc/0xe8 [ 126.556867][ T4758] gfs2_inode_refresh+0x964/0xdf4 [ 126.557916][ T4758] inode_go_lock+0xfc/0x390 [ 126.558822][ T4758] do_promote+0x680/0xa80 [ 126.559812][ T4758] finish_xmote+0x478/0xbb4 [ 126.560795][ T4758] do_xmote+0x6e4/0x1054 [ 126.561576][ T4758] run_queue+0x3f8/0x6bc [ 126.562479][ T4758] gfs2_glock_nq+0xa60/0x144c [ 126.563426][ T4758] init_journal+0x268/0x1f6c [ 126.564511][ T4758] init_inodes+0xe0/0x2d8 [ 126.565324][ T4758] gfs2_fill_super+0x1640/0x2010 [ 126.566319][ T4758] get_tree_bdev+0x360/0x54c [ 126.567255][ T4758] gfs2_get_tree+0x54/0x1b4 [ 126.568177][ T4758] vfs_get_tree+0x90/0x274 [ 126.569009][ T4758] do_new_mount+0x278/0x8fc [ 126.569932][ T4758] path_mount+0x594/0x101c [ 126.570835][ T4758] __arm64_sys_mount+0x510/0x5e0 [ 126.571792][ T4758] invoke_syscall+0x98/0x2b8 [ 126.572717][ T4758] el0_svc_common+0x138/0x258 [ 126.573580][ T4758] do_el0_svc+0x58/0x14c [ 126.574476][ T4758] el0_svc+0x7c/0x1f0 [ 126.575340][ T4758] el0t_64_sync_handler+0x84/0xe4 [ 126.576342][ T4758] el0t_64_sync+0x1a0/0x1a4 [ 126.604658][ T4758] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 127.188520][ T4780] binder: 4773:4780 ioctl 54e3 0 returned -22 [ 127.251040][ T4780] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.254629][ T4780] F2FS-fs (loop9): Unable to read 1th superblock [ 127.258959][ T4780] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.262152][ T4780] F2FS-fs (loop9): Unable to read 2th superblock [ 128.031935][ T4788] 9pnet: Unknown protocol version 9p200 [ 128.558378][ T4789] loop4: detected capacity change from 0 to 256 [ 128.605983][ T4789] exfat: Deprecated parameter 'namecase' [ 128.623267][ T4789] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 128.626107][ T4789] exFAT-fs (loop4): failed to load alloc-bitmap [ 128.627453][ T4789] exFAT-fs (loop4): failed to recognize exfat type [ 130.896261][ T4794] loop4: detected capacity change from 0 to 40427 [ 131.144971][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.146292][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.170495][ T4794] F2FS-fs (loop4): invalid crc value [ 131.191858][ T4794] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.615547][ T4829] binder: 4822:4829 ioctl 54e3 0 returned -22 [ 134.916030][ T4829] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.918283][ T4829] F2FS-fs (loop1): Unable to read 1th superblock [ 134.919616][ T4829] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.921816][ T4829] F2FS-fs (loop1): Unable to read 2th superblock [ 135.311421][ T4828] loop4: detected capacity change from 0 to 8192 [ 135.396173][ T4828] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 136.321944][ T4838] loop1: detected capacity change from 0 to 256 [ 136.785924][ T4838] exfat: Deprecated parameter 'namecase' [ 137.894396][ T4838] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 137.897026][ T4838] exFAT-fs (loop1): failed to load alloc-bitmap [ 137.898411][ T4838] exFAT-fs (loop1): failed to recognize exfat type [ 138.851255][ T4847] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 143.265186][ T4873] binder: 4868:4873 ioctl 54e3 0 returned -22 [ 143.270561][ T4872] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.272694][ T4872] F2FS-fs (loop9): Unable to read 1th superblock [ 143.274022][ T4872] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.276265][ T4872] F2FS-fs (loop9): Unable to read 2th superblock [ 144.373332][ T4880] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 144.472866][ T4879] loop4: detected capacity change from 0 to 2048 [ 144.513977][ T4882] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 144.543246][ T4882] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 144.561192][ T4879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.581605][ T4882] bond1: (slave ipip0): making interface the new active one [ 144.701023][ T4882] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 144.929997][ T4892] loop2: detected capacity change from 0 to 256 [ 145.024314][ T4892] exfat: Deprecated parameter 'namecase' [ 145.092076][ T4892] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 145.096192][ T4892] exFAT-fs (loop2): failed to load alloc-bitmap [ 145.097670][ T4892] exFAT-fs (loop2): failed to recognize exfat type [ 145.742893][ T4898] udc-core: couldn't find an available UDC or it's busy [ 145.767490][ T4898] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.990979][ T4903] loop1: detected capacity change from 0 to 2048 [ 147.681866][ T4075] Bluetooth: hci0: command 0x0409 tx timeout [ 147.703992][ T4903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.808593][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.114219][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.280343][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.436082][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.711981][ T4921] binder: 4912:4921 ioctl 54e3 0 returned -22 [ 148.746654][ T4921] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.749720][ T4921] F2FS-fs (loop3): Unable to read 1th superblock [ 148.753313][ T4921] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.756371][ T4921] F2FS-fs (loop3): Unable to read 2th superblock [ 149.193769][ T4916] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(190082175795815) <= P.seqno(0) <= S.SWH(190082175795889)) and (P.ackno exists or LAWL(118168131850745) <= P.ackno(118168131850746) <= S.AWH(118168131850746), sending SYNC... [ 149.574862][ T4887] chnl_net:caif_netlink_parms(): no params data found [ 149.854459][ T4934] loop2: detected capacity change from 0 to 256 [ 150.095221][ T4934] exfat: Deprecated parameter 'namecase' [ 150.169050][ T4934] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 150.174203][ T4934] exFAT-fs (loop2): failed to load alloc-bitmap [ 150.175768][ T4934] exFAT-fs (loop2): failed to recognize exfat type [ 150.372492][ T1960] Bluetooth: hci0: command 0x041b tx timeout [ 150.469374][ T4911] loop4: detected capacity change from 0 to 40427 [ 150.580300][ T4911] F2FS-fs (loop4): invalid crc value [ 150.596956][ T4911] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.958592][ T1960] Bluetooth: hci0: command 0x040f tx timeout [ 154.279056][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.280525][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.282738][ T4887] device bridge_slave_0 entered promiscuous mode [ 154.300413][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.301907][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.319571][ T4887] device bridge_slave_1 entered promiscuous mode [ 154.758073][ T4987] binder: 4974:4987 ioctl 54e3 0 returned -22 [ 154.850267][ T4987] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.853182][ T4987] F2FS-fs (loop1): Unable to read 1th superblock [ 154.856421][ T4987] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.859162][ T4987] F2FS-fs (loop1): Unable to read 2th superblock [ 155.036615][ T4075] Bluetooth: hci0: command 0x0419 tx timeout [ 155.056655][ T4986] loop4: detected capacity change from 0 to 512 [ 155.278285][ T4887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.282114][ T4887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.133788][ T4887] team0: Port device team_slave_0 added [ 157.148931][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 157.148942][ T26] audit: type=1326 audit(157.120:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8baf4e68 code=0x7fc00000 [ 157.167043][ T4887] team0: Port device team_slave_1 added [ 157.264504][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.273357][ T5006] loop0: detected capacity change from 0 to 736 [ 157.276789][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.282364][ T4887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.305335][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.306978][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.332109][ T4887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.527909][ T4887] device hsr_slave_0 entered promiscuous mode [ 157.550417][ T5013] loop1: detected capacity change from 0 to 256 [ 157.824630][ T4887] device hsr_slave_1 entered promiscuous mode [ 158.333930][ T5013] exfat: Deprecated parameter 'namecase' [ 158.416318][ T4887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.417970][ T4887] Cannot create hsr debugfs directory [ 158.541953][ T5013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 158.544736][ T5013] exFAT-fs (loop1): failed to load alloc-bitmap [ 158.547213][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 158.557657][ T5013] exFAT-fs (loop1): failed to recognize exfat type [ 158.749121][ T5032] loop0: detected capacity change from 0 to 512 [ 158.760627][ T4887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.857551][ T4887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.087978][ T4887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.158984][ T4887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.161634][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 160.102174][ T5054] loop2: detected capacity change from 0 to 164 [ 160.130009][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 160.270423][ T5054] rock: directory entry would overflow storage [ 160.271971][ T5054] rock: sig=0x4f50, size=4, remaining=3 [ 160.273103][ T5054] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 161.193232][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 161.236189][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.284969][ T4887] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.300211][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.302629][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.477502][ T4887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.479813][ T4887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.491411][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.494634][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.497375][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.498825][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.508115][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.013114][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.277166][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.278698][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.280723][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.306569][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.319333][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.376604][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.378920][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.404447][ T5089] loop0: detected capacity change from 0 to 512 [ 162.440903][ T4035] block nbd4: Receive control failed (result -32) [ 162.456837][ T4035] block nbd4: Receive control failed (result -32) [ 162.470357][ T5075] block nbd4: shutting down sockets [ 162.506218][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.508403][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.511028][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.513353][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.515353][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.628334][ T136] device hsr_slave_0 left promiscuous mode [ 162.724057][ T136] device hsr_slave_1 left promiscuous mode [ 163.031193][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.046772][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.148555][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.255258][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.301076][ T136] device bridge_slave_1 left promiscuous mode [ 163.302707][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.351010][ T136] device bridge_slave_0 left promiscuous mode [ 163.352431][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.585905][ T136] device veth1_macvtap left promiscuous mode [ 163.587596][ T136] device veth0_macvtap left promiscuous mode [ 163.588861][ T136] device veth1_vlan left promiscuous mode [ 163.590176][ T136] device veth0_vlan left promiscuous mode [ 163.910756][ T5104] loop2: detected capacity change from 0 to 32768 [ 165.116592][ T5104] (syz.2.271,5104,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.126710][ T5104] (syz.2.271,5104,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.165207][ T5104] JBD2: Ignoring recovery information on journal [ 165.233283][ T5104] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 166.990818][ T136] team0 (unregistering): Port device team_slave_1 removed [ 167.013555][ T4030] ocfs2: Unmounting device (7,2) on (node local) [ 167.021417][ T136] team0 (unregistering): Port device team_slave_0 removed [ 167.055072][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.109607][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.193402][ T5141] loop2: detected capacity change from 0 to 512 [ 167.420220][ T136] bond0 (unregistering): Released all slaves [ 168.311576][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.313779][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.316946][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.336469][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 168.358665][ T4887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.427499][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.429387][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.156614][ T4188] Bluetooth: hci3: command 0x0406 tx timeout [ 170.159857][ T4188] Bluetooth: hci1: command 0x0406 tx timeout [ 170.162312][ T4188] Bluetooth: hci2: command 0x0406 tx timeout [ 171.065948][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.068142][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.115933][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.118168][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.120408][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.123253][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.134288][ T4887] device veth0_vlan entered promiscuous mode [ 171.961616][ T4887] device veth1_vlan entered promiscuous mode [ 172.101415][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.103553][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.105853][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.110528][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.128856][ T4887] device veth0_macvtap entered promiscuous mode [ 172.133800][ T4887] device veth1_macvtap entered promiscuous mode [ 172.174938][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.195672][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.197618][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.199622][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.201568][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.203653][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.226177][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.228177][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.231471][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.233040][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.235344][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.240898][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.265953][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.267979][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.270184][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.276895][ T5192] loop0: detected capacity change from 0 to 512 [ 172.288279][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.290513][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.325600][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.327694][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.329739][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.335273][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.347802][ T4887] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.349615][ T4887] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.351212][ T4887] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.353305][ T4887] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.456072][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.458292][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.624980][ T332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.627382][ T332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.634891][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.640481][ T4221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.641690][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 172.642276][ T4221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.664675][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.105668][ T4206] Bluetooth: hci4: command 0x0406 tx timeout [ 177.274735][ T5246] input: syz0 as /devices/virtual/input/input3 [ 177.660594][ T5258] loop0: detected capacity change from 0 to 512 [ 177.887256][ T5259] loop4: detected capacity change from 0 to 512 [ 178.531263][ T5261] udc-core: couldn't find an available UDC or it's busy [ 178.532835][ T5261] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.540799][ T5259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.593083][ T5259] EXT4-fs (loop4): 1 truncate cleaned up [ 178.594430][ T5259] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 179.809381][ T5243] loop5: detected capacity change from 0 to 256 [ 179.937539][ T5243] exfat: Deprecated parameter 'namecase' [ 180.775317][ T5243] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 180.805783][ T5243] exFAT-fs (loop5): failed to load alloc-bitmap [ 180.807180][ T5243] exFAT-fs (loop5): failed to recognize exfat type [ 181.114477][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 182.439617][ T5318] loop2: detected capacity change from 0 to 512 [ 182.583593][ T5321] netlink: set zone limit has 8 unknown bytes [ 184.544614][ T5332] loop2: detected capacity change from 0 to 512 [ 184.660249][ T5340] loop0: detected capacity change from 0 to 256 [ 184.827472][ T5332] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.648728][ T5340] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 189.936690][ T5392] udc-core: couldn't find an available UDC or it's busy [ 189.938117][ T5392] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 190.516260][ T5415] loop2: detected capacity change from 0 to 2048 [ 190.744743][ T5415] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.759028][ T5404] loop5: detected capacity change from 0 to 32768 [ 192.600044][ T5404] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.345 (5404) [ 192.710826][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.712239][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.771211][ T4029] Bluetooth: hci0: link tx timeout [ 192.772408][ T4029] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.884891][ T5454] udc-core: couldn't find an available UDC or it's busy [ 192.915841][ T5454] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 193.397093][ T5404] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 193.398994][ T5404] BTRFS info (device loop5): enabling auto defrag [ 193.404444][ T5404] BTRFS info (device loop5): setting nodatasum [ 193.411441][ T5404] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 193.413775][ T5404] BTRFS info (device loop5): trying to use backup root at mount time [ 193.436243][ T5404] BTRFS info (device loop5): turning on sync discard [ 193.440917][ T5404] BTRFS info (device loop5): using free space tree [ 193.442273][ T5404] BTRFS info (device loop5): has skinny extents [ 193.614928][ T5404] BTRFS error (device loop5): open_ctree failed [ 193.663719][ T4017] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by udevd (4017) [ 193.941965][ T5451] loop2: detected capacity change from 0 to 256 [ 194.176588][ T5498] binder: 5489:5498 ioctl 54e3 0 returned -22 [ 194.213932][ T5498] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.216807][ T5498] F2FS-fs (loop1): Unable to read 1th superblock [ 194.219943][ T5498] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.222597][ T5498] F2FS-fs (loop1): Unable to read 2th superblock [ 194.700363][ T5451] exfat: Deprecated parameter 'namecase' [ 194.737645][ T5451] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 194.766923][ T5451] exFAT-fs (loop2): failed to load alloc-bitmap [ 194.773885][ T5451] exFAT-fs (loop2): failed to recognize exfat type [ 194.815540][ T4072] Bluetooth: hci0: command 0x0406 tx timeout [ 194.816054][ T4073] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 194.818638][ T4073] Bluetooth: hci3: Injecting HCI hardware error event [ 194.821723][ T4029] Bluetooth: hci3: hardware error 0x00 [ 196.158293][ T5524] loop4: detected capacity change from 0 to 512 [ 197.486579][ T5524] EXT4-fs (loop4): Ignoring removed orlov option [ 197.487933][ T5524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.546005][ T26] audit: type=1326 audit(197.500:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.1.375" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a575e68 code=0x0 [ 197.699872][ T5524] EXT4-fs (loop4): 1 truncate cleaned up [ 197.701223][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 198.476962][ T5555] binder: 5546:5555 ioctl 54e3 0 returned -22 [ 198.538431][ T5555] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.542378][ T5555] F2FS-fs (loop5): Unable to read 1th superblock [ 198.550272][ T5555] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.554688][ T5555] F2FS-fs (loop5): Unable to read 2th superblock [ 199.737947][ T5567] input: syz1 as /devices/virtual/input/input4 [ 202.752255][ T5592] loop1: detected capacity change from 0 to 1024 [ 203.270694][ T5597] binder: 5590:5597 ioctl 54e3 0 returned -22 [ 204.067103][ T5597] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x20) [ 204.068845][ T5597] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 204.071662][ T5597] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 204.073288][ T5597] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 204.264755][ T5607] loop5: detected capacity change from 0 to 512 [ 204.375807][ T5615] loop0: detected capacity change from 0 to 1764 [ 205.297769][ T5607] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.360577][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 205.481604][ T5614] sctp: failed to load transform for md5: -4 [ 205.481967][ T5628] sctp: failed to load transform for md5: -2 [ 209.314399][ T5684] loop1: detected capacity change from 0 to 2048 [ 209.586797][ T5692] loop4: detected capacity change from 0 to 8 [ 209.635633][ T5684] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 209.680662][ T5692] SQUASHFS error: xz decompression failed, data probably corrupt [ 209.682541][ T5692] SQUASHFS error: Failed to read block 0x108: -5 [ 209.683821][ T5692] SQUASHFS error: Unable to read metadata cache entry [106] [ 209.685305][ T5692] SQUASHFS error: Unable to read inode 0x11f [ 209.759041][ T5696] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.771854][ T5684] ebt_among: src integrity fail: 300 [ 210.135077][ T5708] loop0: detected capacity change from 0 to 256 [ 210.204153][ T5704] loop1: detected capacity change from 0 to 4096 [ 210.227594][ T5708] exfat: Deprecated parameter 'namecase' [ 210.236432][ T5708] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 210.239322][ T5708] exFAT-fs (loop0): failed to load alloc-bitmap [ 210.240870][ T5708] exFAT-fs (loop0): failed to recognize exfat type [ 210.264752][ T5704] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 213.427231][ T4935] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 213.680504][ T5758] loop1: detected capacity change from 0 to 256 [ 214.663461][ T5758] FAT-fs (loop1): Unrecognized mount option "iocharset" or missing value [ 214.696241][ T4935] usb 1-1: Using ep0 maxpacket: 16 [ 216.031555][ T4935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.081648][ T4935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.297913][ T5777] loop4: detected capacity change from 0 to 256 [ 216.675502][ T4935] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 216.677761][ T4935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.886305][ T4935] usb 1-1: config 0 descriptor?? [ 216.905676][ T4935] usb 1-1: can't set config #0, error -71 [ 216.917412][ T4935] usb 1-1: USB disconnect, device number 2 [ 218.942313][ T5806] loop1: detected capacity change from 0 to 64 [ 219.760703][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 219.781301][ T5815] udc-core: couldn't find an available UDC or it's busy [ 219.782690][ T5815] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 219.790950][ T5806] hfs: get root inode failed [ 220.335690][ T4073] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 220.695871][ T4073] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 220.699368][ T4073] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.702136][ T4073] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.704005][ T4073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.723309][ T4073] usb 1-1: config 0 descriptor?? [ 220.737068][ T5824] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.761099][ T4073] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 223.042016][ T5878] udc-core: couldn't find an available UDC or it's busy [ 223.085458][ T5878] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 223.104109][ T4074] usb 1-1: USB disconnect, device number 3 [ 225.594120][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 225.765186][ T5913] netlink: 76 bytes leftover after parsing attributes in process `syz.2.449'. [ 227.112630][ T5937] loop4: detected capacity change from 0 to 512 [ 227.882099][ T5937] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.457: bg 0: block 393: padding at end of block bitmap is not set [ 227.935171][ T5937] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 227.946350][ T5937] EXT4-fs (loop4): 2 truncates cleaned up [ 227.947560][ T5937] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.064762][ T5949] udc-core: couldn't find an available UDC or it's busy [ 228.073337][ T5949] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 229.221320][ T5958] netlink: 76 bytes leftover after parsing attributes in process `syz.4.463'. [ 230.721104][ T5972] binder: 5970:5972 tried to acquire reference to desc 0, got 1 instead [ 230.725182][ T5972] binder: 5970:5972 transaction failed 29201/-28, size 0-0 line 3085 [ 230.928088][ T4074] binder: undelivered TRANSACTION_COMPLETE [ 230.929709][ T4074] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.123040][ T4071] binder: undelivered transaction 23, process died. [ 232.285971][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.288677][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.783610][ T5990] binder: 5981:5990 ioctl 54e3 0 returned -22 [ 232.855461][ T5990] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.858302][ T5990] F2FS-fs (loop11): Unable to read 1th superblock [ 232.861797][ T5990] blk_update_request: I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.864744][ T5990] F2FS-fs (loop11): Unable to read 2th superblock [ 233.284656][ T5996] udc-core: couldn't find an available UDC or it's busy [ 233.286400][ T5996] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.494831][ T5999] dlm: non-version read from control device 84 [ 233.702910][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 236.704470][ T6026] trusted_key: encrypted_key: key user:syz not found [ 237.558486][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 237.563084][ T6035] IPVS: Error joining to the multicast group [ 238.495864][ T6044] xt_CT: No such helper "syz1" [ 238.654624][ T6049] xt_CT: No such helper "syz1" [ 239.758926][ T6073] udc-core: couldn't find an available UDC or it's busy [ 239.760558][ T6073] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.824276][ T6077] udc-core: couldn't find an available UDC or it's busy [ 240.845537][ T6077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.883944][ T6057] loop2: detected capacity change from 0 to 32768 [ 241.042599][ T6057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.495 (6057) [ 241.062528][ T6057] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 241.064451][ T6057] BTRFS info (device loop2): turning on sync discard [ 241.552760][ T6057] BTRFS info (device loop2): setting nodatacow, compression disabled [ 241.577590][ T6057] BTRFS error (device loop2): unrecognized commit_interval value 0x0000000080000001 [ 241.829795][ T6057] BTRFS error (device loop2): open_ctree failed [ 241.830787][ T4015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4015) [ 242.130491][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 242.468541][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 242.472383][ T6102] device ipip1 entered promiscuous mode [ 243.344028][ T6108] binder: 6107:6108 unknown command 1074291477 [ 243.345306][ T6108] binder: 6107:6108 ioctl c0306201 200002c0 returned -22 [ 244.558378][ T6117] udc-core: couldn't find an available UDC or it's busy [ 244.559917][ T6117] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 251.845717][ T6170] udc-core: couldn't find an available UDC or it's busy [ 251.847212][ T6170] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 252.186050][ T6170] udc-core: couldn't find an available UDC or it's busy [ 252.187710][ T6170] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 254.214523][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.215963][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.221574][ T6196] udc-core: couldn't find an available UDC or it's busy [ 254.223092][ T6196] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 254.386701][ T6173] loop1: detected capacity change from 0 to 40427 [ 254.418222][ T6173] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 254.419675][ T6173] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 254.462376][ T6173] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.628443][ T6173] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 254.629958][ T6173] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 255.913421][ T6218] netlink: 76 bytes leftover after parsing attributes in process `syz.5.548'. [ 258.525171][ T6239] netlink: 760 bytes leftover after parsing attributes in process `syz.4.554'. [ 261.696956][ T4074] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 262.475556][ T4074] usb 1-1: Using ep0 maxpacket: 8 [ 263.359121][ T6309] udc-core: couldn't find an available UDC or it's busy [ 263.361861][ T6309] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 263.506523][ T4074] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 263.508615][ T4074] usb 1-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.584998][ T6309] udc-core: couldn't find an available UDC or it's busy [ 263.586726][ T6309] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 264.111375][ T6327] netlink: 'syz.5.578': attribute type 4 has an invalid length. [ 264.155686][ T4074] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 264.157675][ T4074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.159360][ T4074] usb 1-1: Product: syz [ 264.160163][ T4074] usb 1-1: Manufacturer: syz [ 264.161077][ T4074] usb 1-1: SerialNumber: syz [ 264.221959][ T4074] hso 1-1:6.0: Can't find BULK IN endpoint [ 264.260373][ T4074] usb 1-1: USB disconnect, device number 4 [ 264.335087][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 264.355562][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 268.539751][ T6386] nfs: Bad value for 'source' [ 280.968014][ T6482] sp0: Synchronizing with TNC [ 281.935515][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 282.006739][ T6472] loop4: detected capacity change from 0 to 40427 [ 282.021505][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 282.115248][ T6498] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 282.162696][ T6472] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 282.164127][ T6472] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 282.215876][ T6472] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.099348][ T6472] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 283.101048][ T6472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 283.111818][ T6513] binder: 6512:6513 tried to acquire reference to desc 0, got 1 instead [ 283.114928][ T4013] binder: release 6512:6513 transaction 31 out, still active [ 283.120830][ T4013] binder: undelivered TRANSACTION_COMPLETE [ 283.131764][ T4013] binder: send failed reply for transaction 31, target dead [ 284.298985][ T6528] binder: 6527:6528 tried to acquire reference to desc 0, got 1 instead [ 284.306434][ T4206] Bluetooth: hci5: command 0x0409 tx timeout [ 284.318600][ T6528] binder: 6527:6528 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 284.333171][ T6377] Set syz1 is full, maxelem 65536 reached [ 284.333907][ T6528] binder: 6528 RLIMIT_NICE not set [ 284.345225][ T6528] binder: undelivered transaction 36, put_user failed [ 284.350496][ T6528] binder: 6527:6528 ioctl c0306201 20000680 returned -14 [ 284.360772][ T4013] binder: undelivered TRANSACTION_COMPLETE [ 284.869678][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 285.788531][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.793461][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.802592][ T6495] device bridge_slave_0 entered promiscuous mode [ 285.815234][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.825247][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.834145][ T6495] device bridge_slave_1 entered promiscuous mode [ 285.885955][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.902341][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.966032][ T6495] team0: Port device team_slave_0 added [ 285.977892][ T6495] team0: Port device team_slave_1 added [ 285.986036][ T4072] Bluetooth: hci6: command 0x1003 tx timeout [ 285.987421][ T4029] Bluetooth: hci6: sending frame failed (-49) [ 286.061745][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.068960][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.081276][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.090189][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.093924][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.124456][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.244902][ T6495] device hsr_slave_0 entered promiscuous mode [ 286.285742][ T6495] device hsr_slave_1 entered promiscuous mode [ 286.343319][ T4072] Bluetooth: hci5: command 0x041b tx timeout [ 286.468426][ T6495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 286.507249][ T6495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 286.547232][ T6495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.598981][ T6495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 286.675276][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.676903][ T6495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.678635][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.680019][ T6495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.682455][ T6556] udc-core: couldn't find an available UDC or it's busy [ 286.684836][ T6556] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 286.731315][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.736822][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.739080][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.742706][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 286.756517][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.758617][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.768743][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.772865][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.775255][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.777722][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.779310][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.809076][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.811344][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.814372][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.816070][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.834993][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.840833][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.847516][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.857464][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.861810][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.868577][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.873149][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.993090][ T6495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.995306][ T6495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.004468][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.006820][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.009345][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.011531][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.017987][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.038439][ T6578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.654'. [ 288.073603][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.075290][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.093123][ T4014] Bluetooth: hci6: command 0x1001 tx timeout [ 288.095081][ T4029] Bluetooth: hci6: sending frame failed (-49) [ 288.100085][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.415604][ T4071] Bluetooth: hci5: command 0x040f tx timeout [ 290.140910][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.166726][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.215843][ T4071] Bluetooth: hci6: command 0x1009 tx timeout [ 290.265989][ T6495] device veth0_vlan entered promiscuous mode [ 290.268081][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.270500][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.272712][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.282136][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.292505][ T6495] device veth1_vlan entered promiscuous mode [ 290.319832][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.322021][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.324318][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.327896][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.342944][ T6495] device veth0_macvtap entered promiscuous mode [ 290.348710][ T6495] device veth1_macvtap entered promiscuous mode [ 290.367055][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.369302][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.381515][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.383680][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.386075][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.388328][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.390147][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.402135][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.404200][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.414302][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.417815][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.419380][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.421566][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.445073][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.455335][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.463282][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.465958][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.467906][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.470099][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.472076][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.474089][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.485749][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.488088][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.490262][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.493463][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.505100][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.505431][ T4074] Bluetooth: hci5: command 0x0419 tx timeout [ 290.511282][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.513582][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.522811][ T6495] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.524583][ T6495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.527844][ T6495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.531962][ T6495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.615657][ T4221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.618165][ T4221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.621715][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 290.663663][ T4221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.665853][ T4221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.669455][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.918704][ T6606] loop6: detected capacity change from 0 to 256 [ 290.966020][ T6606] exfat: Deprecated parameter 'namecase' [ 291.007399][ T6606] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 291.009981][ T6606] exFAT-fs (loop6): failed to load alloc-bitmap [ 291.011183][ T6606] exFAT-fs (loop6): failed to recognize exfat type [ 291.193179][ T6611] tmpfs: Unknown parameter 'usrquota' [ 294.622827][ T26] audit: type=1326 audit(294.590:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.6.676" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e626e68 code=0x7ffc0000 [ 294.652820][ T26] audit: type=1326 audit(294.620:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.6.676" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e626e68 code=0x7ffc0000 [ 294.687400][ T26] audit: type=1326 audit(294.660:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.6.676" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=90 compat=0 ip=0xffff8e626e68 code=0x7ffc0000 [ 294.692367][ T6641] capability: warning: `syz.6.676' uses 32-bit capabilities (legacy support in use) [ 294.694588][ T26] audit: type=1326 audit(294.660:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.6.676" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e626e68 code=0x7ffc0000 [ 294.717360][ T6646] binder: 6645:6646 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 294.720104][ T6646] binder: 6646 RLIMIT_NICE not set [ 294.721196][ T26] audit: type=1326 audit(294.670:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.6.676" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e626e68 code=0x7ffc0000 [ 295.513693][ T6651] loop1: detected capacity change from 0 to 256 [ 295.716466][ T6654] udc-core: couldn't find an available UDC or it's busy [ 295.717973][ T6654] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 295.726187][ T6651] exfat: Deprecated parameter 'namecase' [ 295.735755][ T6651] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 295.738381][ T6651] exFAT-fs (loop1): failed to load alloc-bitmap [ 295.739726][ T6651] exFAT-fs (loop1): failed to recognize exfat type [ 295.918971][ T4024] bond0: (slave syz_tun): Releasing backup interface [ 298.257755][ T4074] Bluetooth: hci1: command 0x0409 tx timeout [ 299.095908][ T6696] capability: warning: `syz.2.695' uses deprecated v2 capabilities in a way that may be insecure [ 299.467727][ T6706] loop1: detected capacity change from 0 to 256 [ 299.679232][ T6667] chnl_net:caif_netlink_parms(): no params data found [ 300.689446][ T25] Bluetooth: hci1: command 0x041b tx timeout [ 300.791303][ T6706] exfat: Deprecated parameter 'namecase' [ 300.837727][ T6706] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 300.840420][ T6706] exFAT-fs (loop1): failed to load alloc-bitmap [ 300.841870][ T6706] exFAT-fs (loop1): failed to recognize exfat type [ 301.927629][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.929121][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.931291][ T6667] device bridge_slave_0 entered promiscuous mode [ 301.963253][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.994591][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.997048][ T6667] device bridge_slave_1 entered promiscuous mode [ 302.042357][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.051926][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.134184][ T6667] team0: Port device team_slave_0 added [ 302.137533][ T6667] team0: Port device team_slave_1 added [ 302.149945][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.151503][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.156874][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.160524][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.161884][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.166944][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.677856][ T6742] loop6: detected capacity change from 0 to 512 [ 302.818945][ T4074] Bluetooth: hci1: command 0x040f tx timeout [ 302.927665][ T6742] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 302.932500][ T6667] device hsr_slave_0 entered promiscuous mode [ 302.954630][ T6742] EXT4-fs (loop6): 1 truncate cleaned up [ 302.955967][ T6742] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 302.969083][ T6749] udc-core: couldn't find an available UDC or it's busy [ 302.970791][ T6749] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 302.976477][ T6667] device hsr_slave_1 entered promiscuous mode [ 303.015565][ T6667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.018352][ T6667] Cannot create hsr debugfs directory [ 303.180303][ T6667] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.211816][ T6753] udc-core: couldn't find an available UDC or it's busy [ 303.213487][ T6753] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 303.220013][ T6667] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.240631][ T6667] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.306061][ T6667] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.470890][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.482404][ T6667] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.484321][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.675592][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.151871][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.158458][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.163091][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.164540][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.362550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.456560][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.462885][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.469845][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.471554][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.486339][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.527015][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.570191][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.572961][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.581651][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.586351][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.591921][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.597114][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.613959][ T6667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.628180][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.637224][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.639604][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.642058][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.863499][ T6769] loop1: detected capacity change from 0 to 256 [ 304.896059][ T4076] Bluetooth: hci1: command 0x0419 tx timeout [ 305.176892][ T6769] exfat: Deprecated parameter 'namecase' [ 305.191448][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.204967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.205278][ T6769] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 305.209064][ T6769] exFAT-fs (loop1): failed to load alloc-bitmap [ 305.210463][ T6769] exFAT-fs (loop1): failed to recognize exfat type [ 305.246255][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.519050][ T6790] tipc: Started in network mode [ 305.533534][ T6790] tipc: Node identity ac1414aa, cluster identity 4711 [ 305.549216][ T6790] tipc: Enabled bearer , priority 10 [ 305.595669][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.598048][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.633724][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.636609][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.640030][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.644540][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.649373][ T6667] device veth0_vlan entered promiscuous mode [ 305.669130][ T6667] device veth1_vlan entered promiscuous mode [ 305.708704][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.710921][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 305.713264][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.716356][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.728294][ T6667] device veth0_macvtap entered promiscuous mode [ 305.733139][ T6667] device veth1_macvtap entered promiscuous mode [ 305.771836][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.774056][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.787998][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.796873][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.804385][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.810835][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.811642][ T6781] loop5: detected capacity change from 0 to 512 [ 305.815743][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.817809][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.819854][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.822109][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.824181][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.826528][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.829807][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.831919][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 305.922825][ T6781] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 306.062472][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.146723][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.387029][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.541142][ T6781] EXT4-fs (loop5): 1 truncate cleaned up [ 306.542435][ T6781] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 306.681101][ T4075] tipc: Node number set to 2886997162 [ 306.689536][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.691799][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.693656][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.699217][ T6801] netlink: 176 bytes leftover after parsing attributes in process `syz.1.726'. [ 306.705532][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.707612][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.709624][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.711798][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.714358][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.726004][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.728475][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.730540][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.732569][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.754066][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.758936][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.762168][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.772611][ T6667] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.774498][ T6667] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.789168][ T6667] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.791010][ T6667] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.949525][ T332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.952346][ T332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.955868][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.984964][ T4753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.986909][ T4753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.990206][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.126916][ T6810] udc-core: couldn't find an available UDC or it's busy [ 307.128454][ T6810] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 308.535805][ T6825] xt_nat: multiple ranges no longer supported [ 309.465556][ T6830] trusted_key: encrypted_key: insufficient parameters specified [ 311.930769][ T26] audit: type=1326 audit(311.900:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa529fe68 code=0x7ffc0000 [ 311.938438][ T26] audit: type=1326 audit(311.910:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa529fe68 code=0x7ffc0000 [ 311.989380][ T26] audit: type=1326 audit(311.910:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa529fe68 code=0x7ffc0000 [ 311.993747][ T26] audit: type=1326 audit(311.910:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa529fe68 code=0x7ffc0000 [ 312.120004][ T6873] tipc: Enabled bearer , priority 10 [ 313.176362][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 313.188441][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 313.530830][ T6880] device syz_tun entered promiscuous mode [ 313.556061][ T6880] device batadv_slave_1 entered promiscuous mode [ 313.576412][ T6888] loop6: detected capacity change from 0 to 512 [ 313.597765][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 313.603592][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 313.715795][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 314.174296][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 315.428511][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.428606][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.686782][ T4074] Bluetooth: hci0: command 0x0406 tx timeout [ 317.985712][ T6933] loop5: detected capacity change from 0 to 512 [ 318.598271][ T6933] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 318.627432][ T6933] EXT4-fs (loop5): 1 truncate cleaned up [ 318.628739][ T6933] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 320.107283][ T6955] process 'syz.2.777' launched '/dev/fd/5' with NULL argv: empty string added [ 323.189110][ T4221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.823211][ T4221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.217727][ T4221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.253532][ T7002] loop6: detected capacity change from 0 to 512 [ 324.307622][ T4221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.307475][ T7018] fuse: Unknown parameter '0x0000000000000005' [ 329.152534][ T7073] udc-core: couldn't find an available UDC or it's busy [ 329.154176][ T7073] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 329.780206][ T7085] binder: 7083:7085 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 329.897284][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 329.929514][ T7091] device bond1 entered promiscuous mode [ 330.351148][ T7102] bpf_jit: unknown atomic op code 50 [ 333.536959][ T4076] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 333.540040][ T4076] Bluetooth: hci1: Injecting HCI hardware error event [ 333.541899][ T4035] Bluetooth: hci1: hardware error 0x00 [ 333.561698][ T4221] device hsr_slave_0 left promiscuous mode [ 334.348351][ T4221] device hsr_slave_1 left promiscuous mode [ 334.466159][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.467926][ T4221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.489953][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.491571][ T4221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.549084][ T4221] device bridge_slave_1 left promiscuous mode [ 334.552413][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.737497][ T4221] device bridge_slave_0 left promiscuous mode [ 334.738973][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.055749][ T4221] device veth1_macvtap left promiscuous mode [ 335.057067][ T4221] device veth0_macvtap left promiscuous mode [ 335.058763][ T4221] device veth1_vlan left promiscuous mode [ 335.059935][ T4221] device veth0_vlan left promiscuous mode [ 336.449935][ T4221] team0 (unregistering): Port device team_slave_1 removed [ 336.467074][ T4221] team0 (unregistering): Port device team_slave_0 removed [ 336.475208][ T4221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.522530][ T4221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.594464][ T7187] udc-core: couldn't find an available UDC or it's busy [ 336.598739][ T7187] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 336.602204][ T7187] udc-core: couldn't find an available UDC or it's busy [ 336.603969][ T7187] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 336.742285][ T4221] bond0 (unregistering): Released all slaves [ 338.097581][ T7217] udc-core: couldn't find an available UDC or it's busy [ 338.102631][ T7217] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 338.345884][ T7223] syz.1.847 uses old SIOCAX25GETINFO [ 340.216552][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 340.254555][ T7242] udc-core: couldn't find an available UDC or it's busy [ 340.263542][ T7242] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 340.701109][ T7256] netlink: 'syz.7.855': attribute type 15 has an invalid length. [ 346.886883][ T4273] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 348.201483][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 348.912861][ T25] Bluetooth: hci2: command 0x1003 tx timeout [ 348.914350][ T4032] Bluetooth: hci2: sending frame failed (-49) [ 349.172028][ T7351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 349.174121][ T7351] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 351.318196][ T4188] Bluetooth: hci2: command 0x1001 tx timeout [ 351.320405][ T4032] Bluetooth: hci2: sending frame failed (-49) [ 351.825702][ T7381] loop7: detected capacity change from 0 to 512 [ 352.121516][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 352.909914][ T7397] page:00000000f2c598c2 refcount:4 mapcount:1 mapping:000000009b4f28c2 index:0x0 pfn:0x12a8eb [ 352.912428][ T7397] memcg:ffff0000d7a80000 [ 352.913328][ T7397] aops:shmem_aops ino:527 [ 352.914162][ T7397] flags: 0x5ffc00000080015(locked|uptodate|lru|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 352.916187][ T7397] raw: 05ffc00000080015 fffffc00037bf908 fffffc0003aa3a08 ffff0000ed6f0fc0 [ 352.917911][ T7397] raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000d7a80000 [ 352.919704][ T7397] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 352.921273][ T7397] ------------[ cut here ]------------ [ 352.922373][ T7397] kernel BUG at mm/filemap.c:166! [ 352.923743][ T7397] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 352.925439][ T7397] Modules linked in: [ 352.926346][ T7397] CPU: 1 PID: 7397 Comm: syz.1.887 Not tainted 5.15.173-syzkaller #0 [ 352.928124][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.930263][ T7397] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 352.931917][ T7397] pc : unaccount_page_cache_page+0x600/0x744 [ 352.933132][ T7397] lr : unaccount_page_cache_page+0x600/0x744 [ 352.934389][ T7397] sp : ffff8000204770a0 [ 352.935289][ T7397] x29: ffff8000204770a0 x28: dfff800000000000 x27: 1ffff0000408ee78 [ 352.937037][ T7397] x26: 1fffff8000754759 x25: dfff800000000000 x24: fffffc00037bf908 [ 352.938707][ T7397] x23: 0000000000000000 x22: fffffc00037bf908 x21: fffffc0003aa3ac8 [ 352.940415][ T7397] x20: ffff0000ed6f0fc0 x19: fffffc0003aa3ac0 x18: 0000000000000002 [ 352.942078][ T7397] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff [ 352.943780][ T7397] x14: ffff0000d6f68000 x13: 0000000000000001 x12: 0000000000000001 [ 352.945521][ T7397] x11: 0000000000000001 x10: 0000000000000000 x9 : 9301007a97e93100 [ 352.947174][ T7397] x8 : 9301007a97e93100 x7 : 0000000000000001 x6 : 0000000000000001 [ 352.948869][ T7397] x5 : ffff800020476518 x4 : ffff800014c405e0 x3 : ffff800008555e80 [ 352.950628][ T7397] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 0000000000000036 [ 352.952459][ T7397] Call trace: [ 352.953122][ T7397] unaccount_page_cache_page+0x600/0x744 [ 352.954438][ T7397] __delete_from_page_cache+0xc8/0x6d4 [ 352.955614][ T7397] delete_from_page_cache+0x108/0x17c [ 352.956695][ T7397] truncate_inode_page+0x98/0xc8 [ 352.957803][ T7397] shmem_undo_range+0x448/0x1460 [ 352.958912][ T7397] shmem_evict_inode+0x1c4/0x844 [ 352.960073][ T7397] evict+0x418/0x894 [ 352.960892][ T7397] iput+0x744/0x824 [ 352.961692][ T7397] dentry_unlink_inode+0x37c/0x4bc [ 352.962830][ T7397] __dentry_kill+0x324/0x5e4 [ 352.963805][ T7397] dentry_kill+0xc8/0x250 [ 352.964766][ T7397] dput+0x21c/0x458 [ 352.965583][ T7397] __fput+0x494/0x800 [ 352.966450][ T7397] ____fput+0x20/0x30 [ 352.967357][ T7397] task_work_run+0x130/0x1e4 [ 352.968351][ T7397] do_notify_resume+0x262c/0x32b8 [ 352.969459][ T7397] el0_svc+0xfc/0x1f0 [ 352.970286][ T7397] el0t_64_sync_handler+0x84/0xe4 [ 352.971381][ T7397] el0t_64_sync+0x1a0/0x1a4 [ 352.972303][ T7397] Code: f004b181 91158021 aa1303e0 94036c7e (d4210000) [ 352.973754][ T7397] ---[ end trace 565509bd611b63eb ]--- [ 353.508540][ T7397] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 353.510171][ T7397] SMP: stopping secondary CPUs [ 353.511082][ T7397] Kernel Offset: disabled [ 353.512104][ T7397] CPU features: 0x8,000081c1,21302e40 [ 353.513228][ T7397] Memory Limit: none [ 354.014537][ T7397] Rebooting in 86400 seconds..