last executing test programs: 20.391434795s ago: executing program 2 (id=905): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x34000000, @local}}}, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x60000014}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r7, 0x0, 0x60000007, 0x0) r8 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='(\x91\x00', r8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) io_setup(0xa2, &(0x7f0000000080)) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 18.160838431s ago: executing program 2 (id=909): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffff, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0xa0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe62, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x26c2}, 0x28) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40210020}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1a495ef400"/18, @ANYRES16=r10, @ANYBLOB="00022cbd7000fddbdf256400000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="34006cc49a49f71a9ef1173eb16ec7880545e8712f7b004b693c98030000", @ANYRES16=r8, @ANYBLOB="09080000000000000000010000001c0002800c00018008000100070000000c000180080001000600000004000180"], 0x34}}, 0x0) 16.441331033s ago: executing program 2 (id=915): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f00000004c0)=""/2, 0x1b, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x135801, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffde4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007915b00000000000c60000000000000095000000000000003081fdb3acf1c09592eff7a0e385a35daef45fe5efcad3892e88e5eb3581a5ef15f50d4dc761fd47f0445812c78973e2717f750c1f1239e1244e2d4f98cfd2814d8a49dd4a00e78b5283477c675b41dd1debb9052a19ddf96070958d62d70ea1555ebf4ad12153739b910555a7f4e2ec67074f3022b17d7347539d7195e60595cff7a53b151fe8bdb11c401383678e251a3781f8763c05052e1be716e1e7acd495bccca6abcb5ae60145404e6419398885198d4cc95494a85a1f5672297ddb140000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.298089403s ago: executing program 2 (id=918): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cachetag=@&&#!,dfltgid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0]) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x20, 0x2d) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000003c0), &(0x7f0000000240)='./bus\x00', 0x2810801, &(0x7f0000000280)=ANY=[], 0x6, 0x1d6, &(0x7f0000000040)="$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") ioctl$SG_IO(r2, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x60, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)='\n\v\x00\b\x00\x00', &(0x7f0000000600)=""/218, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r6}, 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) shutdown(r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x9, 0x0, 0x2, 0x414d6714bf78e135}, 0x9c) 11.223630432s ago: executing program 2 (id=927): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000080000904000000ff05"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x16, 0x11, "011600c01b4caef8fa03a052a70f94ffe3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, &(0x7f0000000340)=0x8) r4 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = userfaultfd(0x80001) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}}}, &(0x7f0000000180)=0xe4) r8 = socket$xdp(0x2c, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000000280)) sendmsg$nl_generic(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x14c, 0x2f, 0x400, 0x70bd27, 0x25dfdbfb, {0x8}, [@generic="fd7bafabba91d4a2464b2d9b391dfe5b9d65d13411edfe1bc774245347236e778f2ab7e863ed39d911dddf690b0ad6b9f58c448657eb4828dc92d9ee307b7e271b90fb0d06c8240dfcc75a07e10b3987ad63ebc42a68e431e3e74bc5", @generic="99ca1b19b4a30c68d7f50675f449bd3c8ce73165380693ddcb7536cd133a0cc1b7543f70057994f5805f518fc17f04732c00f27d56b6e5c1839678ecdd661d2d8312448539b81ef4b0b054314a296c1f9608db1da8756ffb86e857486007bd790b6cae83010b1855c3e87ab61be46bd3c1629e35087ad6749affd0def062940acc8560c5cf6e4cbc9c123e7c515946b575ea05ea6048d3790a1230b2a9de851b4ab7c16367f39007ce60807b17649e7067515aacbd18620f8bbc9a541c8f4d81ec312129cd228e9d34bb947c44b019b055e4", @typed={0x8, 0x12d, 0x0, 0x0, @uid=r7}]}, 0x14c}}, 0x20000000) openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x13, r8, 0x480db000) r9 = userfaultfd(0x80001) pwritev(r4, &(0x7f0000002500)=[{&(0x7f0000000140)="16", 0x1}], 0x1, 0x1507, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 10.094708781s ago: executing program 3 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000b7080000000000007b8af8ff0000000005000000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0edffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000001c0)={r8}, 0x8) write(r6, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r6, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e14e73ed2e3c00000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d0001000000"], 0x3c}}, 0x0) 10.00233095s ago: executing program 1 (id=930): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x58}, 0x1, 0x7}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000400)=""/192, 0xc0}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x1e4e, &(0x7f0000000180)={0x0, 0x9012, 0x10, 0x0, 0x9b, 0x0, r0}, &(0x7f0000000240), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x10, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 9.850064423s ago: executing program 3 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88be, 0x88a8ffff}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x4040400) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv6_deladdrlabel={0x4c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x4c}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) 8.556726006s ago: executing program 3 (id=935): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000100)) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000540)="6237ea76a99f1cb66ebd252b7b95139a94ebaf9c9d887302c9056f019edc758989770610205b52a3ecf567d8950f2f726f2e02720c214208051ceefb1c5b94a0570e433db8eb9e59a3fdfdda5e611e51941acde5c4c42d413e0610052faf0badb97669a60e8b9d47c6051c8b30208e6c28e5547e08049b499378594ce8b56e3c8286b5482947abd880cbe18fef47a013da68534cb2286a768c3e88f13fc7c72cc947a465f21c84a807aab2f497"}, 0x50) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r6) syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, 0x0) ftruncate(r5, 0x2007ffb) r7 = open(&(0x7f0000000000)='./bus\x00', 0x519d01, 0x52) sendfile(r5, r7, 0x0, 0x1000000201002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x0, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0xf5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @noop, @ssrr={0x89, 0x0, 0xbb, [@multicast1, @multicast1]}, @generic={0x88, 0x0, "d732"}, @ssrr={0x89, 0x0, 0x8c}, @noop, @rr={0x7, 0x0, 0x14, [@private=0xa010101, @multicast1, @local, @empty, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x5}}, @ip_tos_int], 0x48, 0x4c00}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") 7.852815829s ago: executing program 2 (id=937): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$eJzs3c9vG1kdAPDvOL+cbHaTXfYACNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ0LghuXckDiRwRqKnHwasaT1E3tJm0SO4o/H2k08+Y5830v7rxnf934BTC0rkXEXkSMR8QnETGTn0/yLT5sb+njHu3fXT7Yv7ucRKv18b+TrD49Fx0/k3olv2YxIn7yg4ifJ8/Gbezsri9Vq5WtdnFyrlnbnGvs7N5cqy2tVlYrG+Xy4sLi/Pu33iufW1/fqo3nR199+Ke97/wybdZ0fqazH+ep3fWxozip0Yj40UUEG4CRvD/jg24IL6UQEW9ExNvZ/T8TI9mzCQBcZa3WTLRmOssAwFVXyHJgSaGU5wKmo1Aoldo5vDdjqlCtN5o37tS3N1baubLZGCvcWatW5vNc4WyMJWl5ITt+Ui4fK9+KiNcj4lcTk1m5tFyvrgzyhQ8ADLFXjs3//5toz/8AwBVXHHQDAIC+M/8DwPAx/wPA8DH/A8DwMf8DwPAx/wPA8DH/A8BQ+fFHH6Vb6yD//uuVT3e21+uf3lypNNZLte3l0nJ9a7O0Wq+vZt/ZUzvpetV6fXPh3dj+bPa7m43mXGNn93atvr3RvJ19r/ftylhfegUAPM/rbz34axIRex9MZlt0rOVgroarrTDoBgADMzLoBgADc7TalwXcYOic4T2+9ABcEV2W6H1KMSImj59stVqti2sScMGuf0n+H4ZVR/7f/wKGISP/D8NrdNANAAam1UpOu+Z/nPaBAMDlJscP9Pj8/418//v8w4GfrRx/xP2LbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbofr/5bytcCno1AolSJejYjZGEvurFUr8xHxWkT8ZWJsIi0vDLjNAMBZFf6R5Ot/XZ95Z/p47XjyeCLbR8QvfvPxrz9baja3/pye/89Ekp9v3s/PlwfSAQDgBIfzdLbveCP/aP/u8uHWz/b88/sRUWzHP9gfj4Oj+KMxmu2LMRYRU/9N8nJb0pG7OIu9exHxxW79T2I6y4G0Vz49Hj+N/Wpf4xeeil/I6tr79HfxhXNoCwybB+n482G3+68Q17J99/u/mI1QZ5ePf+mllg+yMfBJ/MPxb6TH+HfttDHe/eMP20eTz9bdi/jyaMRh7IOO8ecwftIj/junjP+3r3zt7V51rd9GXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnH//1nvluSxHPdd7NvjXBzde61WX9n+qR/ziCf3/5in7/7v/f/LTrz8n/re/0S1+Id58Tvx0TvzWKeMvTf2h2Ksujb/So/8nPf83Thn/4d93n1k2HAAYnMbO7vpStVrZ6ufB4QuJvgZ18CIHI3G+F4yIvXO4Tvqv5lL8frocfK9fscbjhX6q1XqpWL1GjPPIugGXwdFNHxGPB90YAAAAAAAAAAAAAACgq378xdKg+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9XkAAAD///ogzOo=") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_getscheduler(r3) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x5b, &(0x7f00000001c0)}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000680)="75deb70b723fffa36fcf3317a924c34bc37d24b291624336926d914b24f5062bbe9d5e7772507326e0d2d9ea73e57c0901cbb933d85cc1f7dc20a9cc57d98820af40e026f92b855d0150d86fcdcd8c9ca983363d0f2bdd5b7f1a0c485737875d02da01670f63b7bc0cd9cca2014bbfbe581562c2f70c9ff9b487993f2954df090701ee41fbac150e3b2ee3d73ee65bd5ab", 0x91}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="6d26e22a483023ebddbb97c38cb738e025a6f5909a9be5df3aa7999c7c9cbb4db15d9f2500da63d510a37209185d56b34b5a7c2c2dcb529eeef33a787c3187a46ea913354960edce95fe155af38ab0c4a5419772db163f78301f719b1ad5ba0f70a7c66efffa1636d3d92ad6b54fba14dce2cba837c188a2201c309295a0785c555826dc6f06883939dae0e572f7c48c3f004bb6208f2101ad275011ad413dad4e25a8beef4b910b6be30a99d6738d457129df17e5", 0xb5}, {&(0x7f0000001800)="0775f1ed0b4008b23c8aff7134ae5f020b01737026d6355242a4d44e04d7627b1e78fa848fd303245fac86c17deb2bca03fb6f60672851e55dc9f34ebcfddeb692b27fe856b6aaa29765567a2846321a759c8202f2d12ba877fc53755fafbceeb15c1ba1687e53a11f312e15d44eaa5da8d63a20476d65e4486f2567a1c01971c8b5946d93b1781cd10f7bb58d66ba8f6180677bd6b777f9b7d268920053b85b8cca7ff4b1bee7ad145d8770bc0a3ed488cc1021bf6ad8d869aa3acc4997df170ece1512067b4f4dfbd54c", 0xcb}], 0x4, 0x450e, 0x8) 7.575803203s ago: executing program 3 (id=939): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1100) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffe, 0x1, 0x3}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x78}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x0, 0x100000}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x0}}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x284840, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 6.624854417s ago: executing program 0 (id=941): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000010520000042cbd7000fedbdf250208000607ab"], 0x24}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xac}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/53, 0x328000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000e00)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010700000000000000000700"], 0x18}], 0x1}, 0x0) 6.460889981s ago: executing program 3 (id=942): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000004200)=ANY=[], 0x21, 0x14fe, &(0x7f0000001f40)="$eJzs3Au0jtXWOPA511oPm6Q3yX3NNR/etLFIklyS5JIkyZEkt4QkSZKkcr8lIQm5J7mH5BaS+/2We5Ik7SQJyS1Z/6HT+XRO5/v3ne873zDGt+dvjGfsNd/nneuZ65177Od53j3e97sOg6rUq1qxDjPD/wj+9UdXAEgBgL4AcA0ARABQMlvJbJf2Z9LY9X92EPHv9eDUK12BuJKk/+mb9D99k/6nb9L/9E36n75J/9M36X/6Jv0XIj3bOi33tbKl303e/0/P5Pz/f0ha0dFfrS96fcd/IUX6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rP//nvH8r+D/wvblf79E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRPpwNlxkA+Nv4StclhBBCCCGEEEKIf5+Q8UpXIIQQQgghhBBCiP99CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEGyEVCkFhKAIeikIxuAmKw81QAm6BknArlILboDSUgbJQDm6H8nAHVIA7oSLcBZWgMlSBqnA3VIN7oDrcCzXgPqgJ90MteABqw1+gDjwIdeEhqAcPQ314BBpAQ2gEjaHJfyv/RXgJXobO0AW6QjfoDj2gJ/SC3tAH+sIr0A9SfnttBsIgeB0GwxswBN6EoTAMhsNbMAJGwigYDWNgLIyDt2E8vAMT4F2YCJNgMkyBqTANpsN7MANmwix4H2bDBzAH5sI8mA8L4ENYCItgMXwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPEv5p/5h/yOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwBw35sJcmAfzYD7Mh4SEjIz5MT8mMYkFsSCmYioWxsLo0WMxLIbF8WYsgSWwJJbEUlgKS2MZLIPlsByWx/JYAStgRayIlbASVsEqeDfejfdgdayONbAG1sSaWAtrYVre2lgH62BdrIv1sB7Wx/rYABtgI2yETbAJNsWm2AybYQtsgS2xJbbCVtgaW2MbbINtsS22w3bYHttjB+yAHfEFfAFfxBfxZXwZu2Al1Q27Y3fsiT2xN/bBPvgK9sNX8VV8DQfgQByEr+Pr+AYOwdM4FIfhcByO5dVIHIWjkdVYHIfjcDyOxwk4ASfiJJyEU3AqTsPpOB1n4Eycie/jbPwAP8C5OBfn4wJcgAtxES7GxbgEz+BSXIbLcQWuxFW4EtfgWlyD63EDrsdNuAm34Bb8BD/B7bgdd+JO3I0GAD/Fz/AzHID7cT8ewAN4EA/iITyEaZiGh/EwHsEjeBSP4jE8hsfxBJ7EE3gKT+FpPINn8Syex/N4AZ/L803d3YXWDQB1iVFGZVAZVIpKUZlVZpVFZVFZVVaVUAmVTWVT2VV2lUPlULlULpVH5VH51DlFihSrWOVX+VVSJVVBVVClqlRVWBVWXnlVTBVTxVVxVUKVUCXVraqUuk2VVmVUc19OlVPlVQtfQd2pKqqKqpKqrKqoqqqqqqaqqeqquqqhaqiaqqaqpR5QtVU3DCGES52ppwZifTUIG6iGqpFqrN7AR1VTNQSbqeaqhXpcDcOh2Eo19a3VU6qNGoVt1TNqND6r2qux2EE9rzqqF1Qn9aJ6STXznVUXNRG7qe5qCvZUvVRv1UfNwMrqUseqqNfUADVQDVKvq/n4hhqi3lRD1TA1XL2lRqiRapQarcaosaqKfluNV++oCepdNVFNUpPVFDVVTVPT1XtqhpqpZqn31Wz1gZqj5qp5ar5aoD5UC9UitVh9pJaoj9VStUwtVyvUSrVKrVZr1Fq1Tq1XG9RGtUltVlvUVvWJ2qa2qx1qp9qldqs96lO1V32m9qnP1X71hTqgvlQH1VfqkPpapalv1GH1rTqivlNH1ffqmPpBHVcn1En1ozqlflKn1Rl1Vp1T59XP6oL6RV1UQYFGrbTWRkc6g86oU3QmnVlfpbPoq3VWfY1O6Gt1Nn2dzq6v1zl0Tp1L59Z5dF6dT1tN2mnWsc6vC+ikvkEX1DfqVF1IF9ZFtNdFdTF9ky6ub9Yl9C26pL5Vl9K36dK6jC6ry+nbdXl9h66g79QV9V26kq6sq+iq+m5dTd+jq+t7dQ19n66p79e19AO6tv6LrqMf1HX1Q7qefljX14/oBrqhbqQb6yb6Ud1UP6ab6ea6hX5ct9RP6Fb6Sd1aP6Xb6Kd1W/2Mbqef1e31c7qDfl531C/oTvoXfVEH3Vl30V11N91d99A9dS/dW/fRffUrup9+VffXr+kBeqAepF/Xg/Ubeoh+Uw/Vw/Rw/ZYeoUfqUXq0HqPH6nH6bT1ev6Mn6Hf1RD1JT9ZT9FQ9Tff+baZZ/4X8d/5Jfv9fj75Fb9Wf6G16u96hd+pderfeo/fovXqv3qf36f16vz6gD+iD+qA+pA/pNJ2mD+vD+og+oo/qo/qYPqaP6xP6nP5Rn9I/6dP6jD6jz+nz+ry+8NtrAAaNMtoYE5kMJqNJMZlMZnOVyWKuNlnNNSZhrjXZzHUmu7ne5DA5TS6T2+QxeU0+Yw0ZZ9jEJr8pYJLmBvztpGkKmyLGm6KmmLnpX8k3Bc2NJtUU+rv8P6uviWlimpqmpplpZlqYFqalaWlamVamtWlt2pg2pq1pa9qZdqa9aW86mA6mo+loOplO5iXzkulsOpuupqvpbnqYnqaX6W36mL7mFdPP9DP9TX8zwAwwg8wgM9gMNkPMEDPUDDXDzXAzwowwo8woM8aMMePMODPejDcTzAQz0Uw0k81kM9VMNdPNdDPDzDCzzCwz28w2c8wcM8/MMwvMArPQLDSLzWKzxCwxS80ys8ysMCvMKrPKrDFrzDqzzmwwG8wms8kszbjVbDXbzDazw+wwu8wus8fsMXvNXrPP7DP7zX5zwBwwB81Bc8gcMmkmzRw2h80Rc8QcNUfNMXPMHDfHzUlz0pwyp8xpc9qcNWfNeXPeXDAXzEVz8dJlX6QildFEJsoQZYhSopQoc5Q5yhJlibJGWaNElIiyRdmi7NH1UY4oZ5Qryh3lifJG+SIbUeQijuIof1QgSkY3RAWjG6PUqFBUOCoS+ahoVCy6KSoe3RyViG6JSka3RqWi26LSUZmobFQuuj0qH90RVYjujCpGd0WVospRlahqdHdULbonqh7dG9WI7otqRvdHtaIHotrRX6I60YNR3eihqF70cFQ/eiRqEDWMGkWNoyb/1vlDOJ3zMd/ZdrFdbTfb3fawPW0v29v2sX3tK7affdX2t6/ZAXagHWRft4PtG3aIfdMOtcPscPuWHWFH2lF2tB1jx9px9m073r5jJ9h37UQ7yU62U+xUO81Ot+/ZGXamnWXft7PtB3aOnWvn2fl2gf3QLrSL7GL7kV1iP7ZL7TK73K6wK+0qu9qusWvtOrvebrAb7Sa72W6xW+0ndpvdbnfYnXaX3W332E/tXvuZ3Wc/t/vtF/aA/dIetF/ZQ/Zrm2a/sYftt/aI/c4etd/bY/YHe9yesCftj/aU/cmetmfsWXvOnrc/2wv2F3vRhksX95dO72TIUAbKQCmUQpkpM2WhLJSVslKCEpSNslF2yk45KAflolyUh/JQPspHlzAx5af8lKQkFaSClEqpVJgKkydPxagYFafiVIJKUEkqSaWoFJWm0lSWytLtdDvdQXfQnXQn3UV3UWWqTFWpKlWjalSdqlMNqkE1qSbVolpUm2pTHapDdaku1aN6VJ/qUwNqQI2oETWhJtSUmlIzakYtqAW1pJbUilpRa2pNbagNtaW21I7aUXtqTx2oA3WkjtSJOtFL9BJ1ps7UlbpSd+pOPakn9abe1Jf6Uj/qR/2pPw2gATSIBtFgGkxDaAgNpWE0nN6iETSSRtFoGkNjaRyNo/E0nibQBJpIE2kyTaapNJWm03SaQTNoFs2i2TSb5tAcmkfzaAEtoIW0kBbTYlpCS2gpLaXltJxW0kpaTatpLa2l9bSeNtJG2kybaSttpW20jXbQDtpFu2gP7aG9tJf20T7aT/vpAB2gg3SQDtEhSqM0OkyH6QgdoaN0lI7RMTpOx+kknaRTdIpO02k6S2fpPP1MF+gXukiBUlwml9ld5bK4q11Wd437xzgX5nZ5XF6Xz1mXw+V0udzlmJxzqa6QK+yKOO+KumLuJpd66Zbqd3FpV8aVdeXc7a68u8NV+ENczd3jqrt7XQ13n6vq7v67uKa739VyD7va7hFXxzV0dV1jV8897Oq7R1wD19A1co1dS/eEa+WedK3dU66Ne/oP8UK3yK1169x6t8HtdZ+5s+6cO+K+c+fdz66z6+L6uldcP/eq6+9ecwPcwD/Ew91bboQb6Ua50W6MG/uHeLKb4qa6aW66e8/NcDP/EC9wH7rZbrGb4+a6eW7+r/Glmha7j9wS97Fb6pa55W6FW+lWudVuzX/UusJtcpvdFrfHfeq2ue1uh9vpdrndv8aX1rHPfe72uy/cYfetO+i+cofcUZfmvvk1vrS+o+57d8z94I67E+6k+9Gdcj+50+7Mr+u/tPYf3S/uogsOGFmxZsMRZ+CMnMKZODNfxVn4as7K13CCr+VsfB1n5+s5B+fkXJyb83BezseWiR0zx5yfC3CSb+CCfCOnciEuzEXYc1Euxjdxcb6ZS/AtXJJv5VJ8G5fmMlyWy/HtXJ7v4Ap8J1fku7gSV+YqXJXv5mp8D1fne7kG38c1+X6uxQ9wbf4L1+EHuS4/xPX4Ya7Pj3ADbsiNuDE34Ue5KT/Gzbg5t+DHuSU/wa34SW7NT3Ebfprb8jPcjp/l9vwcd+DnuSO/wJ34RX6JX+bO3IW7cjfuzj24J/fi3tyH+/Ir3I9f5f78Gg/ggTyIX+fB/AYP4Td5KA/j4fwWj+CRPIpH8xgey+P4bR7P7/AEfpcn8iSezFN4Kk/j6fwez+CZPIvf59n8Ac/huTyP5/MC/pAX8iJezB/xEv6Yl/IyXs4reCWv4tW8htfyOl7PG3gjb+LNvIW38ie8jbfzDt7Ju3g37+FPeS9/xvv4c97PX/AB/pIP8ld8iL/mNP6GD/O3fIS/46P8PR/jH/g4n+CT/COf4p/4NJ/hs3yOz/PPfIF/4YscGGKMVaxjE0dxhjhjnBJnijPHV8VZ4qvjrPE1cSK+Ns4WXxdnj6+Pc8Q541xx7jhPnDfOF9uYYhdzHMf54wJxMr4hLhjfGKfGheLCcZHYx0XjYvFNcfH45rhEfEtcMr41LhXfFpeOy8QP31cuvj0uH98RV4jvjCvGd8WV4spxlbhqfHdcLb4nrh7fG9eI74tLxPfHteIHYvjt8yp144fievHDcf34kbhB3DBuFDeOm8SPxk3jx+JmcfO4Rfx43DJ+Im4VPxm3jp+K28RP/+n+rnG3uHvcI+4Rh3Cvnpecn1yQ/DC5MLkouTj5UXJJ8uPk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklmQIVTOCR6+89sZHPoPP6FN8Jp/ZX+Wz+Kt9Vn+NT/hrfTZ/nc/ur/c5fE6fy+f2eXxen89bT9559rHP7wv4pL/BF/Q3+lRfyBf2Rbz3RX0x39g38U18U/+Yb+ab+xb+cf+4f8I/4Z/0T/qnfBv/tG/rn/Ht/LO+vX/OP+ef9x39C76Tf9G/5F/2nX0X39V39d19d9/T9/S9fW/f1/f1/Xw/39/39wP8AD/ID/KD/WA/xA/xQ/1QP9wP9yP8CD/Kj/Jj/Bg/zo/z4/14P8FP8BP9RD/ZT/ZT/VQ/3U/3M/wMP8vP8rNTZ/s5fo6f5+f5BX6BX+gX+sV+sV/il/ilfqlf7pf7lX6lX+1X+7V+rV/v1/uNfqPf7Df7rX6r3+a3+R1+h9/ld/k9fo/f6/f6fX6f3+/3+wP+gD/oD/pD/muf5r/xh/23/oj/zh/13/tj/gd/3J/wJ/2P/pT/yZ/2Z/xZf86f9z/7C/4Xf9EHPy7xdmJ84p3EhMS7iYmJSYnJiSmJqYlpiemJ9xIzEjMTsxLvJ2YnPkjMScxNzEvMTyxIfJhYmFiUWJz4KLEk8XFiaWJZYnliRWJlYlUihLzb4pA/FAjJcEMoGG4MqaFQKByKBB+KhmLhplA83BxKhFtCyXBrKBVuC6VDmVA2PBIahIahUWgcmoRHQ9PwWGgWmocW4fHQMjwRWoUnQ+vwVGgTng5twzOhXXg2tA/PhQ7h+dDxb3dc4eXQOXQJXUO30D30CD1Dr9A79Al9wyuhX3g19A+vhQFhYBgUXg+DwxthSHgzDA3DwvDwVhgRRoZRYXQYE8aGceHtMD68EyaEd8PEMClMDlPC1DAtTA/vhRlhZpgV3g+zwwdhTpgb5oX5YUH4MCwMi8Li8FFYEj4OS8OysDysCCvDqrA6rAlrw7qwPmwIG8OmsDlsCVvDJ2Fb2B52hJ1hV9gd9oRPw97wWdgXPg/7wxfhQPgyHAxfhUPh65AWvgmHw7fhSPguHA3fh2Phh3A8nAgnw4/hVPgpnA5nwtlwLpwPP4cL4ZdwUT6zJoQQQgjxX9LjT/Z3+yePGQBQv427A8DV23On/X6/BoCNOf467qXytEwAwFNdOjz4t61Spa5du/723KUaogJzASDxDwf4LV4GLeAJaA3Nofg/ra+XeuE8/8n8yVsBMv8uJwUux5fn//I/mf/Rx4cvLBWfzfb/mX8uQGqByzmZ4HK8DFpcWg00hxL/yfw5m/5J/Zm+GgfQ7Hc5WeByfLn+YvAYPA2t/+6ZQgghhBBCCCHEX/VSZdv92f3zpfvzPOZyTka4HP/Z/bkQQgghhBBCCCGuvGdf6PTko61bN28nAxnIQAb/MbjSf5mEEEIIIYQQ/26XL/ovP5bpShYkhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKkQ7/70q9MAPC/8nViV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2/wIAAP//w9U2Qg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x300) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000240)) sendmsg$nl_xfrm(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0) 5.852046975s ago: executing program 0 (id=944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0xb, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x2, 0x335, &(0x7f0000000500)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000400000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) 4.974752072s ago: executing program 1 (id=945): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000001c0)={0x18, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r2], 0x18}, 0x0) close(r2) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) modify_ldt$write(0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@setlink={0x58, 0x13, 0x1, 0x0, 0x25dfdbfe, {}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x78, 0x7, @private2}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.878687541s ago: executing program 3 (id=947): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x53}, 0x0}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000140)={0x3, 0x4}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x22, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40022041}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB], 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02000100"/13], 0x11) socket$kcm(0x2, 0x2, 0x73) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() getpgid(0x0) 4.684890068s ago: executing program 4 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000480)={0x8, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200)=@target={'target ', {'PCI:', '13', ':', '18', ':', '16', '.', '15'}}, 0x17) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r2, &(0x7f00000000c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)}}, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.594964095s ago: executing program 0 (id=949): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 4.593435526s ago: executing program 4 (id=950): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) socket$isdn(0x22, 0x2, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000020c0)={0x2, 0x4e20, @loopback}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "8c4f71a14c58b7e91b7594e94c2a226d8ac0ee26db5d7c27907d61d68dfbb45079055ad86fa0ff1418a5d146bdf66d0d640ce9de2c134b62cb718f8462bc9c"}, 0x60) 3.433880358s ago: executing program 4 (id=951): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_io_uring_setup(0x0, &(0x7f0000000380), 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1c36, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x1, 0x106, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000480)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x701, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r8, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) write$binfmt_script(r0, 0x0, 0x0) 3.418055089s ago: executing program 1 (id=952): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xed49, 0x0, 0x0, 0x0, 0xdf76}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@loopback, 0x0, 0x2, 0x33}}, 0x28}}, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000001000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x75, &(0x7f0000000000), 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x0, 'sit0\x00', 0x3}, 0x18) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) 3.29358193s ago: executing program 4 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000080)) fcntl$setlease(r4, 0x400, 0x0) dup3(r5, r4, 0x0) r6 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)) accept4$unix(r6, &(0x7f0000000340), &(0x7f0000000180)=0x6e, 0x0) 3.251664724s ago: executing program 1 (id=954): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0f0ffff070211000001080211"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000003c0)=@v={0x93, 0x0, 0xa0}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}, {0x0, 0x6}}}}, 0x17) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000002a40)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1004000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7779de5a3af42f978f9f1cf1f98d3d", @ANYRESHEX=r0, @ANYBLOB="2c756e616d653d002c736d61636b66737472616e736d7574653d002c7365636c6162656c2c736d61636b6673726f6f743dbbbbbbbbbbbb2c00"]) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.123859175s ago: executing program 0 (id=955): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000080)="0000000000000002ff6900b87902f5d9f27dbafff200000000861f4104bfeacd1f639265dd530700", 0x28, r0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x4, 0x20}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_RATE_SET(r3, 0x0, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000c40)={0x2, 'vlan0\x00', {0x800}}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r1) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000000), 0xffffffffffffff98) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @u32}]}, 0x24}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {r6}}, './file1/../file0\x00'}) 2.241806262s ago: executing program 4 (id=956): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@gettaction={0x14}, 0x14}}, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpgrp(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_robust_list(&(0x7f0000000000), 0x18) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) prlimit64(r1, 0x4, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f00000000c0)) 2.167227769s ago: executing program 1 (id=957): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@grpquota}]}, 0x21, 0x4b0, &(0x7f0000000540)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKafee9u97SV7WCm7G+0qrLQHr2ZsCCEY2A3BK/z7SU8zb57x9x7WvGc+wC+AnnUuItYi4lhE3IuI0fb1pF3iZqtkj3v54tH0+otH00k0m3c+SfL27Fps+ZrMifZzDkXE738T8afkzbj1ldX5qUqlvNSuFxvVxWJ9ZfXyXHVqtjxbXiiVJicmx69fuVY6sLGerf7r+a/nbv3hv//50bP/r/3yL1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeEbSSPiOxFxPr//R6MvfzUBgKOs2RyN5ujW+iv92+oAwNGQ5jmwJC20cwEjkaaFQiuHdyaG00qt3rh0v7a8MNPKlY3FQHp/rlIeb+cKx2IgyeoT+fmremlb/UpEnI6Ivw4ez+uF6VplpptvfACgh53Ytv5/Ptha/wGAI26o2x0AAA6d9R8Aeo/1HwB6j/UfAHqP9R8Aeo/1HwB6j/UfAHrK727fzkpzvf351zMPVpbnaw8uz5Tr84Xq8nRhura0WJit1Wbzz+yp7vV8lVptceJqLD8sNsr1RrG+snq3WlteaNzNP9f7bnngUEYFAOzm9Nmn7ycRsXbjeF5iy14O1mo42tJudwDomr5udwDoGrt9Qe/yMz6wwxa9r+n4J0JPDr4vwOG4+H35f+hV8v/Qu+T/oXfJ/0PvajYTe/wDQI+R4wf8/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vpG8JGmhvRf4SKRpoRBxMiLGYiC5P1cpj0fEqYh4b3BgMKtPdLvTAMBbSj9K2vt/XRy9MLK99VjyxWB+jIg///3O3x5ONRpLE9n1TzevN560r5e60X8AYC8b6/TGOr7h5YtH0xvlMPvz/FetzUWzuOvt0mrpj/78OBQDETH8WdKut2TvV/oOIP7a44j43k7jT/LcyFh759Pt8bPYJw81fvpa/DRvax2z78V3D6Av0GueZvPPzZ3uvzTO5ced7/+hfIZ6exvz3/ob81+6Of/1dZj/zu03xtX//bZj2+OIH/TvFD/ZjJ90iH9hn/E/+OGPz3dqa/4j4mLsHH9rrGKjulisr6xenqtOzZZnywul0uTE5Pj1K9dKxTxHXdzIVL/p4xuXTu02/uEO8Yf2GP/P9jn+f355748/2SX+L3668+t/Zpf42Zr4833Gnxr+d8ftu7P4Mx3Gv9frf2mf8Z99uDqzz4cCAIegvrI6P1WplJecdOmk79vRDSdOXjvp9swEvGuvbvpu9wQAAAAAAAAAAAAAAOjkMP6dqNtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oj6KgAA//+r59Ta") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x4000019) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = dup2(r3, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) sendmmsg$unix(r4, &(0x7f00000031c0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="2649f172ce5051d17d982233f1e80d1cc06b1f9e0689ddd3bd7be698bfad741dc05a7e3245960000", 0x28}], 0x1}}, {{&(0x7f0000000180)=@abs, 0x6e, 0x0}}], 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) 2.038557651s ago: executing program 0 (id=958): add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) semget$private(0x0, 0x2, 0x140) semctl$GETPID(0x0, 0x0, 0xb, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0xd01, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffff, 0x101, 0xfffffeff}, &(0x7f0000000280)=0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlockall(0x0) get_mempolicy(0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x2) modify_ldt$write2(0x11, 0x0, 0x0) 991.732763ms ago: executing program 4 (id=959): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xe38, 0x1, [0x0]}, &(0x7f0000000140)=0xa) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x1ff, 0x4}, 0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) dup2(r3, r4) fsconfig$FSCONFIG_SET_FLAG(r4, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB]) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x58}, 0x1, 0x7}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101300, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x5) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x3, 0x0, 0x0) 925.148518ms ago: executing program 0 (id=960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x40415, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES8], 0x1, 0x2a1, &(0x7f0000000f40)="$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") mkdir(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063013700000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)=']+\x00', 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x122e, &(0x7f0000002580)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x300) 0s ago: executing program 1 (id=961): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000300)=0x0, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd_index}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/146, 0x92}], 0x1, 0x0, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r6, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00/'], 0x38}}, 0x0) kernel console output (not intermixed with test programs): netlink: 'syz.4.630': attribute type 10 has an invalid length. [ 327.709377][ T6832] loop2: detected capacity change from 0 to 764 [ 328.785264][ T6827] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 328.859933][ T6830] wlan1: mtu less than device minimum [ 329.048196][ T6837] netlink: 124 bytes leftover after parsing attributes in process `syz.3.632'. [ 329.125240][ T6847] loop0: detected capacity change from 0 to 1024 [ 329.146903][ T6844] loop1: detected capacity change from 0 to 128 [ 329.294945][ T6844] FAT-fs (loop1): bogus number of FAT sectors [ 329.388184][ T6844] FAT-fs (loop1): Can't find a valid FAT filesystem [ 330.095218][ T6856] loop4: detected capacity change from 0 to 256 [ 330.110525][ T6847] EXT4-fs (loop0): Ignoring removed bh option [ 330.490789][ T6847] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 330.532130][ T6856] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 331.266684][ T6856] Core dump to core aborted: cannot preserve file permissions [ 331.324425][ T6868] loop2: detected capacity change from 0 to 1024 [ 331.399529][ T6847] EXT4-fs warning (device loop0): ext4_xattr_inode_get:509: inode #18: comm syz.0.634: EA inode hash validation failed [ 331.475789][ T6868] hfsplus: extend alloc file! (8192,65536,366) [ 331.706767][ T6874] loop4: detected capacity change from 0 to 2048 [ 331.801640][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3723271288, rec_len=27469, size=1024 fake=0 [ 331.834462][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 331.864806][ T6850] loop3: detected capacity change from 0 to 32768 [ 331.872059][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 332.128176][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 35: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 332.153312][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 36: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 332.205003][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 332.989722][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 333.022805][ T6882] ALSA: mixer_oss: invalid OSS volume '' [ 333.032236][ T6874] loop4: detected capacity change from 0 to 128 [ 333.048068][ T6887] loop1: detected capacity change from 0 to 764 [ 333.065079][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 39: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 333.115462][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 40: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 333.313411][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 41: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 333.409185][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 333.409201][ T26] audit: type=1800 audit(1726260962.921:182): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.641" name="file0" dev="loop4" ino=1048720 res=0 errno=0 [ 333.758073][ T4719] Bluetooth: hci4: command 0x0406 tx timeout [ 334.285923][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 334.316381][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 334.384136][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 334.425793][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 335.243627][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 335.281838][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 335.349928][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 335.404143][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 335.440654][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 335.457747][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 336.891104][ T3575] EXT4-fs warning: 45 callbacks suppressed [ 336.891123][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 336.941978][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 337.032411][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 337.056706][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.064491][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.120951][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 337.194736][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 337.257001][ T3575] EXT4-fs error: 698 callbacks suppressed [ 337.257025][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3723271288, rec_len=27469, size=1024 fake=0 [ 337.321153][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 337.384287][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 337.406273][ T6926] loop2: detected capacity change from 0 to 4096 [ 337.438632][ T6926] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 337.466776][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 35: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 337.536202][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 36: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 337.692911][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 337.749171][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 337.791052][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 39: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 337.839270][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 40: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 337.946128][ T3991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 338.026793][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 41: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 338.284271][ T3991] usb 2-1: Using ep0 maxpacket: 16 [ 338.395085][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 338.574879][ T3991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 338.699637][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 338.735022][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 338.789204][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 339.432760][ T6943] device wireguard0 entered promiscuous mode [ 339.520033][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 339.980213][ T3991] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 339.990138][ T3991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.001596][ T3991] usb 2-1: config 0 descriptor?? [ 340.496082][ T6929] udc-core: couldn't find an available UDC or it's busy [ 340.504944][ T6929] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 340.714151][ T3991] hid (null): nested delimiters [ 340.756533][ T3991] hid (null): bogus close delimiter [ 340.850578][ T3991] hid (null): invalid report_size 812540268 [ 340.919333][ T3991] hid (null): unknown global tag 0x83 [ 340.977876][ T3991] hid (null): global environment stack underflow [ 341.142287][ T3991] hid-generic 0003:0158:0100.0004: nested delimiters [ 341.241659][ T3991] hid-generic 0003:0158:0100.0004: item 0 2 2 10 parsing failed [ 341.249728][ T3991] hid-generic: probe of 0003:0158:0100.0004 failed with error -22 [ 341.398070][ T6950] loop3: detected capacity change from 0 to 2048 [ 341.521647][ T1074] usb 2-1: USB disconnect, device number 8 [ 342.201456][ T6950] loop3: detected capacity change from 0 to 128 [ 342.406842][ T6965] netlink: 'syz.2.667': attribute type 2 has an invalid length. [ 342.523004][ T26] audit: type=1800 audit(1726260971.325:183): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.664" name="file0" dev="loop3" ino=1048721 res=0 errno=0 [ 342.664976][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.667'. [ 344.349153][ T6968] tipc: Started in network mode [ 344.354087][ T6968] tipc: Node identity f7, cluster identity 4711 [ 344.360591][ T6968] tipc: Node number set to 247 [ 344.418810][ T6965] device veth0_macvtap left promiscuous mode [ 345.557665][ T6977] loop1: detected capacity change from 0 to 256 [ 345.565747][ T6976] loop4: detected capacity change from 0 to 128 [ 345.657067][ T6976] VFS: unable to find oldfs superblock on device loop4 [ 345.884638][ T6976] loop4: detected capacity change from 0 to 512 [ 345.984550][ T6976] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 345.992827][ T6976] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 346.015789][ T6976] System zones: 0-1, 15-15, 18-18, 34-34 [ 346.022821][ T6976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 346.059927][ T6976] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 346.069563][ T6976] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 346.124304][ T6976] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 346.153392][ T6976] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.671: bad orphan inode 16 [ 346.183271][ T6976] ext4_test_bit(bit=15, block=18) = 1 [ 346.188821][ T6976] is_bad_inode(inode)=0 [ 346.202247][ T6976] NEXT_ORPHAN(inode)=0 [ 346.206498][ T6976] max_ino=32 [ 346.209733][ T6976] i_nlink=2 [ 346.229433][ T6976] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 346.279658][ T6976] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 346.297932][ T6978] chnl_net:caif_netlink_parms(): no params data found [ 346.387897][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.395221][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.403245][ T6978] device bridge_slave_0 entered promiscuous mode [ 346.425491][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.433165][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.459896][ T6978] device bridge_slave_1 entered promiscuous mode [ 346.493677][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.507476][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.537337][ T6978] team0: Port device team_slave_0 added [ 346.546081][ T6978] team0: Port device team_slave_1 added [ 346.566639][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.573997][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.608596][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.620980][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.628294][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.658786][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.698530][ T6978] device hsr_slave_0 entered promiscuous mode [ 346.706839][ T6978] device hsr_slave_1 entered promiscuous mode [ 346.903074][ T6978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.048491][ T6978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.123885][ T6978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.194334][ T6978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.322738][ T6978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.343023][ T6978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.352119][ T6978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.361563][ T6978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 347.450879][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.463562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.472390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.489784][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.500724][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.510235][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.519201][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.526316][ T3755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.549704][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.558473][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.567905][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.576905][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.584217][ T3755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.593197][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.602603][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.622455][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.634011][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.644490][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.654427][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.677275][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.685723][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.694251][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.703096][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.720655][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.739596][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.835462][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.842995][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.856955][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.898592][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.907833][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.940026][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.949110][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.959096][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.971990][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.984919][ T6978] device veth0_vlan entered promiscuous mode [ 347.999790][ T6978] device veth1_vlan entered promiscuous mode [ 348.014977][ T3702] device hsr_slave_0 left promiscuous mode [ 348.023735][ T3702] device hsr_slave_1 left promiscuous mode [ 348.031992][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.039897][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.048001][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.055718][ T4719] Bluetooth: hci5: command 0x0409 tx timeout [ 348.061856][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.072531][ T3702] device veth1_macvtap left promiscuous mode [ 348.079640][ T3702] device veth0_macvtap left promiscuous mode [ 348.085885][ T3702] device veth1_vlan left promiscuous mode [ 348.091769][ T3702] device veth0_vlan left promiscuous mode [ 348.206861][ T3702] bond1 (unregistering): Released all slaves [ 348.301779][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 348.317548][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 348.332710][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.349019][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.426017][ T3702] bond0 (unregistering): Released all slaves [ 348.457962][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.466674][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 348.475338][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.484390][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.501787][ T6978] device veth0_macvtap entered promiscuous mode [ 348.515708][ T6978] device veth1_macvtap entered promiscuous mode [ 348.547218][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.557885][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.567803][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.578388][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.589653][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.600499][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.610399][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.622384][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.645970][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.656592][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.668208][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.679098][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.689764][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.700313][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.711934][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.722402][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.735494][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.747417][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.757416][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.770264][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.780009][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.790219][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.799253][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.814750][ T6978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.824240][ T6978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.841627][ T6978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.850835][ T6978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.974077][ T3725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.999449][ T3725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.008238][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.032211][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.047203][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.084395][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.023076][ T7005] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 350.184641][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 350.314592][ T3621] Bluetooth: hci5: command 0x041b tx timeout [ 350.413006][ T6996] loop3: detected capacity change from 0 to 4096 [ 350.441784][ T6996] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 350.542017][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 350.671944][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.682228][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.704670][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.714750][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.728258][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.743964][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.040189][ T7] usb 1-1: GET_CAPABILITIES returned 0 [ 351.045726][ T7] usbtmc 1-1:16.0: can't read capabilities [ 351.289156][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 351.330758][ T4723] usb 1-1: USB disconnect, device number 10 [ 354.177845][ T1074] Bluetooth: hci5: command 0x040f tx timeout [ 354.700107][ T4723] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 354.876248][ T7038] loop2: detected capacity change from 0 to 1024 [ 355.101128][ T4723] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 355.138432][ T7038] hfsplus: unable to parse mount options [ 355.684729][ T4723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.728801][ T4723] usb 2-1: string descriptor 0 read error: -71 [ 355.782824][ T4723] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 355.791913][ T4723] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 355.803389][ T4723] usb 2-1: config 0 descriptor?? [ 355.808104][ T7047] can: request_module (can-proto-0) failed. [ 355.848210][ T4723] usb 2-1: can't set config #0, error -71 [ 357.983983][ T1074] Bluetooth: hci5: command 0x0419 tx timeout [ 358.016682][ T4723] usb 2-1: USB disconnect, device number 9 [ 359.308635][ T7083] device bond0 entered promiscuous mode [ 359.325526][ T7083] device bond_slave_0 entered promiscuous mode [ 359.878760][ T7083] device bond_slave_1 entered promiscuous mode [ 360.022654][ T7075] device bond0 left promiscuous mode [ 360.034886][ T7075] device bond_slave_0 left promiscuous mode [ 360.051838][ T7075] device bond_slave_1 left promiscuous mode [ 360.142182][ T7094] loop3: detected capacity change from 0 to 4096 [ 360.981293][ T7104] loop1: detected capacity change from 0 to 1024 [ 360.984765][ T7094] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 361.126874][ T7104] EXT4-fs (loop1): Ignoring removed nobh option [ 361.239453][ T7094] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 361.251882][ T7104] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,jqfmt=vfsold,jqfmt=vfsv1,block_validity,nobh,noquota,journal_dev=0x0000000000000009,delalloc,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 361.259496][ T7094] ntfs3: loop3: Failed to load $Extend. [ 362.096033][ T7119] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 362.401557][ T7118] loop4: detected capacity change from 0 to 512 [ 362.663274][ T7120] loop2: detected capacity change from 0 to 256 [ 363.171712][ T7121] loop0: detected capacity change from 0 to 4096 [ 363.189069][ T7118] EXT4-fs (loop4): 1 orphan inode deleted [ 363.353503][ T7118] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 363.356909][ T7121] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 363.383648][ T7118] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038 (0x7fffffff) [ 363.472027][ T7130] smb3: Unknown parameter '*z' [ 364.072744][ T7129] loop3: detected capacity change from 0 to 2048 [ 364.592641][ T7140] loop1: detected capacity change from 0 to 4096 [ 365.181826][ T7143] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.240063][ T26] audit: type=1800 audit(1726261248.274:184): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.708" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 366.000179][ T7145] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 366.070861][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 366.460315][ T7155] vcan0 speed is unknown, defaulting to 1000 [ 366.467643][ T7155] vcan0 speed is unknown, defaulting to 1000 [ 366.514520][ T7155] vcan0 speed is unknown, defaulting to 1000 [ 366.671610][ T7161] loop1: detected capacity change from 0 to 1024 [ 366.718815][ T7159] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 367.047365][ T7165] loop4: detected capacity change from 0 to 128 [ 367.159435][ T7165] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 367.197471][ T7138] loop0: detected capacity change from 0 to 40427 [ 367.422478][ T7138] F2FS-fs (loop0): invalid crc value [ 367.446681][ T7138] F2FS-fs (loop0): Found nat_bits in checkpoint [ 367.472286][ T3990] vcan0 speed is unknown, defaulting to 1000 [ 367.470502][ T7155] infiniband syz1: set active [ 367.472435][ T7155] infiniband syz1: added vcan0 [ 368.108506][ T7155] infiniband syz1: Couldn't open port 1 [ 368.192716][ T7155] RDS/IB: syz1: added [ 368.192767][ T7155] smc: adding ib device syz1 with port count 1 [ 368.192785][ T7155] smc: ib device syz1 port 1 has pnetid [ 368.193352][ T3592] vcan0 speed is unknown, defaulting to 1000 [ 368.244375][ T7155] vcan0 speed is unknown, defaulting to 1000 [ 368.395202][ T7175] netlink: 224 bytes leftover after parsing attributes in process `syz.4.717'. [ 368.403477][ T7177] loop1: detected capacity change from 0 to 256 [ 368.482767][ T7177] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 368.483027][ T7177] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 368.676571][ T7174] vcan0 speed is unknown, defaulting to 1000 [ 369.062947][ T7181] loop0: detected capacity change from 0 to 64 [ 369.113419][ T7155] vcan0 speed is unknown, defaulting to 1000 [ 370.502073][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 370.555653][ T7190] loop4: detected capacity change from 0 to 256 [ 370.639134][ T7155] vcan0 speed is unknown, defaulting to 1000 [ 370.977586][ T7190] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 371.220192][ T7192] loop1: detected capacity change from 0 to 1764 [ 371.824884][ T7192] ISOFS: Unable to identify CD-ROM format. [ 371.873629][ T7155] vcan0 speed is unknown, defaulting to 1000 [ 372.151892][ T7199] loop0: detected capacity change from 0 to 256 [ 372.751946][ T7199] FAT-fs (loop0): bogus logical sector size 0 [ 372.751972][ T7199] FAT-fs (loop0): Can't find a valid FAT filesystem [ 372.878422][ T7202] loop4: detected capacity change from 0 to 4096 [ 373.098031][ T7203] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.937149][ T26] audit: type=1800 audit(1726261255.616:185): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.723" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 374.166746][ T7155] vcan0 speed is unknown, defaulting to 1000 [ 376.173357][ T7216] loop0: detected capacity change from 0 to 128 [ 376.328522][ T7216] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 376.418832][ T7220] loop1: detected capacity change from 0 to 2048 [ 376.538587][ T7220] loop1: p2 < > [ 376.600356][ T3027] loop1: p2 < > [ 376.750308][ T7218] loop4: detected capacity change from 0 to 8192 [ 376.965008][ T7218] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 376.965505][ T7218] REISERFS (device loop4): using ordered data mode [ 376.965630][ T7218] reiserfs: using flush barriers [ 376.984188][ T7218] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 377.000546][ T7218] REISERFS (device loop4): checking transaction log (loop4) [ 377.081689][ T7218] REISERFS (device loop4): Using r5 hash to sort names [ 377.082077][ T7218] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 377.315172][ T7218] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2117, free_space(entry_count) 2 [ 377.315227][ T7218] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 377.315241][ T7218] REISERFS (device loop4): Remounting filesystem read-only [ 377.315257][ T7218] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 377.349770][ T7218] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2117, free_space(entry_count) 2 [ 377.349897][ T7218] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 377.349919][ T7218] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 377.429674][ T7220] team0 (unregistering): Port device team_slave_0 removed [ 377.813453][ T7232] loop0: detected capacity change from 0 to 2048 [ 378.091950][ T7232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.509747][ T7220] team0 (unregistering): Port device team_slave_1 removed [ 378.656135][ T7226] netlink: 164 bytes leftover after parsing attributes in process `syz.3.732'. [ 378.946502][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'. [ 378.990889][ T7238] dlm: non-version read from control device 0 [ 379.015914][ T7239] vcan0 speed is unknown, defaulting to 1000 [ 379.132502][ T7242] loop0: detected capacity change from 0 to 1764 [ 379.144401][ T7247] program syz.1.739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.144649][ T7247] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 379.231310][ T7249] loop4: detected capacity change from 0 to 1024 [ 379.309212][ T7242] ISOFS: Unable to identify CD-ROM format. [ 379.665538][ T1209] hfsplus: b-tree write err: -5, ino 4 [ 379.884325][ T7239] chnl_net:caif_netlink_parms(): no params data found [ 380.254413][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.254444][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.255412][ T7239] device bridge_slave_0 entered promiscuous mode [ 380.256757][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.256787][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.257468][ T7239] device bridge_slave_1 entered promiscuous mode [ 380.322533][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.325111][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.403497][ T1209] hfsplus: b-tree write err: -5, ino 4 [ 380.468681][ T7239] team0: Port device team_slave_0 added [ 380.530118][ T7239] team0: Port device team_slave_1 added [ 380.555554][ T7267] rdma_rxe: rxe_register_device failed with error -23 [ 380.555685][ T7267] rdma_rxe: failed to add vcan0 [ 380.654931][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.654950][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.654978][ T7239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.662969][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.662984][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.663003][ T7239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.805517][ T7270] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 380.868814][ T7276] loop4: detected capacity change from 0 to 2048 [ 380.909334][ T7282] netlink: 224 bytes leftover after parsing attributes in process `syz.1.744'. [ 380.982630][ T7239] device hsr_slave_0 entered promiscuous mode [ 380.984733][ T7239] device hsr_slave_1 entered promiscuous mode [ 380.986617][ T7239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.986646][ T7239] Cannot create hsr debugfs directory [ 381.056999][ T3990] Bluetooth: hci2: command 0x0409 tx timeout [ 381.091263][ T7283] loop4: p2 < > [ 381.116324][ T7275] vcan0 speed is unknown, defaulting to 1000 [ 382.109307][ T7276] loop4: p2 < > [ 382.191389][ T7285] team0 (unregistering): Port device team_slave_0 removed [ 382.220110][ T7285] team0 (unregistering): Port device team_slave_1 removed [ 382.331755][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 382.422186][ T7299] netlink: 232 bytes leftover after parsing attributes in process `syz.0.749'. [ 382.547598][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 382.735104][ T7239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.847782][ T7239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.945989][ T7239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.056373][ T7239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.308887][ T4732] Bluetooth: hci2: command 0x041b tx timeout [ 383.326132][ T7239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 383.364300][ T7239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 383.409913][ T7239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 383.453111][ T7239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 383.930033][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.751'. [ 384.492993][ T7308] loop4: detected capacity change from 0 to 1764 [ 384.671826][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.922550][ T7239] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.991134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.010598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.023325][ T7308] ISOFS: Unable to identify CD-ROM format. [ 385.034684][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.084209][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.098635][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.105841][ T3725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.205090][ T7316] loop0: detected capacity change from 0 to 1024 [ 385.552553][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.561115][ T4716] Bluetooth: hci2: command 0x040f tx timeout [ 385.621304][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.671898][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.687366][ T3627] hfsplus: b-tree write err: -5, ino 4 [ 385.713828][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.721062][ T3725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.745878][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.760569][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.783145][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 385.803659][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.813973][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.824234][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.848579][ T7239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.869122][ T7239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.885981][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.902550][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.914878][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.934533][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.949270][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.972849][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 386.091144][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.100002][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.116725][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.144663][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.169802][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.211541][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.220627][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.241866][ T7239] device veth0_vlan entered promiscuous mode [ 386.250669][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.259287][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.280384][ T7239] device veth1_vlan entered promiscuous mode [ 386.337769][ T9] hfsplus: b-tree write err: -5, ino 4 [ 386.352378][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 386.371113][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 386.395439][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.416753][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.428285][ T7239] device veth0_macvtap entered promiscuous mode [ 386.462889][ T7239] device veth1_macvtap entered promiscuous mode [ 386.531194][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.558079][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.578706][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.600470][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.610515][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.651861][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.687299][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.698585][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.708422][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.741137][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.764946][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.775896][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.817541][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.825837][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.851031][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.874066][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.894070][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.925284][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.935755][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.968503][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.978988][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.022734][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.033209][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.064967][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.087675][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.110247][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.148708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.159706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.184521][ T7239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.201466][ T7239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.213420][ T7239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.230735][ T7239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.359104][ T3725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.367666][ T3725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.404754][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.405083][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.434373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.446660][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.549003][ T7330] netlink: 'syz.4.766': attribute type 4 has an invalid length. [ 387.566734][ T7327] netlink: 'syz.0.764': attribute type 2 has an invalid length. [ 387.574432][ T7327] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 387.894014][ T3592] Bluetooth: hci2: command 0x0419 tx timeout [ 388.349451][ T7327] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 388.605952][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 388.644876][ T7327] netlink: 'syz.0.764': attribute type 2 has an invalid length. [ 388.693214][ T7327] netlink: 'syz.0.764': attribute type 2 has an invalid length. [ 389.924269][ T7346] rdma_rxe: rxe_register_device failed with error -23 [ 389.924409][ T7346] rdma_rxe: failed to add vcan0 [ 390.017074][ T7353] loop0: detected capacity change from 0 to 512 [ 390.081717][ T7355] loop2: detected capacity change from 0 to 128 [ 391.216856][ T7367] loop4: detected capacity change from 0 to 512 [ 391.880709][ T7353] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 392.737951][ T7353] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 393.577840][ T7367] EXT4-fs: failed to create workqueue [ 393.583410][ T7367] EXT4-fs (loop4): mount failed [ 394.079304][ T7363] netlink: 164 bytes leftover after parsing attributes in process `syz.1.758'. [ 394.133653][ T7239] VFS: Lookup of '. ' in vfat loop2 would have caused loop [ 394.145502][ T7239] VFS: Lookup of '. ' in vfat loop2 would have caused loop [ 394.181956][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 394.194132][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 395.158190][ T7388] netlink: 'syz.3.770': attribute type 4 has an invalid length. [ 395.753854][ T7393] loop0: detected capacity change from 0 to 1024 [ 395.971075][ T7396] loop4: detected capacity change from 0 to 16 [ 396.795955][ T7396] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 20, please upgrade kernel version [ 396.904765][ T7405] loop3: detected capacity change from 0 to 512 [ 397.093092][ T6978] hfsplus: walked past end of dir [ 397.761220][ T7405] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.777: corrupted in-inode xattr [ 397.774122][ T7405] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.777: couldn't read orphan inode 15 (err -117) [ 397.787168][ T7405] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 397.830654][ T144] device hsr_slave_0 left promiscuous mode [ 397.840740][ T7396] loop4: detected capacity change from 0 to 2048 [ 397.912054][ T144] device hsr_slave_1 left promiscuous mode [ 398.106720][ T7415] loop3: detected capacity change from 0 to 8 [ 398.117191][ T7396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.126956][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.136397][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.144460][ T6978] hfsplus: xattr search failed [ 398.163786][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.181070][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.224885][ T144] device bridge_slave_1 left promiscuous mode [ 398.234137][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.053647][ T144] device bridge_slave_0 left promiscuous mode [ 399.064905][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.084247][ T7419] loop0: detected capacity change from 0 to 1024 [ 399.097631][ T144] device veth1_macvtap left promiscuous mode [ 399.104124][ T144] device veth1_vlan left promiscuous mode [ 399.129053][ T144] device veth0_vlan left promiscuous mode [ 399.194417][ T7419] EXT4-fs (loop0): Ignoring removed oldalloc option [ 399.216180][ T7419] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 399.226332][ T7419] EXT4-fs (loop0): Unrecognized mount option "fsuuid=cf79116S-e0d7-d1c2-3c3-" or missing value [ 399.464360][ T144] team0 (unregistering): Port device team_slave_1 removed [ 399.482075][ T144] team0 (unregistering): Port device team_slave_0 removed [ 399.500381][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.516385][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.597827][ T144] bond0 (unregistering): Released all slaves [ 399.666933][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.717796][ T7418] vcan0 speed is unknown, defaulting to 1000 [ 399.948466][ T7408] vcan0 speed is unknown, defaulting to 1000 [ 400.032246][ T7427] loop4: detected capacity change from 0 to 128 [ 400.118301][ T7430] loop3: detected capacity change from 0 to 64 [ 400.125492][ T4716] Bluetooth: hci0: command 0x0409 tx timeout [ 400.142244][ T7429] loop0: detected capacity change from 0 to 2048 [ 400.279051][ T7429] loop0: detected capacity change from 0 to 128 [ 400.341696][ T3621] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 401.689712][ T26] audit: type=1800 audit(1726261281.982:186): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="file0" dev="loop0" ino=1048771 res=0 errno=0 [ 401.735462][ T5245] VFS: Lookup of '. ' in vfat loop4 would have caused loop [ 401.754799][ T5245] VFS: Lookup of '. ' in vfat loop4 would have caused loop [ 401.781881][ T3621] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 401.791102][ T3621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.832551][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 401.871363][ T6978] VFS: Lookup of '. ' in vfat loop0 would have caused loop [ 401.898721][ T6978] VFS: Lookup of '. ' in vfat loop0 would have caused loop [ 402.027943][ T3621] usb 2-1: config 0 descriptor?? [ 402.139357][ T7441] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 402.204260][ T3621] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 402.511108][ T7426] input: syz1 as /devices/virtual/input/input16 [ 402.858125][ T3621] gspca_sonixj: reg_w1 err -110 [ 402.863083][ T3621] sonixj: probe of 2-1:0.0 failed with error -110 [ 402.866761][ T4732] Bluetooth: hci0: command 0x041b tx timeout [ 402.913974][ T7445] loop3: detected capacity change from 0 to 1024 [ 403.040115][ T3982] usb 2-1: USB disconnect, device number 10 [ 403.123461][ T6491] hfsplus: walked past end of dir [ 403.185063][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.197344][ T6491] hfsplus: xattr search failed [ 403.207056][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.227904][ T7408] device bridge_slave_0 entered promiscuous mode [ 403.242278][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.256459][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.264764][ T7408] device bridge_slave_1 entered promiscuous mode [ 403.354154][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.402887][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.546291][ T7408] team0: Port device team_slave_0 added [ 403.581577][ T7408] team0: Port device team_slave_1 added [ 403.585223][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.594058][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.687280][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.709193][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.815245][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.884980][ T7453] vcan0 speed is unknown, defaulting to 1000 [ 403.890860][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.958444][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.099816][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.156331][ T7461] vcan0 speed is unknown, defaulting to 1000 [ 404.259533][ T7462] loop1: detected capacity change from 0 to 1024 [ 404.330969][ T7408] device hsr_slave_0 entered promiscuous mode [ 404.349076][ T7408] device hsr_slave_1 entered promiscuous mode [ 404.365551][ T7462] EXT4-fs (loop1): Ignoring removed oldalloc option [ 404.369843][ T7408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.379852][ T7408] Cannot create hsr debugfs directory [ 404.405223][ T7462] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 404.418717][ T7462] EXT4-fs (loop1): Unrecognized mount option "fsuuid=cf79116S-e0d7-d1c2-3c3-" or missing value [ 404.776708][ T7453] chnl_net:caif_netlink_parms(): no params data found [ 404.828125][ T7458] vcan0 speed is unknown, defaulting to 1000 [ 405.558317][ T4732] Bluetooth: hci0: command 0x040f tx timeout [ 405.797051][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.828361][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.874409][ T7453] device bridge_slave_0 entered promiscuous mode [ 405.977144][ T7408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.004917][ T4732] Bluetooth: hci2: command 0x0409 tx timeout [ 406.034904][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.042426][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.050868][ T7453] device bridge_slave_1 entered promiscuous mode [ 406.326502][ T7453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.804396][ T7408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.869170][ T7453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.898445][ T4732] Bluetooth: hci4: command 0x0409 tx timeout [ 407.015982][ T7408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.044728][ T7453] team0: Port device team_slave_0 added [ 407.067236][ T7453] team0: Port device team_slave_1 added [ 407.127241][ T7408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.186538][ T7453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.193623][ T7453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.293375][ T7453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.333727][ T7453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.351522][ T7453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.421155][ T7453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.568139][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.646285][ T7453] device hsr_slave_0 entered promiscuous mode [ 407.669783][ T7493] loop1: detected capacity change from 0 to 8192 [ 407.684217][ T7453] device hsr_slave_1 entered promiscuous mode [ 407.714515][ T7453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.723267][ T7453] Cannot create hsr debugfs directory [ 407.737675][ T4732] Bluetooth: hci0: command 0x0419 tx timeout [ 407.807723][ T7493] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.819361][ T7458] chnl_net:caif_netlink_parms(): no params data found [ 407.869302][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.030722][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.112210][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.208035][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.216377][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.236595][ T7458] device bridge_slave_0 entered promiscuous mode [ 408.258993][ T4732] Bluetooth: hci2: command 0x041b tx timeout [ 408.306488][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.314072][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.323883][ T7458] device bridge_slave_1 entered promiscuous mode [ 408.376327][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 408.409039][ T7453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.455213][ T7408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 408.838603][ T7458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.874791][ T21] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 408.950341][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.971539][ T21] usb 4-1: config 0 descriptor?? [ 408.982269][ T7453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.011192][ T7408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.039878][ T7458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.051370][ T21] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 409.086671][ T7408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.111169][ T7453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.123972][ T3617] Bluetooth: hci4: command 0x041b tx timeout [ 409.187002][ T7408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.258915][ T7497] input: syz1 as /devices/virtual/input/input17 [ 409.446280][ T7458] team0: Port device team_slave_0 added [ 409.549975][ T7458] team0: Port device team_slave_1 added [ 409.567428][ T21] gspca_sonixj: reg_w1 err -71 [ 409.572428][ T21] sonixj: probe of 4-1:0.0 failed with error -71 [ 409.592633][ T21] usb 4-1: USB disconnect, device number 7 [ 409.669176][ T7453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.816458][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.823526][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.909407][ T7458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.959387][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.980350][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.039292][ T7458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.440246][ T7458] device hsr_slave_0 entered promiscuous mode [ 410.467696][ T7458] device hsr_slave_1 entered promiscuous mode [ 410.502625][ T7458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.510574][ T4719] Bluetooth: hci2: command 0x040f tx timeout [ 410.518607][ T7458] Cannot create hsr debugfs directory [ 410.827775][ T7453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.860707][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.889851][ T7453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.900672][ T7453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.913528][ T7453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.126467][ T7408] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.200395][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.244865][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.341592][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 411.353120][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.362757][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.369893][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.377623][ T4732] Bluetooth: hci4: command 0x040f tx timeout [ 411.379572][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 411.392980][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.403231][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.410348][ T3795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.485701][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 411.499794][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 411.509372][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 411.520410][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 411.532479][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.541679][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 411.551385][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.644258][ T7408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.662672][ T7408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.701346][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.710223][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.729172][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.742821][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 411.758132][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.774385][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.796797][ T7453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.946223][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.975005][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.071707][ T7453] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.110048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.130015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.146577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.160405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.177021][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.184136][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.232768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.241366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.251091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.262982][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.270303][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.290972][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.304560][ T7458] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.314236][ T7458] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.379970][ T7458] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.392741][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.408400][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.425508][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.437278][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 412.445999][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 412.455480][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 412.466716][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.475558][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.487811][ T7458] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.510699][ T7453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.522734][ T7453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.535810][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.544414][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 412.555184][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.565323][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.575069][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.583969][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 412.635645][ T7408] device veth0_vlan entered promiscuous mode [ 412.652849][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.663411][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.687351][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.705460][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.726058][ T144] bond0: (slave wlan1): Releasing backup interface [ 412.758708][ T7408] device veth1_vlan entered promiscuous mode [ 412.762038][ T4719] Bluetooth: hci2: command 0x0419 tx timeout [ 412.809938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 412.827476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 412.838216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.861103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.871611][ T7408] device veth0_macvtap entered promiscuous mode [ 412.927240][ T7408] device veth1_macvtap entered promiscuous mode [ 412.957197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.964913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.993180][ T7453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.077912][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.096622][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.107645][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.120082][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.132054][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.143330][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.154479][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.165374][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.180422][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.191222][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.203342][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.211671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 413.224620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 413.241320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.254032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.299061][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.319822][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.333700][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.352741][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.366347][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.388282][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.401459][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.417705][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.428455][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.444657][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.458211][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.472296][ T7458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.488982][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.497866][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.533712][ T7408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.553429][ T7408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.562189][ T7408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.576321][ T7408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.600867][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 413.621369][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 413.628831][ T4732] Bluetooth: hci4: command 0x0419 tx timeout [ 413.678889][ T7458] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.694344][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 413.702896][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 413.738617][ T7453] device veth0_vlan entered promiscuous mode [ 413.775291][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 413.783892][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 413.794169][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 413.821182][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 413.833033][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.840262][ T4088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.849699][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 413.859938][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 413.868706][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.875781][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.885332][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 413.906481][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 413.918779][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 413.978363][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 413.997722][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 414.027022][ T7453] device veth1_vlan entered promiscuous mode [ 414.060771][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 414.070124][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 414.081268][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.090385][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.100494][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.153946][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 414.164803][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.177825][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.188647][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.204479][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.221068][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 414.249313][ T7453] device veth0_macvtap entered promiscuous mode [ 414.276588][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.307676][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.317546][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 414.348892][ T7453] device veth1_macvtap entered promiscuous mode [ 414.404954][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.409466][ T4088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.425881][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.438845][ T4088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.458038][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.482785][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.494540][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.513074][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.524793][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.539926][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.550404][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.561873][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.572480][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.589152][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.604505][ T7453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.619242][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.628358][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 414.637531][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.646574][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.664557][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.685889][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.696522][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.721642][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.731510][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.749723][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.760626][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.775787][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.786040][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.796534][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.806486][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.816955][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.842890][ T7453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.873344][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.896151][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.920092][ T7453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.113608][ T7606] loop1: detected capacity change from 0 to 2048 [ 415.143121][ T7453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.156862][ T7453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.166606][ T7453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.236789][ T7612] loop2: detected capacity change from 0 to 16 [ 416.801760][ T7612] erofs: (device loop2): mounted with root inode @ nid 36. [ 416.830142][ T7610] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 416.839915][ T7610] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 416.849028][ T7610] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 416.859007][ T7610] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 416.868080][ T7610] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 416.878050][ T7610] erofs: (device loop2): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 416.887202][ T7610] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 416.897504][ T7610] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 416.906839][ T7610] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 416.916825][ T7610] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 416.925979][ T7610] attempt to access beyond end of device [ 416.925979][ T7610] loop2: rw=524288, want=776, limit=16 [ 416.937318][ T7610] attempt to access beyond end of device [ 416.937318][ T7610] loop2: rw=524288, want=848, limit=16 [ 416.948609][ T7610] attempt to access beyond end of device [ 416.948609][ T7610] loop2: rw=524288, want=13478624056, limit=16 [ 416.994206][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.138851][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 417.197645][ T7458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.224008][ T7616] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.487590][ T3702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.512956][ T3702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.567913][ T7626] netlink: 164 bytes leftover after parsing attributes in process `syz.2.806'. [ 417.630333][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 417.675505][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.688921][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.716559][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 419.051453][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.133883][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.336279][ T7643] loop3: detected capacity change from 0 to 128 [ 419.347083][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 420.038734][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 420.114504][ T7644] loop0: detected capacity change from 0 to 1024 [ 420.122982][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.174313][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.204487][ T7458] device veth0_vlan entered promiscuous mode [ 420.227338][ T7644] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 420.289941][ T7458] device veth1_vlan entered promiscuous mode [ 420.300502][ T7644] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 420.431965][ T7648] overlayfs: failed to resolve './file1': -2 [ 422.427648][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 422.455606][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 422.528545][ T7458] device veth0_macvtap entered promiscuous mode [ 422.552221][ T6491] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 422.574713][ T7656] loop2: detected capacity change from 0 to 1024 [ 422.587252][ T6491] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 422.603197][ T7458] device veth1_macvtap entered promiscuous mode [ 422.638127][ T7656] hfsplus: unable to parse mount options [ 422.734788][ T4723] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 422.851394][ T7659] loop1: detected capacity change from 0 to 16 [ 422.978364][ T7659] erofs: (device loop1): mounted with root inode @ nid 36. [ 423.005546][ T144] device hsr_slave_0 left promiscuous mode [ 423.087420][ T7661] loop2: detected capacity change from 0 to 256 [ 423.163985][ T144] device hsr_slave_1 left promiscuous mode [ 423.265929][ T4723] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 423.333960][ T4723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.693812][ T7659] overlayfs: failed to resolve './file0': -2 [ 423.708941][ T4723] usb 1-1: config 0 descriptor?? [ 423.717577][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.757918][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.775263][ T4723] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 423.799990][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.808681][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.819064][ T144] device bridge_slave_1 left promiscuous mode [ 423.826208][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.836171][ T144] device bridge_slave_0 left promiscuous mode [ 423.843096][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.876072][ T144] device hsr_slave_0 left promiscuous mode [ 423.895507][ T144] device hsr_slave_1 left promiscuous mode [ 423.916395][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.923885][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.957631][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.973922][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.993573][ T7654] input: syz1 as /devices/virtual/input/input18 [ 424.036617][ T144] device bridge_slave_1 left promiscuous mode [ 424.042858][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.090738][ T144] device bridge_slave_0 left promiscuous mode [ 424.100059][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.116797][ T144] device hsr_slave_0 left promiscuous mode [ 424.132362][ T144] device hsr_slave_1 left promiscuous mode [ 424.147925][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.183680][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.199797][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.230965][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.247728][ T144] device bridge_slave_1 left promiscuous mode [ 424.256486][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.270571][ T144] device bridge_slave_0 left promiscuous mode [ 424.277191][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.337583][ T4723] gspca_sonixj: reg_w1 err -110 [ 424.350299][ T4723] sonixj: probe of 1-1:0.0 failed with error -110 [ 424.691592][ T144] device veth1_macvtap left promiscuous mode [ 424.728724][ T144] device veth0_macvtap left promiscuous mode [ 424.766344][ T144] device veth1_vlan left promiscuous mode [ 424.799832][ T144] device veth0_vlan left promiscuous mode [ 424.860692][ T144] device veth1_macvtap left promiscuous mode [ 424.898482][ T144] device veth0_macvtap left promiscuous mode [ 424.947204][ T144] device veth1_vlan left promiscuous mode [ 425.011259][ T144] device veth0_vlan left promiscuous mode [ 425.027319][ T144] device veth1_macvtap left promiscuous mode [ 425.036892][ T144] device veth0_macvtap left promiscuous mode [ 425.071953][ T144] device veth1_vlan left promiscuous mode [ 425.089405][ T144] device veth0_vlan left promiscuous mode [ 425.408889][ T7684] vxcan1: tx drop: invalid sa for name 0x0000040000000000 [ 426.193898][ T7686] loop1: detected capacity change from 0 to 512 [ 426.304253][ T7686] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.822: corrupted inode contents [ 426.320757][ T7686] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #3: comm syz.1.822: mark_inode_dirty error [ 426.334699][ T7686] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.822: corrupted inode contents [ 426.348467][ T7686] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.822: mark_inode_dirty error [ 426.372309][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.389869][ T7686] Quota error (device loop1): write_blk: dquota write failed [ 426.398149][ T7686] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 426.409377][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.410362][ T7686] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.822: Failed to acquire dquot type 0 [ 426.431548][ T7686] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.822: corrupted inode contents [ 426.444285][ T7686] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #16: comm syz.1.822: mark_inode_dirty error [ 426.457752][ T7686] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.822: corrupted inode contents [ 426.481735][ T7686] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.822: mark_inode_dirty error [ 426.502045][ T144] bond0 (unregistering): Released all slaves [ 426.502969][ T7686] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.822: corrupted inode contents [ 426.521081][ T7686] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 426.531488][ T7686] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.822: corrupted inode contents [ 426.544143][ T7686] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.822: mark_inode_dirty error [ 426.556435][ T7686] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 426.580242][ T7686] EXT4-fs (loop1): 1 truncate cleaned up [ 426.585952][ T7686] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 426.597603][ T7686] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 426.791276][ T144] team0 (unregistering): Port device team_slave_1 removed [ 426.825971][ T144] team0 (unregistering): Port device team_slave_0 removed [ 426.850751][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.865581][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.206255][ T144] bond0 (unregistering): Released all slaves [ 427.558957][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 427.581880][ T144] team0 (unregistering): Port device team_slave_1 removed [ 427.598158][ T144] team0 (unregistering): Port device team_slave_0 removed [ 427.615642][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.633650][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.713707][ T144] bond0 (unregistering): Released all slaves [ 427.722001][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.823'. [ 427.792654][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 427.803057][ T4732] usb 1-1: USB disconnect, device number 11 [ 427.847119][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.899909][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.950544][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.984544][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.995264][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.006967][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.018168][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.036342][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.057873][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.106228][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.138254][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.196475][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.259577][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.270517][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.281211][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.291271][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.302316][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.313404][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.326598][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.350344][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.376008][ T7458] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.385083][ T7458] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.394028][ T7458] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.403813][ T7458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.416928][ T7708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.498532][ T7702] device veth0_vlan left promiscuous mode [ 428.513803][ T7702] device veth0_vlan entered promiscuous mode [ 428.526584][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.550031][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.751668][ T7704] vcan0 speed is unknown, defaulting to 1000 [ 428.849659][ T3755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.950739][ T7720] trusted_key: encrypted_key: insufficient parameters specified [ 429.045831][ T3755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.680271][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.706010][ T7725] loop2: detected capacity change from 0 to 512 [ 429.712597][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.730364][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.744622][ T7722] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 429.786774][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 429.856726][ T7725] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.833: corrupted inode contents [ 429.980648][ T7725] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #3: comm syz.2.833: mark_inode_dirty error [ 430.043372][ T7725] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.833: corrupted inode contents [ 430.225335][ T7725] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.833: mark_inode_dirty error [ 430.256650][ T7725] Quota error (device loop2): write_blk: dquota write failed [ 430.264872][ T7725] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 430.492601][ T3990] Bluetooth: hci3: command 0x0409 tx timeout [ 431.137077][ T7725] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.833: Failed to acquire dquot type 0 [ 431.158279][ T7725] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.833: corrupted inode contents [ 431.219605][ T7704] chnl_net:caif_netlink_parms(): no params data found [ 431.235841][ T7725] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #16: comm syz.2.833: mark_inode_dirty error [ 431.286080][ T7725] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.833: corrupted inode contents [ 431.310087][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 431.316243][ T7725] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.833: mark_inode_dirty error [ 431.348828][ T7740] device vlan2 entered promiscuous mode [ 431.372151][ T7740] device batadv0 entered promiscuous mode [ 431.382062][ T7740] device batadv0 left promiscuous mode [ 431.609627][ T7725] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.833: corrupted inode contents [ 431.694086][ T7725] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 431.743994][ T7725] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.833: corrupted inode contents [ 431.810432][ T7725] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.833: mark_inode_dirty error [ 431.863467][ T7725] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 431.939783][ T7725] EXT4-fs (loop2): 1 truncate cleaned up [ 431.948281][ T7725] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 432.006136][ T7725] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 432.140073][ T7750] loop0: detected capacity change from 0 to 512 [ 432.388824][ T7750] EXT4-fs (loop0): 1 orphan inode deleted [ 432.394886][ T7750] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 433.219744][ T4732] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 433.514261][ T4732] Bluetooth: hci2: Injecting HCI hardware error event [ 433.841640][ T7750] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 433.932127][ T3586] Bluetooth: hci2: hardware error 0x00 [ 433.998081][ T3982] Bluetooth: hci3: command 0x041b tx timeout [ 434.022873][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.032989][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.046880][ T7704] device bridge_slave_0 entered promiscuous mode [ 434.049066][ T3991] Bluetooth: hci1: command 0x0406 tx timeout [ 434.096542][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 434.159509][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.168677][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.851'. [ 434.196954][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.217939][ T7704] device bridge_slave_1 entered promiscuous mode [ 435.316831][ T7704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.395131][ T7704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.515113][ T7784] netlink: 'syz.1.844': attribute type 1 has an invalid length. [ 435.551900][ T7704] team0: Port device team_slave_0 added [ 435.656750][ T7704] team0: Port device team_slave_1 added [ 435.849875][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.857470][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.899495][ T7704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.928765][ T7798] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.849'. [ 435.965756][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.975910][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.047823][ T7704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.126168][ T7704] device hsr_slave_0 entered promiscuous mode [ 436.141263][ T7704] device hsr_slave_1 entered promiscuous mode [ 436.238078][ T3985] Bluetooth: hci3: command 0x040f tx timeout [ 436.324437][ T3985] Bluetooth: hci0: command 0x0401 tx timeout [ 436.599049][ T7704] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.725643][ T7704] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.726650][ T7704] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.729223][ T7812] loop4: detected capacity change from 0 to 4096 [ 437.984768][ T7812] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 437.996419][ T7704] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.073846][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 438.090773][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 438.490606][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 438.857032][ T7812] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 438.908893][ T26] audit: type=1800 audit(1726261316.336:187): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.853" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 440.045799][ T7831] loop0: detected capacity change from 0 to 256 [ 440.302761][ T7812] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 440.351501][ T26] audit: type=1804 audit(1726261317.638:188): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.853" name="/newroot/6/file0/file1" dev="loop4" ino=30 res=1 errno=0 [ 440.458780][ T3627] ntfs3: loop4: ino=1e, Internal error [ 440.497247][ T7835] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 440.549002][ T3627] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 440.549419][ T26] audit: type=1800 audit(1726261317.675:189): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.853" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 440.674455][ T7704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 441.096908][ T7704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 441.210818][ T7704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.236757][ T7704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 442.870459][ T7847] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 442.909396][ T7856] vcan0 speed is unknown, defaulting to 1000 [ 443.580806][ T7861] loop2: detected capacity change from 0 to 32768 [ 443.718910][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.738300][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.779843][ T7704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.102492][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 444.114890][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 444.706827][ T7704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.747308][ T7861] XFS (loop2): Mounting V5 Filesystem [ 444.766792][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.901367][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.929634][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 444.949735][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.997995][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.005167][ T4088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.103610][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.124885][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.128646][ T7861] XFS (loop2): Ending clean mount [ 445.145323][ T7861] XFS (loop2): Quotacheck needed: Please wait. [ 445.155526][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.162729][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.244983][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.296200][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.331453][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.407874][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.423168][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.490695][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.745868][ T7861] XFS (loop2): Quotacheck: Done. [ 446.200938][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.252353][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.294227][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.320043][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.341845][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.352935][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.374343][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.470557][ T3982] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 446.600886][ T7897] loop0: detected capacity change from 0 to 1024 [ 446.602299][ T7900] loop1: detected capacity change from 0 to 2048 [ 446.647037][ T7893] device veth0_vlan left promiscuous mode [ 446.658425][ T7893] device veth0_vlan entered promiscuous mode [ 446.698187][ T3982] usb 3-1: device descriptor read/64, error -71 [ 446.801553][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.823563][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.861232][ T7900] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.871: bad orphan inode 8192 [ 446.873426][ T7897] hfsplus: xattr searching failed [ 446.879277][ T26] audit: type=1800 audit(1726261323.706:190): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.872" name="bus" dev="loop0" ino=25 res=0 errno=0 [ 446.907438][ T7897] hfsplus: xattr searching failed [ 446.916929][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.937022][ T7900] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.987872][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 447.019070][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.037039][ T3982] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 447.117445][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.138514][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.170339][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.192176][ T7911] loop4: detected capacity change from 0 to 512 [ 447.207601][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.248132][ T7704] device veth0_vlan entered promiscuous mode [ 447.299651][ T7704] device veth1_vlan entered promiscuous mode [ 447.324540][ T7911] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.875: invalid indirect mapped block 256 (level 2) [ 447.358404][ T3982] usb 3-1: device descriptor read/64, error -71 [ 447.424686][ T7408] XFS (loop2): Unmounting Filesystem [ 447.448927][ T7704] device veth0_macvtap entered promiscuous mode [ 447.477862][ T7911] EXT4-fs (loop4): 2 truncates cleaned up [ 447.483645][ T7911] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 447.500005][ T3982] usb usb3-port1: attempt power cycle [ 447.534300][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 447.553913][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 447.563250][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 447.573142][ T7918] loop1: detected capacity change from 0 to 1024 [ 447.588988][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.705483][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.779646][ T7704] device veth1_macvtap entered promiscuous mode [ 447.857721][ T1209] hfsplus: b-tree write err: -5, ino 3 [ 447.917563][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.940720][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.955814][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.969817][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.982466][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.996905][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.010486][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.054058][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.122434][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.227011][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.247184][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.312767][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.876'. [ 448.374432][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.403681][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.456293][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.491321][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.512200][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.514224][ T7922] netlink: 44 bytes leftover after parsing attributes in process `syz.4.879'. [ 448.524086][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.548887][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.559595][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.580095][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.615889][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.634817][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.645808][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.666911][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.759284][ T7704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.789868][ T7704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.804202][ T7704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.816086][ T7704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.917461][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.935150][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.024742][ T7935] netlink: 48 bytes leftover after parsing attributes in process `syz.0.881'. [ 449.843668][ T3703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.864308][ T3703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.900408][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.941421][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.984979][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.017749][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 450.052309][ T4732] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 450.323720][ T7955] loop2: detected capacity change from 0 to 256 [ 450.383862][ T7956] trusted_key: encrypted_key: keylen parameter is missing [ 450.461931][ T7956] loop0: detected capacity change from 0 to 2048 [ 450.466362][ T4732] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 450.481666][ T7955] MINIX-fs: mounting file system with errors, running fsck is recommended [ 450.592772][ T7956] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 450.616897][ T7956] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 450.791042][ T3592] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 450.818487][ T3592] Bluetooth: hci4: Injecting HCI hardware error event [ 450.826731][ T3587] Bluetooth: hci4: hardware error 0x00 [ 450.921106][ T4732] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 450.948914][ T4732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.988026][ T4732] usb 5-1: Manufacturer: 쌂臁署힇홎菨ԍ혔뺰ힵꂒ죂钗Ｓ⋤㾊⏝켙峐ꮎ▞৲좾䄒균븮ￜꬠꑢ윶굽ẵ왫ﰬ輚킴奋ᅘꮨ탬撛㬽帟⒣딖⺚ɟ檦ꊚ뿘茩⓸ḛ浴祼倳癅ⱝ쉫ᘙ巣脁ḇ뗬஺൶泫㧱ܗ㮲㟐锨.ᙽ邰퇎㺕ffi鶩婶ʥ⾝醀ꖌ亶ʆ暣袎뷋鵞嶽晣ས샠࿙㭁댧❷룷䭷ꁥ숉貪༘љ扼䎠ꄂ籧乷ꁛ [ 451.977009][ T4732] usb 5-1: SerialNumber: ఄ [ 452.047833][ T7940] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 452.419070][ T4732] usb 5-1: USB disconnect, device number 9 [ 452.475466][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 452.552846][ T7986] program syz.2.889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.763505][ T7984] netlink: 200 bytes leftover after parsing attributes in process `syz.0.892'. [ 454.894131][ T8012] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 454.894131][ T8012] SȘȞZ6' [ 456.927808][ T8028] loop4: detected capacity change from 0 to 1024 [ 458.930398][ T8028] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 459.045629][ T8028] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 459.086902][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.908'. [ 459.450698][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 459.574514][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 459.875288][ T26] audit: type=1326 audit(1726261335.711:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabccdadef9 code=0x0 [ 460.327164][ T8069] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 460.393307][ T8069] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.911'. [ 461.332707][ T8079] loop4: detected capacity change from 0 to 512 [ 461.613158][ T8082] program syz.1.916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.798305][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 461.811041][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 462.138712][ T8082] loop1: detected capacity change from 0 to 512 [ 462.338463][ T8082] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 462.367322][ T8079] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 462.369618][ T8097] 9pnet: Insufficient options for proto=fd [ 462.401432][ T8079] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 462.419190][ T8097] loop2: detected capacity change from 0 to 8 [ 462.419698][ T8082] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,auto_da_alloc=0x0000000000000000,grpquota,inode_readahead_blks=0x0000000000000000,errors=continue,,errors=continue. Quota mode: writeback. [ 462.717815][ T8097] attempt to access beyond end of device [ 462.717815][ T8097] loop2: rw=2048, want=36028797018963976, limit=8 [ 463.084052][ T8097] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 463.102819][ T8097] unable to read xattr id index table [ 463.244588][ T8105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 463.309521][ C1] sd 0:0:1:0: tag#6467 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 463.319563][ C1] sd 0:0:1:0: tag#6467 CDB: Write(6) 0a 0b 00 08 00 00 [ 463.356815][ T8100] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.914: Directory hole found for htree leaf block 0 [ 463.430300][ T144] device hsr_slave_0 left promiscuous mode [ 463.448023][ T144] device hsr_slave_1 left promiscuous mode [ 463.457435][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.467854][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.769368][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 464.782137][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.782257][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.802302][ T144] device bridge_slave_1 left promiscuous mode [ 464.802447][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.805420][ T144] device bridge_slave_0 left promiscuous mode [ 464.805553][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.810432][ T144] rdma_rxe: ignoring netdev event = 10 for vcan0 [ 464.820376][ T144] device veth1_macvtap left promiscuous mode [ 464.820507][ T144] device veth0_macvtap left promiscuous mode [ 464.820591][ T144] device veth1_vlan left promiscuous mode [ 464.820668][ T144] device veth0_vlan left promiscuous mode [ 465.279423][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 465.289161][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 465.345001][ T21] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 465.361042][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.380087][ T21] usb 4-1: config 0 descriptor?? [ 465.408051][ T144] infiniband syz1: set down [ 465.504340][ T144] team0 (unregistering): Port device team_slave_1 removed [ 465.521780][ T144] team0 (unregistering): Port device team_slave_0 removed [ 465.534446][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.548853][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.627947][ T144] bond0 (unregistering): Released all slaves [ 465.643569][ T8014] smc: removing ib device syz1 [ 465.653112][ T21] ath6kl: Failed to submit usb control message: -71 [ 465.660164][ T21] ath6kl: unable to send the bmi data to the device: -71 [ 465.667211][ T21] ath6kl: Unable to send get target info: -71 [ 465.695648][ T4723] vcan0 speed is unknown, defaulting to 1000 [ 465.709684][ T21] ath6kl: Failed to init ath6kl core: -71 [ 465.736699][ T21] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 465.794847][ T21] usb 4-1: USB disconnect, device number 8 [ 466.372109][ T8122] loop1: detected capacity change from 0 to 2048 [ 466.657476][ T3592] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 466.657566][ T4716] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 466.925593][ T4716] usb 5-1: Using ep0 maxpacket: 16 [ 466.952201][ T8122] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 467.056383][ T4716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.108365][ T8122] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038 (0x7fffffff) [ 467.265254][ T4716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.283754][ T4716] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 467.293046][ T4716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.304454][ T3592] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 467.313534][ T3592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.321918][ T4716] usb 5-1: config 0 descriptor?? [ 467.327226][ T3592] usb 3-1: Product: syz [ 467.331397][ T3592] usb 3-1: Manufacturer: syz [ 467.336191][ T3592] usb 3-1: SerialNumber: syz [ 467.343204][ T3592] usb 3-1: config 0 descriptor?? [ 467.631142][ T3592] hso 3-1:0.0: Failed to find BULK IN ep [ 467.654488][ T3592] usb-storage 3-1:0.0: USB Mass Storage device detected [ 467.661639][ T8135] loop1: detected capacity change from 0 to 2048 [ 467.885984][ T8118] sctp: [Deprecated]: syz.2.927 (pid 8118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.885984][ T8118] Use struct sctp_sack_info instead [ 467.905044][ T4716] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 467.938525][ T8135] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 468.589170][ T8135] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.930: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 468.714293][ T4716] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 468.721325][ T4716] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 468.731070][ T4716] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 468.762145][ T3985] usb 3-1: USB disconnect, device number 13 [ 468.828218][ T8135] EXT4-fs (loop1): Remounting filesystem read-only [ 468.834933][ T4716] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 468.852734][ T4716] savu 0003:1E7D:2D5A.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 468.873601][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 468.967533][ T4716] usb 5-1: USB disconnect, device number 10 [ 469.163784][ T8153] loop3: detected capacity change from 0 to 4096 [ 469.571226][ T8153] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 469.765788][ T8163] loop2: detected capacity change from 0 to 512 [ 470.198677][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.205531][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.850451][ T8163] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 470.877196][ T8163] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 471.069686][ T8184] loop3: detected capacity change from 0 to 256 [ 471.211339][ T8184] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 471.408294][ T8127] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 472.506364][ T8196] loop0: detected capacity change from 0 to 128 [ 472.614402][ T8198] netlink: 'syz.4.946': attribute type 1 has an invalid length. [ 472.713696][ T8196] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 472.930795][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.945'. [ 473.932753][ T8216] delete_channel: no stack [ 473.936615][ T4716] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 474.281241][ T3587] Bluetooth: Wrong link type (-71) [ 474.289738][ T8223] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 474.322367][ T4716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.334998][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.373709][ T4716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.455807][ T8223] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 474.613192][ T4716] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 474.806679][ T4716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.134276][ T4716] usb 4-1: config 0 descriptor?? [ 475.180037][ T8226] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 475.375762][ T8233] loop1: detected capacity change from 0 to 512 [ 475.494920][ T8233] EXT4-fs (loop1): Ignoring removed nobh option [ 475.536386][ T8233] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext2 [ 476.089177][ T4716] hid-generic 0003:0C70:F011.0006: unknown main item tag 0x0 [ 476.394225][ T8238] udc-core: couldn't find an available UDC or it's busy [ 476.412567][ T4716] hid-generic 0003:0C70:F011.0006: unknown main item tag 0x0 [ 476.420056][ T4716] hid-generic 0003:0C70:F011.0006: unknown main item tag 0x0 [ 476.443373][ T8238] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 476.506298][ T8233] smc: net device erspan0 applied user defined pnetid SYZ2 [ 476.530806][ T3587] Bluetooth: hci3: ACL packet for unknown connection handle 256 [ 476.550141][ T4716] hid-generic 0003:0C70:F011.0006: unknown main item tag 0x0 [ 476.797107][ T4716] hid-generic 0003:0C70:F011.0006: unknown main item tag 0x0 [ 476.807044][ T4716] hid-generic 0003:0C70:F011.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 536.642938][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.649606][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 591.223966][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 591.231160][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8014/1:b..l P144/1:b..l [ 591.241080][ C0] (detected by 0, t=10502 jiffies, g=37745, q=383) [ 591.247703][ C0] task:kworker/u4:1 state:R running task stack:23992 pid: 144 ppid: 2 flags:0x00004000 [ 591.260619][ C0] Workqueue: netns cleanup_net [ 591.265435][ C0] Call Trace: [ 591.268721][ C0] [ 591.271668][ C0] __schedule+0x12c4/0x45b0 [ 591.276204][ C0] ? mark_lock+0x98/0x340 [ 591.280551][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 591.286546][ C0] ? release_firmware_map_entry+0x190/0x190 [ 591.292463][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 591.297765][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 591.302895][ C0] ? __cond_resched+0x20/0x20 [ 591.307723][ C0] irqentry_exit+0x53/0x80 [ 591.312158][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 591.318335][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 591.323634][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0c 75 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 591.343252][ C0] RSP: 0018:ffffc900014bf960 EFLAGS: 00000206 [ 591.349341][ C0] RAX: 0000000000000001 RBX: 1ffff92000297f38 RCX: 1ffff92000297ed8 [ 591.357409][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b3da0 RDI: ffffffff8ad904c0 [ 591.365392][ C0] RBP: ffffc900014bfac0 R08: dffffc0000000000 R09: fffffbfff20e2419 [ 591.373465][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000297f34 [ 591.381451][ C0] R13: dffffc0000000000 R14: ffffc900014bf9c0 R15: 0000000000000246 [ 591.389468][ C0] ? read_lock_is_recursive+0x10/0x10 [ 591.394870][ C0] ? __might_sleep+0xc0/0xc0 [ 591.399485][ C0] ? cond_resched_rcu+0x16/0x130 [ 591.404446][ C0] rcu_lock_acquire+0x2a/0x30 [ 591.409135][ C0] ? rcu_lock_acquire+0x5/0x30 [ 591.413918][ C0] cond_resched_rcu+0xac/0x130 [ 591.418700][ C0] ip_vs_conn_net_cleanup+0x376/0x520 [ 591.424093][ C0] __ip_vs_cleanup_batch+0x70/0xf0 [ 591.429223][ C0] ? __ip_vs_init+0x430/0x430 [ 591.433931][ C0] cleanup_net+0x763/0xb60 [ 591.438369][ C0] ? ops_free_list+0x340/0x340 [ 591.443286][ C0] process_one_work+0x8a1/0x10c0 [ 591.448275][ C0] ? worker_detach_from_pool+0x260/0x260 [ 591.453941][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 591.459539][ C0] ? kthread_data+0x4e/0xc0 [ 591.464084][ C0] ? wq_worker_running+0x97/0x170 [ 591.469131][ C0] worker_thread+0xaca/0x1280 [ 591.473852][ C0] kthread+0x3f6/0x4f0 [ 591.478020][ C0] ? rcu_lock_release+0x20/0x20 [ 591.482891][ C0] ? kthread_blkcg+0xd0/0xd0 [ 591.487505][ C0] ret_from_fork+0x1f/0x30 [ 591.491949][ C0] [ 591.494974][ C0] task:kworker/u4:15 state:R running task stack:26400 pid: 8014 ppid: 2 flags:0x00004000 [ 591.505943][ C0] Workqueue: bat_events batadv_nc_worker [ 591.511596][ C0] Call Trace: [ 591.514879][ C0] [ 591.517821][ C0] __schedule+0x12c4/0x45b0 [ 591.522363][ C0] ? validate_chain+0x112/0x5930 [ 591.527320][ C0] ? mark_lock+0x98/0x340 [ 591.531676][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 591.537682][ C0] ? release_firmware_map_entry+0x190/0x190 [ 591.543686][ C0] ? reacquire_held_locks+0x660/0x660 [ 591.549091][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 591.554393][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 591.559518][ C0] ? __cond_resched+0x20/0x20 [ 591.564223][ C0] irqentry_exit+0x53/0x80 [ 591.568744][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 591.574743][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 591.580041][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0c 75 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 591.599835][ C0] RSP: 0018:ffffc90003087a80 EFLAGS: 00000206 [ 591.605921][ C0] RAX: 0000000000000001 RBX: 1ffff92000610f5c RCX: 1ffff92000610efc [ 591.613902][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b3da0 RDI: ffffffff8ad904c0 [ 591.621978][ C0] RBP: ffffc90003087bd8 R08: dffffc0000000000 R09: fffffbfff20e2419 [ 591.630060][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000610f58 [ 591.638127][ C0] R13: dffffc0000000000 R14: ffffc90003087ae0 R15: 0000000000000246 [ 591.646225][ C0] ? read_lock_is_recursive+0x10/0x10 [ 591.651710][ C0] ? rcu_lock_release+0x5/0x20 [ 591.656491][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 591.661546][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 591.667719][ C0] rcu_lock_acquire+0x2a/0x30 [ 591.672550][ C0] ? rcu_lock_acquire+0x5/0x30 [ 591.677352][ C0] batadv_nc_worker+0xc1/0x5b0 [ 591.682235][ C0] process_one_work+0x8a1/0x10c0 [ 591.687208][ C0] ? worker_detach_from_pool+0x260/0x260 [ 591.692866][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 591.698436][ C0] ? kthread_data+0x4e/0xc0 [ 591.702962][ C0] ? wq_worker_running+0x97/0x170 [ 591.708094][ C0] worker_thread+0xaca/0x1280 [ 591.712788][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 591.718740][ C0] kthread+0x3f6/0x4f0 [ 591.722855][ C0] ? rcu_lock_release+0x20/0x20 [ 591.727725][ C0] ? kthread_blkcg+0xd0/0xd0 [ 591.732333][ C0] ret_from_fork+0x1f/0x30 [ 591.736778][ C0] [ 591.739803][ C0] rcu: rcu_preempt kthread starved for 6979 jiffies! g37745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 591.750920][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 591.760892][ C0] rcu: RCU grace-period kthread stack dump: [ 591.766834][ C0] task:rcu_preempt state:R running task stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 591.777655][ C0] Call Trace: [ 591.780942][ C0] [ 591.783888][ C0] __schedule+0x12c4/0x45b0 [ 591.788410][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 591.794405][ C0] ? release_firmware_map_entry+0x190/0x190 [ 591.800685][ C0] ? mod_timer_pending+0x20/0x20 [ 591.805673][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 591.811077][ C0] schedule+0x11b/0x1f0 [ 591.815263][ C0] schedule_timeout+0x1b9/0x300 [ 591.820145][ C0] ? console_conditional_schedule+0x40/0x40 [ 591.826082][ C0] ? update_process_times+0x200/0x200 [ 591.831538][ C0] ? prepare_to_swait_event+0x321/0x340 [ 591.837113][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 591.842043][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 591.848307][ C0] ? rcu_gp_init+0x1140/0x1140 [ 591.853149][ C0] ? finish_swait+0xc5/0x1d0 [ 591.857773][ C0] rcu_gp_kthread+0xa4/0x360 [ 591.862478][ C0] ? _raw_spin_unlock+0x40/0x40 [ 591.867345][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 591.872473][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 591.878381][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 591.883426][ C0] kthread+0x3f6/0x4f0 [ 591.887498][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 591.892598][ C0] ? kthread_blkcg+0xd0/0xd0 [ 591.897397][ C0] ret_from_fork+0x1f/0x30 [ 591.901815][ C0] [ 591.904846][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 591.911787][ C0] NMI backtrace for cpu 0 [ 591.916119][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.167-syzkaller #0 [ 591.923921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 591.933966][ C0] Call Trace: [ 591.937238][ C0] [ 591.940070][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 591.944739][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 591.950363][ C0] ? panic+0x860/0x860 [ 591.954432][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 591.959358][ C0] ? __wake_up_klogd+0xd5/0x100 [ 591.964222][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 591.970453][ C0] ? _printk+0xd1/0x120 [ 591.974802][ C0] ? cpu_online+0x1f/0x40 [ 591.979119][ C0] ? panic+0x860/0x860 [ 591.983342][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 591.989529][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 591.995530][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 592.001684][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 592.007188][ C0] ? print_cpu_stall+0x600/0x600 [ 592.012154][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 592.017184][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 592.022397][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 592.028143][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 592.033044][ C0] ? hrtimer_run_queues+0x163/0x450 [ 592.038281][ C0] ? account_process_tick+0x232/0x3a0 [ 592.043663][ C0] update_process_times+0x196/0x200 [ 592.048958][ C0] tick_sched_timer+0x386/0x550 [ 592.053810][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 592.059454][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 592.064740][ C0] ? hrtimer_interrupt+0x980/0x980 [ 592.069837][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 592.075915][ C0] hrtimer_interrupt+0x392/0x980 [ 592.080886][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 592.087178][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 592.092890][ C0] [ 592.095807][ C0] [ 592.098726][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 592.104697][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 592.110755][ C0] Code: 82 42 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 c4 fe 48 f7 0f 1f 44 00 00 e8 0a 7e 42 f7 0f 00 2d 73 5c a5 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 8b 48 8c f7 [ 592.130784][ C0] RSP: 0018:ffffffff8c607b80 EFLAGS: 000002d3 [ 592.136841][ C0] RAX: ffffffff8a3ddc66 RBX: 0000000000000000 RCX: ffffffff8c6bd5c0 [ 592.144975][ C0] RDX: 0000000000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0 [ 592.152931][ C0] RBP: ffffffff8c607c10 R08: ffffffff8186db50 R09: fffffbfff18d7ab9 [ 592.161006][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff18c0f70 [ 592.169016][ C0] R13: ffff888146cba004 R14: ffffffff8c607ba0 R15: dffffc0000000000 [ 592.177027][ C0] ? trace_hardirqs_on+0x30/0x80 [ 592.182062][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 592.187265][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 592.192555][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 592.198113][ C0] ? rcu_qs+0x190/0x190 [ 592.202262][ C0] acpi_idle_enter+0x352/0x4f0 [ 592.207019][ C0] cpuidle_enter_state+0x521/0xef0 [ 592.212325][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 592.217773][ C0] ? can_stop_idle_tick+0x20d/0x2b0 [ 592.222966][ C0] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 592.228986][ C0] cpuidle_enter+0x59/0x90 [ 592.233533][ C0] do_idle+0x3e4/0x670 [ 592.237708][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 592.242907][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 592.248539][ C0] ? schedule_idle+0x57/0x90 [ 592.253120][ C0] cpu_startup_entry+0x14/0x20 [ 592.257894][ C0] ? time_init+0x40/0x40 [ 592.262143][ C0] start_kernel+0x48c/0x540 [ 592.266664][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 592.272574][ C0]