last executing test programs: 8.591052179s ago: executing program 0 (id=254): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 8.453437685s ago: executing program 2 (id=258): unshare(0x20000400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x3, 0x0, 0x0) 8.182291903s ago: executing program 2 (id=260): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22082, 0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=iso8859-4,discard,namecase=1,dmask=00000000000000000000003,fmask=00000000000000000000005,allow_utime=00000000000000000001701,allow_utime=00000000000000000000002,iocharset=macceltic,iocharset=iso8859-2,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c11d8b52b57d2afab69011ef557e362b500f718733d0b64d6799056b0249ffae53cc3a0340ad13e5ed49109ffcd6b2a1923db7ae93170a5710dfffbbdb47b047be1b10a390285833f269b6c204ff741dd776acf094ab1a73676d8a17c248a3beeb25d3e03c26965d8e0ebc58096fb7789dbd075ff8cfe6cc0e5d7f9c0bce0aca4b998d612ec60d667816c5aa3eaa36b"], 0x1, 0x1524, &(0x7f0000002280)="$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") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 7.755626256s ago: executing program 2 (id=266): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) 7.569018114s ago: executing program 0 (id=267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf2567000000", @ANYBLOB="0c009900080000002c0000000800c300741300000800c4"], 0x38}}, 0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x80, {{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40}}}, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100000000000000dad2f15f2421", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfff7}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x1, 0x7, 0x10001, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x40008, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x5, 0x400002, 0xfffffff9, 0x0, 0x9, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x400009, 0x800100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0xb, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) 7.568008252s ago: executing program 5 (id=269): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) 6.53858565s ago: executing program 1 (id=273): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x940020, &(0x7f00000066c0)=ANY=[@ANYRES64=r3, @ANYRES8=r3, @ANYRESOCT=r3, @ANYBLOB="f1bcca05ed588d63a576cc3afd51baf29cde0400000092f4e66ff7ef22aa9af727ceae8a8ec95fc1b73083de2de825a0cb2b0be774fdb33650d7dace27c16bc23b2f7c7fb72585548939698f280d138aa9255a8a924008f8477e82ba11cdb11efd5ca2f1ab049ce2cc7815d2daf8daea25533a558d561654faf5e0924f1376174f374d664fad4a6ab24ec000ccace822e7f9426e8e5de1fe58085a0ae86fd02a118b9365961834d46208b9fb4c91a1fa962a8b00a9717fcbb46c2400dc2e319379ea1e5a07aeb3f9cd4e648df445a1b4213e732300000000000010000758027a472e7d263ef567a84166f26ee56e701c63a8863787889bf1c90fccf31954a940c8b584ca89a512f28edec08eb1c0823c028840eeaf3f5d8769023c01ac63f7f959571e8e899b43c293bc21a2b833e5c9c703c4cfa063dd050045706bde3d7ac373ab04b62b4111b59eabd436dd97e788a36ef25bad99beec474e667589d37100ec36292c15c6", @ANYRESHEX=r3, @ANYRES32=r3, @ANYRES64, @ANYBLOB="735f6e46fee1844ad4695ba1f85f5371aa4e7749437e67fc581a8d8983a4f95cc4471ae8a76cf365c4512dd81215cd5e4153586ad440d6403f7da30c61dbfe55d4fdbefbdceda57aaefe6580b8a9bb883042c20075e444bff2f7ef6834b3de98c9d04374735e6ae92874f0d05c6ae5f6b87d0c35081e3eec0e2fc893bc95e8568d709411c676efed00626dbb1875f613cfca3f0b58657c5d223c7137c2ef032583e8217cdd2e799b7e8890dc20b93089", @ANYRES64, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x5, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad432bbd70498bf73936366cc000"], 0x14}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r4, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120014}, 0xc, &(0x7f00000001c0)={&(0x7f0000000cc0)={0xb8, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x72}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x810) socketpair(0x25, 0x80000, 0x50, &(0x7f0000000500)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r12, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r13, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a40)={0x14, r11, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000850}, 0x44010) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r14, &(0x7f0000000180), 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x6, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) 5.668789334s ago: executing program 0 (id=274): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5a}, 0x28) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 5.440995553s ago: executing program 4 (id=275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x96, 0x0, &(0x7f0000000040)="c1188e08b95d02ff4284860586ddb1ec174ec92a21eaee4983bba5f1287eb964514cca2d14423822878efad989c0b089322b68f594074bb5fe173d0a58dd07b55cc2ebfcda63ccb057b657b746a04cdcd9f6c3f0fe82cc10988d19ee225ae3e7cfbf323493ab5b1028fa09fcaf3c9f1a54c4ef51caa5e253ff90a58cbde459ba2e3cffccad4da2b2f1e96d7094c64992b1688e65da35", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 5.439914068s ago: executing program 5 (id=276): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="a15013a8a389f7b8ebb2f8b98016ec133a5d9551274958dfaab89671a981eedc44f8d86c55309bf143c7db13f120c10cd33972fdfbd1b6aef0fab9f60369e7afabadba6052f76e596fbdf76af8ad305308ab69a45be1f7451fe1580be20e8940e2ac5b50bc4eb1f2c20cdd632c50d393eeb4db8f53df5c504eb6fe305f01e6421c0976e939c397090c10c6e95a255909b8cc1129eccfcbc85a"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="40010421f9252ea3"], 0x8) 5.283505684s ago: executing program 0 (id=277): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 5.142987901s ago: executing program 4 (id=278): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 5.000138319s ago: executing program 1 (id=279): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf2567000000", @ANYBLOB="0c009900080000002c0000000800c300741300000800c4"], 0x38}}, 0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x80, {{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40}}}, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100000000000000dad2f15f2421", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfff7}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x1, 0x7, 0x10001, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x40008, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x5, 0x400002, 0xfffffff9, 0x0, 0x9, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x400009, 0x800100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0xb, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 4.99954474s ago: executing program 0 (id=280): socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x6e22}}, 0x80, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) clock_gettime(0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.899699s ago: executing program 3 (id=281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x5, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0xc, 0x7}, {0x6, 0x60, 0x0, 0xfffffffe}]}) write$ppp(r5, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfffffdb6}, 0x1, 0x0, 0x0, 0x20000040}, 0x200008c1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 3.825361149s ago: executing program 3 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x88, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x0, 0x1, 0x0, {0x8, 0x6, 0x0, 0x2a2}, 0xf, 0x1, 0x8}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "435d92b660c316956934eab999"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x4}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3.636120006s ago: executing program 5 (id=283): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000180), 0x0}, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.56829942s ago: executing program 1 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="200050800500"], 0x3c}, 0x1, 0x0, 0x0, 0x2080}, 0x8010) 3.507832698s ago: executing program 4 (id=285): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.457762144s ago: executing program 3 (id=286): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) bind$ax25(r0, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$ax25(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000001380)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) 3.246497496s ago: executing program 2 (id=287): r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) read(r0, &(0x7f00000001c0)=""/93, 0x5d) 3.235872966s ago: executing program 1 (id=288): socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x6e22}}, 0x80, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.080050531s ago: executing program 3 (id=289): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5a}, 0x28) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.03054806s ago: executing program 4 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x96, 0x0, &(0x7f0000000040)="c1188e08b95d02ff4284860586ddb1ec174ec92a21eaee4983bba5f1287eb964514cca2d14423822878efad989c0b089322b68f594074bb5fe173d0a58dd07b55cc2ebfcda63ccb057b657b746a04cdcd9f6c3f0fe82cc10988d19ee225ae3e7cfbf323493ab5b1028fa09fcaf3c9f1a54c4ef51caa5e253ff90a58cbde459ba2e3cffccad4da2b2f1e96d7094c64992b1688e65da35", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 2.13045028s ago: executing program 1 (id=291): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f000000cb40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r0, 0x0, 0x0, 0xfecc) socket(0x2, 0x80805, 0x0) init_module(&(0x7f0000000040), 0xffcd4, &(0x7f0000000080)='[[-\'^%{\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) io_uring_setup(0x39c4, &(0x7f0000000240)={0x0, 0x447e, 0x20, 0x3, 0x24b}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x4}}, 0x7, 0x29, 0x4b12a11b, 0x9, 0x0, 0x3a, 0x80}, 0x9c) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) 2.078999432s ago: executing program 2 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 2.047876849s ago: executing program 4 (id=293): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x22000414, &(0x7f00000002c0)={[{@noblock_validity}, {@journal_ioprio}, {@jqfmt_vfsv1}, {@oldalloc}, {@noquota}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@usrjquota}, {@grpid}, {@delalloc}], [], 0x2c}, 0x84, 0x4c8, &(0x7f0000000e40)="$eJzs3MuPFMUfAPBv9z54LczCj5/KQxlfcSO6yy6oHDyg0YSLiYke8LguK0EWMOyaCCECxuDR6D+gHk1MPHnxpIkx6knjVe/GhBguoAczpme62RnmsbNvZT6fZGaruqum+tvdNVPTtT0B9Kxy9pREDEXELxFRqmUbC5Rrf25evzj15/WLU0lUKi/9kVTL3bh+caooWtTbkmdG0oj03ST2tGh39vyFU5MzM9Pn8vzY3Ok3xmbPX3j85OnJE9Mnps9MHD586OD4U09OPNFVHJcWWJ/FdWP322f37jr6ygcvTFXi1e8/y7Z3KF9fH0fNcFftdlKOclRy80sHq88PL/vV/1221qWT/nXcEBalLyKywzVQ7f+l6Iv5g1eK59+5lfmmue6Ha7WRwKrIPpu2Ny3tq/3pzwsAd6hEF4ceVXziZ99/i8eaDkDW2bVnsufpavw380dtTX+k2XfZ4do39r429e/q/PKV0gLtD0XEsct/fZQ9ouV1CACAlfVVNv55rNX4L20Y22zL51CGI2J/ROyIiP9FxM6I+H8+Dro7Iu5ZZPvl2/LN45+fNi0psC5tjoin87mtxvFfmpdIbuW2VuMfSF47OTN9IN8nIzGwIcuPd2jj6+d+fr/dunLd+C97ZO0XY8F8O37v39BY5/jk3OQyQm5w7UrE7v5W8Se3ZgKyPbArInYv4fWzfXby0U/3ZultW5rXLxx/Byswz1T5JOKR2vG/HLfFX0hqLbWbnxzbGDPTB8aKs6LZDz9efbE+P1CXno8/4tjG7mLauNRgW8iO/+aW538ef9ENivna2cW3cfXX99p+p2k+/klk+2Jefv7XvQtk5/9g8nI1PZgve2tybu7ceMRgvqBh+cR83SJflM/iH3mwdf/fEfH3x3m9PRGRncT3RsR9EbEv3/b7I+KBBY7Id88+9HrnPVQX/5Ho/vyPK90V6yCL/3in4x8xnNTP1y8h0Xfq2y/btd/d+9+hamokX9LN+1+3G7icfQcAAAD/FWmlFEORpKP5pZ6huotTO2NzOnN2dm5/Od48c7w2Vz0cA2lxpatUdz10PL82XOQnbssfjIjt1f802lTNj06dndm6noED1Xt1Gvp/pOnoaG3db+3+6QW4cyxqHq3+7sDPv1j5jQHWlPs1oXfp/9C79H/oXfo/9K5W/f9SxM112BRgjfn8h96l/0Pv0v+hd+n/0JOab4kvfmhhKXf6zyd2HF1W9VVPVEqr8sqXF1+rb5Uijfof7WibSCJiaU1E2rnMYBetr1siXbDMkYV2y8CyfhMjS+zLExsiottal9ZsrxbvEEmybm9OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK+CfAAAA//9TiNqu") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) 2.022329047s ago: executing program 3 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x3, 0x80000000, 0xa8e, 0x81, 0x2, 0x1, 0x30, 0x80000001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.995159109s ago: executing program 5 (id=295): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x20020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x538a, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.439222902s ago: executing program 0 (id=296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf2567000000", @ANYBLOB="0c009900080000002c0000000800c300741300000800c4"], 0x38}}, 0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x80, {{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40}}}, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100000000000000dad2f15f2421", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfff7}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x1, 0x7, 0x10001, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x40008, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x5, 0x400002, 0xfffffff9, 0x0, 0x9, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x400009, 0x800100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0xb, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 1.228462316s ago: executing program 2 (id=297): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 932.844892ms ago: executing program 5 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x88, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x0, 0x1, 0x0, {0x8, 0x6, 0x0, 0x2a2}, 0xf, 0x1, 0x8}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "435d92b660c316956934eab999"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x4}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 739.250702ms ago: executing program 3 (id=299): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="a15013a8a389f7b8ebb2f8b98016ec133a5d9551274958dfaab89671a981eedc44f8d86c55309bf143c7db13f120c10cd33972fdfbd1b6aef0fab9f60369e7afabadba6052f76e596fbdf76af8ad305308ab69a45be1f7451fe1580be20e8940e2ac5b50bc4eb1f2c20cdd632c50d393eeb4db8f53df5c504eb6fe305f01e6421c0976e939c397090c10c6e95a255909b8cc1129eccfcbc85a"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="40010421f9252ea3"], 0x8) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r12, 0x0, 0xd}, 0x18) 131.148102ms ago: executing program 1 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="200050800500"], 0x3c}, 0x1, 0x0, 0x0, 0x2080}, 0x8010) 108.476308ms ago: executing program 5 (id=301): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3], 0x50}, 0x4, 0x700000000000000}, 0x0) 0s ago: executing program 4 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x201}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r4, 0x0, 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 83.992671][ T5844] cgroup: Unknown subsys name 'net' [ 84.146995][ T5844] cgroup: Unknown subsys name 'cpuset' [ 84.156399][ T5844] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.621422][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.651806][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.663440][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.674230][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.681999][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.689322][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.698725][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.706866][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.718760][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.726088][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.733616][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.740804][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.742035][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.750567][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.755556][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.769737][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.778813][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.791967][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.797382][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.806590][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.815651][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.823664][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.826987][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.832784][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.838940][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.858088][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.866029][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.873938][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.884832][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.904664][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.926746][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.766771][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 89.813031][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 89.974724][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 89.999277][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 90.036527][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 90.184774][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 90.211609][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.218895][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.226702][ T5861] bridge_slave_0: entered allmulticast mode [ 90.237406][ T5861] bridge_slave_0: entered promiscuous mode [ 90.298695][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.305966][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.313467][ T5861] bridge_slave_1: entered allmulticast mode [ 90.321423][ T5861] bridge_slave_1: entered promiscuous mode [ 90.417623][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.425099][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.432665][ T5867] bridge_slave_0: entered allmulticast mode [ 90.440206][ T5867] bridge_slave_0: entered promiscuous mode [ 90.496686][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.519567][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.526919][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.534568][ T5867] bridge_slave_1: entered allmulticast mode [ 90.543260][ T5867] bridge_slave_1: entered promiscuous mode [ 90.602943][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.644612][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.651874][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.659015][ T5857] bridge_slave_0: entered allmulticast mode [ 90.668428][ T5857] bridge_slave_0: entered promiscuous mode [ 90.706431][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.713619][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.721694][ T5863] bridge_slave_0: entered allmulticast mode [ 90.729054][ T5863] bridge_slave_0: entered promiscuous mode [ 90.737838][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.745207][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.752507][ T5856] bridge_slave_0: entered allmulticast mode [ 90.759893][ T5856] bridge_slave_0: entered promiscuous mode [ 90.789031][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.796554][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.803897][ T5857] bridge_slave_1: entered allmulticast mode [ 90.812304][ T5857] bridge_slave_1: entered promiscuous mode [ 90.822693][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.836004][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.845437][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.852597][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.859729][ T5863] bridge_slave_1: entered allmulticast mode [ 90.867282][ T5863] bridge_slave_1: entered promiscuous mode [ 90.890219][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.897562][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.904800][ T5856] bridge_slave_1: entered allmulticast mode [ 90.911505][ T5865] Bluetooth: hci0: command tx timeout [ 90.911672][ T51] Bluetooth: hci2: command tx timeout [ 90.917053][ T5874] Bluetooth: hci4: command tx timeout [ 90.922768][ T5879] Bluetooth: hci5: command tx timeout [ 90.930301][ T5856] bridge_slave_1: entered promiscuous mode [ 90.972633][ T5861] team0: Port device team_slave_0 added [ 90.990683][ T5879] Bluetooth: hci1: command tx timeout [ 91.000847][ T5879] Bluetooth: hci3: command tx timeout [ 91.062740][ T5861] team0: Port device team_slave_1 added [ 91.068885][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.076886][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.085081][ T5862] bridge_slave_0: entered allmulticast mode [ 91.092604][ T5862] bridge_slave_0: entered promiscuous mode [ 91.134883][ T5867] team0: Port device team_slave_0 added [ 91.143813][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.157873][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.162163][ T43] cfg80211: failed to load regulatory.db [ 91.177001][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.202014][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.209207][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.216626][ T5862] bridge_slave_1: entered allmulticast mode [ 91.224670][ T5862] bridge_slave_1: entered promiscuous mode [ 91.251100][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.262862][ T5867] team0: Port device team_slave_1 added [ 91.302318][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.342661][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.399197][ T5863] team0: Port device team_slave_0 added [ 91.422440][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.429422][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.455739][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.470238][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.496588][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.503791][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.530281][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.543529][ T5863] team0: Port device team_slave_1 added [ 91.550348][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.558143][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.584434][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.610024][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.617433][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.643912][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.658265][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.685512][ T5857] team0: Port device team_slave_0 added [ 91.717596][ T5856] team0: Port device team_slave_0 added [ 91.758965][ T5857] team0: Port device team_slave_1 added [ 91.796595][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.803620][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.830314][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.843385][ T5856] team0: Port device team_slave_1 added [ 91.868473][ T5862] team0: Port device team_slave_0 added [ 91.890997][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.897935][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.924275][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.936837][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.944988][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.971197][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.013722][ T5862] team0: Port device team_slave_1 added [ 92.020374][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.027754][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.053927][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.097254][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.104356][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.131177][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.179620][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.186800][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.213078][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.230638][ T5867] hsr_slave_0: entered promiscuous mode [ 92.237154][ T5867] hsr_slave_1: entered promiscuous mode [ 92.262105][ T5861] hsr_slave_0: entered promiscuous mode [ 92.268511][ T5861] hsr_slave_1: entered promiscuous mode [ 92.274859][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 92.280660][ T5861] Cannot create hsr debugfs directory [ 92.311353][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.318319][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.345246][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.358742][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.365963][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.391948][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.458203][ T5863] hsr_slave_0: entered promiscuous mode [ 92.465154][ T5863] hsr_slave_1: entered promiscuous mode [ 92.471830][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 92.477592][ T5863] Cannot create hsr debugfs directory [ 92.638025][ T5857] hsr_slave_0: entered promiscuous mode [ 92.645017][ T5857] hsr_slave_1: entered promiscuous mode [ 92.651790][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 92.657528][ T5857] Cannot create hsr debugfs directory [ 92.699439][ T5862] hsr_slave_0: entered promiscuous mode [ 92.706148][ T5862] hsr_slave_1: entered promiscuous mode [ 92.712841][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 92.718580][ T5862] Cannot create hsr debugfs directory [ 92.730458][ T5856] hsr_slave_0: entered promiscuous mode [ 92.737260][ T5856] hsr_slave_1: entered promiscuous mode [ 92.743594][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 92.749307][ T5856] Cannot create hsr debugfs directory [ 92.990855][ T5879] Bluetooth: hci5: command tx timeout [ 92.991651][ T5874] Bluetooth: hci0: command tx timeout [ 92.996575][ T51] Bluetooth: hci4: command tx timeout [ 93.001650][ T5865] Bluetooth: hci2: command tx timeout [ 93.070654][ T5865] Bluetooth: hci3: command tx timeout [ 93.076455][ T5874] Bluetooth: hci1: command tx timeout [ 93.477818][ T5867] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.492199][ T5867] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.505035][ T5867] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.516497][ T5867] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.592640][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.606481][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.635816][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.652545][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.738293][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.749343][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.771075][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.782290][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.862762][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.878334][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.896835][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.908177][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.034635][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.045971][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.073283][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.093394][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.106235][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.199608][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.254606][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.269790][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.293831][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.313886][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.321129][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.334994][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.346558][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.396666][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.403801][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.454227][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.503060][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.510183][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.521383][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.528497][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.553505][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.639872][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.669848][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.703042][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.710159][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.729232][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.736384][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.776664][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.870303][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.887577][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.952402][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.959555][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.996003][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.003269][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.044313][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.074713][ T5865] Bluetooth: hci0: command tx timeout [ 95.080143][ T5865] Bluetooth: hci4: command tx timeout [ 95.081777][ T51] Bluetooth: hci5: command tx timeout [ 95.086195][ T5874] Bluetooth: hci2: command tx timeout [ 95.114486][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.121675][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.138247][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.145398][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.156358][ T5874] Bluetooth: hci1: command tx timeout [ 95.162113][ T5874] Bluetooth: hci3: command tx timeout [ 95.241642][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.318137][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.325490][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.347689][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.375631][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.432396][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.439562][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.485860][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.856121][ T5861] veth0_vlan: entered promiscuous mode [ 95.917047][ T5861] veth1_vlan: entered promiscuous mode [ 95.986947][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.145322][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.175522][ T5861] veth0_macvtap: entered promiscuous mode [ 96.206285][ T5861] veth1_macvtap: entered promiscuous mode [ 96.337944][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.390003][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.413047][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.469598][ T5867] veth0_vlan: entered promiscuous mode [ 96.484889][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.498258][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.533490][ T5863] veth0_vlan: entered promiscuous mode [ 96.545399][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.563222][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.573562][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.615789][ T5867] veth1_vlan: entered promiscuous mode [ 96.628018][ T5863] veth1_vlan: entered promiscuous mode [ 96.766604][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.777596][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.783922][ T5862] veth0_vlan: entered promiscuous mode [ 96.858530][ T5862] veth1_vlan: entered promiscuous mode [ 96.884926][ T5857] veth0_vlan: entered promiscuous mode [ 96.898040][ T5857] veth1_vlan: entered promiscuous mode [ 96.910138][ T5856] veth0_vlan: entered promiscuous mode [ 96.922543][ T5863] veth0_macvtap: entered promiscuous mode [ 96.940267][ T5867] veth0_macvtap: entered promiscuous mode [ 96.953280][ T5863] veth1_macvtap: entered promiscuous mode [ 96.964750][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.979308][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.997209][ T5867] veth1_macvtap: entered promiscuous mode [ 97.029293][ T5856] veth1_vlan: entered promiscuous mode [ 97.060407][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.089325][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.105340][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.114731][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.146007][ T5857] veth0_macvtap: entered promiscuous mode [ 97.152361][ T5865] Bluetooth: hci5: command tx timeout [ 97.157770][ T5874] Bluetooth: hci0: command tx timeout [ 97.157797][ T51] Bluetooth: hci2: command tx timeout [ 97.165291][ T5874] Bluetooth: hci4: command tx timeout [ 97.212582][ T5862] veth0_macvtap: entered promiscuous mode [ 97.226531][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.242510][ T5874] Bluetooth: hci3: command tx timeout [ 97.247928][ T5874] Bluetooth: hci1: command tx timeout [ 97.260480][ T5857] veth1_macvtap: entered promiscuous mode [ 97.272420][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.282330][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.306805][ T5862] veth1_macvtap: entered promiscuous mode [ 97.333332][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.347136][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.396344][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.417423][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.441800][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.451876][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.483174][ T5856] veth0_macvtap: entered promiscuous mode [ 97.491619][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.545073][ T5856] veth1_macvtap: entered promiscuous mode [ 97.576006][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.592626][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.636953][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.702974][ T1032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.755990][ T1032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.772245][ T1032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.792949][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.816215][ T1032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.849173][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.890451][ T1032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.901606][ T1032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.910406][ T1032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.978491][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.993267][ T1032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.005770][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.010638][ T1032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.036549][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.055153][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.101101][ T1032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.113476][ T1032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.150906][ T6008] loop3: detected capacity change from 0 to 32768 [ 98.170406][ T6008] ======================================================= [ 98.170406][ T6008] WARNING: The mand mount option has been deprecated and [ 98.170406][ T6008] and is ignored by this kernel. Remove the mand [ 98.170406][ T6008] option from the mount to silence this warning. [ 98.170406][ T6008] ======================================================= [ 98.218703][ T1032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.245791][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.266743][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.298602][ T6008] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 98.440460][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.491221][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.566714][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.608666][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.681536][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.706406][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.777424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.381131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.390079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.401755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.410953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.419563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.428372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.437147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.544341][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.587748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.596957][ T6021] wg1: entered promiscuous mode [ 99.602637][ T6021] wg1: entered allmulticast mode [ 99.792987][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.808147][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.867736][ T5861] ocfs2: Unmounting device (7,3) on (node local) [ 100.312564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.517473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.234752][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.273453][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.371995][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.380241][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.812211][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.819445][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.741324][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 102.762072][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 102.803452][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.936136][ T6048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 103.043550][ T9] usb 3-1: Product: syz [ 103.070674][ T9] usb 3-1: Manufacturer: syz [ 103.075299][ T9] usb 3-1: SerialNumber: syz [ 103.086152][ T6048] gretap0: entered promiscuous mode [ 103.168491][ T6048] gretap0: left promiscuous mode [ 103.175340][ T9] usb 3-1: config 0 descriptor?? [ 103.242680][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 103.294343][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15'. [ 103.647463][ T6061] overlayfs: missing 'lowerdir' [ 103.937025][ T6066] loop4: detected capacity change from 0 to 2048 [ 103.981156][ T5963] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 104.034092][ T9] gspca_sq930x: ucbus_write failed -71 [ 104.041122][ T6066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.053896][ T6066] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.120408][ T6066] fs-verity (loop4, inode 13): Unknown hash algorithm number: 3 [ 104.153917][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.170855][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.181416][ T5963] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 104.197342][ T5963] usb 4-1: New USB device found, idVendor=596a, idProduct=00f8, bcdDevice= 0.00 [ 104.208106][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.272300][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 104.522732][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 104.549032][ T5963] usb 4-1: config 0 descriptor?? [ 104.682957][ T9] usb 3-1: USB disconnect, device number 2 [ 105.305282][ T5963] hid-generic 0003:596A:00F8.0001: reserved main item tag 0xd [ 105.380995][ T5963] hid-generic 0003:596A:00F8.0001: item fetching failed at offset 6/7 [ 105.415271][ T5963] hid-generic 0003:596A:00F8.0001: probe with driver hid-generic failed with error -22 [ 105.495580][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.573948][ T5963] usb 4-1: USB disconnect, device number 2 [ 105.890953][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 105.912396][ T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 105.953294][ T6086] wg1: entered promiscuous mode [ 105.973674][ T6086] wg1: entered allmulticast mode [ 107.027364][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 107.128969][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 107.295363][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.348427][ T6093] loop3: detected capacity change from 0 to 128 [ 107.466668][ T24] usb 3-1: config 0 descriptor?? [ 107.501131][ T6082] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.658124][ T6093] Zero length message leads to an empty skb [ 107.664968][ T6093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.25'. [ 107.700694][ T6093] netlink: 43 bytes leftover after parsing attributes in process `syz.3.25'. [ 107.709883][ T6093] netlink: 'syz.3.25': attribute type 5 has an invalid length. [ 107.908117][ T6093] netlink: 43 bytes leftover after parsing attributes in process `syz.3.25'. [ 108.212502][ T24] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 108.293466][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.30'. [ 108.381162][ T24] usb 3-1: USB disconnect, device number 3 [ 108.390162][ T6106] gretap0: entered promiscuous mode [ 108.443400][ T6106] gretap0: left promiscuous mode [ 108.523080][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32'. [ 108.691378][ T6107] fido_id[6107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 108.717965][ T6115] bond0: entered promiscuous mode [ 108.735152][ T6115] bond_slave_0: entered promiscuous mode [ 108.770881][ T6115] bond_slave_1: entered promiscuous mode [ 108.810401][ T6115] bond0: left promiscuous mode [ 108.870105][ T6115] bond_slave_0: left promiscuous mode [ 108.881080][ T6115] bond_slave_1: left promiscuous mode [ 108.962410][ T6120] lo speed is unknown, defaulting to 1000 [ 109.012094][ T6120] lo speed is unknown, defaulting to 1000 [ 109.174850][ T6120] lo speed is unknown, defaulting to 1000 [ 109.326461][ T6120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.353340][ T6130] netlink: 'syz.3.38': attribute type 7 has an invalid length. [ 109.405300][ T6123] netlink: 'syz.0.35': attribute type 4 has an invalid length. [ 109.408317][ T6120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.499291][ T6130] : entered promiscuous mode [ 109.539778][ T6120] lo speed is unknown, defaulting to 1000 [ 109.582213][ T6120] lo speed is unknown, defaulting to 1000 [ 109.616681][ T6120] lo speed is unknown, defaulting to 1000 [ 109.672867][ T6120] lo speed is unknown, defaulting to 1000 [ 109.728249][ T6120] lo speed is unknown, defaulting to 1000 [ 109.785630][ T6120] lo speed is unknown, defaulting to 1000 [ 110.107765][ T6147] loop4: detected capacity change from 0 to 512 [ 110.178805][ T6147] EXT4-fs: Ignoring removed oldalloc option [ 110.260382][ T6147] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.45: dx entry: limit 1024 != root limit 124 [ 110.340865][ T6147] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.45: Corrupt directory, running e2fsck is recommended [ 110.420337][ T6147] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 110.444171][ T6147] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.45: corrupted in-inode xattr: invalid ea_ino [ 110.489867][ T6159] loop2: detected capacity change from 0 to 128 [ 110.493861][ T6147] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.45: couldn't read orphan inode 15 (err -117) [ 110.516553][ T6147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.526491][ T6159] EXT4-fs: Ignoring removed bh option [ 110.588202][ T6159] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.625452][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 110.634462][ T6168] netlink: 'syz.0.51': attribute type 7 has an invalid length. [ 110.642218][ T6168] netlink: 'syz.0.51': attribute type 8 has an invalid length. [ 110.653707][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 110.672073][ T6168] bond0: entered promiscuous mode [ 110.695607][ T6168] bond_slave_0: entered promiscuous mode [ 110.712201][ T6159] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.746141][ T6168] bond_slave_1: entered promiscuous mode [ 110.773675][ T6168] bond0: left promiscuous mode [ 110.788786][ T6168] bond_slave_0: left promiscuous mode [ 110.798024][ T6168] bond_slave_1: left promiscuous mode [ 111.015923][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.197143][ T6159] netlink: 'syz.2.49': attribute type 2 has an invalid length. [ 111.230193][ T6159] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.49'. [ 111.270601][ T6159] nbd: must specify at least one socket [ 111.359631][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 111.370680][ T6159] input: syz0 as /devices/virtual/input/input5 [ 111.404916][ T6183] wg1: entered promiscuous mode [ 111.455023][ T6183] wg1: entered allmulticast mode [ 112.035859][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 112.163710][ T6189] wg1: entered promiscuous mode [ 112.192833][ T6189] wg1: entered allmulticast mode [ 112.802956][ T5863] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.843824][ T6192] netlink: 'syz.0.58': attribute type 4 has an invalid length. [ 113.127863][ T6210] loop3: detected capacity change from 0 to 128 [ 113.170005][ T6212] loop5: detected capacity change from 0 to 512 [ 113.213024][ T6212] EXT4-fs: Ignoring removed oldalloc option [ 113.331575][ T6212] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.66: dx entry: limit 1024 != root limit 124 [ 113.397377][ T6212] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.66: Corrupt directory, running e2fsck is recommended [ 113.423099][ T6210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.65'. [ 113.448556][ T6218] netlink: 60 bytes leftover after parsing attributes in process `syz.0.67'. [ 113.462561][ T6212] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 113.472670][ T6210] netlink: 43 bytes leftover after parsing attributes in process `syz.3.65'. [ 113.496090][ T6212] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.66: corrupted in-inode xattr: invalid ea_ino [ 113.524820][ T6210] netlink: 'syz.3.65': attribute type 5 has an invalid length. [ 113.555832][ T6210] netlink: 43 bytes leftover after parsing attributes in process `syz.3.65'. [ 113.570228][ T6212] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.66: couldn't read orphan inode 15 (err -117) [ 113.681156][ T6212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.187810][ T6251] tipc: Started in network mode [ 115.228705][ T6251] tipc: Node identity 0e08d831035d, cluster identity 4711 [ 115.272923][ T6251] tipc: Enabled bearer , priority 0 [ 115.281851][ T5867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.325900][ T6248] tipc: Resetting bearer [ 115.504507][ T30] audit: type=1326 audit(1758177519.130:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.2.74" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3131f8eba9 code=0x0 [ 115.611223][ T6245] tipc: Disabling bearer [ 115.655131][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.77'. [ 115.679007][ T6261] wg1: entered promiscuous mode [ 115.684296][ T6261] wg1: entered allmulticast mode [ 117.010597][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 117.098261][ T6267] netlink: 'syz.0.79': attribute type 4 has an invalid length. [ 117.200998][ T9] usb 5-1: device descriptor read/64, error -71 [ 117.205811][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.84'. [ 117.429790][ T6285] loop1: detected capacity change from 0 to 128 [ 117.470761][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 118.157491][ T6285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88'. [ 118.167348][ T9] usb 5-1: device descriptor read/64, error -71 [ 118.189006][ T6285] netlink: 43 bytes leftover after parsing attributes in process `syz.1.88'. [ 118.207329][ T6285] netlink: 'syz.1.88': attribute type 5 has an invalid length. [ 118.225179][ T6285] netlink: 43 bytes leftover after parsing attributes in process `syz.1.88'. [ 118.285500][ T9] usb usb5-port1: attempt power cycle [ 118.648692][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 118.718500][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 119.153560][ T9] usb 5-1: device descriptor read/8, error -71 [ 119.434081][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 119.829050][ T9] usb 5-1: device not accepting address 5, error -71 [ 120.104629][ T9] usb usb5-port1: unable to enumerate USB device [ 120.139056][ T6318] netlink: 60 bytes leftover after parsing attributes in process `syz.0.100'. [ 120.281756][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.99'. [ 120.386747][ T6327] overlayfs: missing 'lowerdir' [ 120.419629][ T6322] gretap0: entered promiscuous mode [ 120.464363][ T6322] gretap0: left promiscuous mode [ 120.670610][ T975] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 120.842579][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.863922][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.897450][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 120.923664][ T975] usb 1-1: New USB device found, idVendor=596a, idProduct=00f8, bcdDevice= 0.00 [ 120.936185][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.974667][ T975] usb 1-1: config 0 descriptor?? [ 121.242382][ T5849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.360959][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 121.410837][ T975] hid-generic 0003:596A:00F8.0003: hidraw0: USB HID vff.fa Device [HID 596a:00f8] on usb-dummy_hcd.0-1/input0 [ 121.427245][ T6359] bond0: entered promiscuous mode [ 121.430960][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 121.444083][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 121.475863][ T6359] bond_slave_0: entered promiscuous mode [ 121.488788][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.523345][ T6359] bond_slave_1: entered promiscuous mode [ 121.532372][ T5849] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.550024][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.568498][ T6359] bond0: left promiscuous mode [ 121.575617][ T6359] bond_slave_0: left promiscuous mode [ 121.585054][ T6359] bond_slave_1: left promiscuous mode [ 121.594689][ T43] usb 1-1: USB disconnect, device number 2 [ 121.617258][ T5849] usb 3-1: Product: syz [ 121.650587][ T5849] usb 3-1: Manufacturer: syz [ 121.654882][ T6363] fido_id[6363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 121.655221][ T5849] usb 3-1: SerialNumber: syz [ 121.706436][ T5849] usb 3-1: config 0 descriptor?? [ 121.749462][ T5849] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.807065][ T5849] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 121.935948][ T6373] loop1: detected capacity change from 0 to 128 [ 121.975921][ T6373] EXT4-fs: Ignoring removed bh option [ 122.097177][ T6373] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.177594][ T6373] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.415470][ T5849] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 122.445334][ T6386] netlink: 'syz.1.118': attribute type 2 has an invalid length. [ 122.453352][ T6386] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.118'. [ 122.461075][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.120'. [ 122.471905][ T6386] nbd: must specify at least one socket [ 122.472153][ T5849] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 122.577177][ T6386] input: syz0 as /devices/virtual/input/input6 [ 122.812162][ T6384] gretap0: entered promiscuous mode [ 123.338597][ T6384] gretap0: left promiscuous mode [ 123.921039][ T5849] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 123.928547][ T6396] tipc: Enabled bearer , priority 0 [ 123.937858][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.980823][ T6402] tipc: Started in network mode [ 123.988139][ T5849] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 124.003129][ T6402] tipc: Node identity 46a2e9aaa96b, cluster identity 4711 [ 124.030687][ T5849] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 124.043802][ T5849] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 124.068382][ T6402] tipc: Enabled bearer , priority 0 [ 124.080772][ T5849] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 124.088277][ T5849] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 124.126436][ T5849] usb 3-1: USB disconnect, device number 4 [ 124.165200][ T6394] tipc: Resetting bearer [ 124.190284][ T6398] syzkaller0: entered promiscuous mode [ 124.212008][ T6398] syzkaller0: entered allmulticast mode [ 124.229749][ T6402] tipc: Resetting bearer [ 124.257334][ T6389] tipc: Resetting bearer [ 124.318064][ T6389] tipc: Disabling bearer [ 124.417118][ T6400] tipc: Disabling bearer [ 124.457550][ T6415] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 124.494395][ T6415] macsec1: entered promiscuous mode [ 124.522046][ T6415] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 124.828811][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.5.135'. [ 124.857928][ T6433] netlink: 'syz.5.135': attribute type 7 has an invalid length. [ 124.867094][ T6433] netlink: 'syz.5.135': attribute type 8 has an invalid length. [ 124.875235][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.135'. [ 124.898383][ T6433] bond0: entered promiscuous mode [ 124.903874][ T6433] bond_slave_0: entered promiscuous mode [ 124.909754][ T6433] bond_slave_1: entered promiscuous mode [ 124.919138][ T6433] bond0: left promiscuous mode [ 124.924735][ T6433] bond_slave_0: left promiscuous mode [ 124.930898][ T6433] bond_slave_1: left promiscuous mode [ 124.992882][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.166161][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 125.351978][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 125.375175][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 125.397066][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.444998][ T10] usb 1-1: config 0 descriptor?? [ 125.690720][ T10] ath6kl: Failed to submit usb control message: -71 [ 125.726516][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 125.817775][ T6446] overlayfs: missing 'lowerdir' [ 125.823226][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.330574][ T10] ath6kl: Unable to send get target info: -71 [ 126.353731][ T10] ath6kl: Failed to init ath6kl core: -71 [ 126.396913][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 126.444305][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.140'. [ 126.505083][ T10] usb 1-1: USB disconnect, device number 3 [ 126.530059][ T6449] gretap0: entered promiscuous mode [ 126.557708][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 126.573579][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 126.593009][ T6449] gretap0: left promiscuous mode [ 126.610062][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.676060][ T5870] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.700969][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.725659][ T5870] usb 2-1: Product: syz [ 126.759386][ T5870] usb 2-1: Manufacturer: syz [ 126.765336][ T5870] usb 2-1: SerialNumber: syz [ 126.792141][ T5870] usb 2-1: config 0 descriptor?? [ 126.830964][ T5870] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.860749][ T5870] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 127.270646][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.391060][ T6473] tipc: Enabled bearer , priority 0 [ 127.417243][ T6473] tipc: Resetting bearer [ 127.430991][ T6397] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.444083][ T6472] tipc: Disabling bearer [ 127.453401][ T5870] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 127.465401][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 127.469913][ T5870] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 127.480031][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 127.499822][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.514999][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.530598][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.547266][ T9] usb 5-1: Product: syz [ 127.577412][ T9] usb 5-1: Manufacturer: syz [ 127.590871][ T9] usb 5-1: SerialNumber: syz [ 127.861919][ T9] usb 5-1: config 0 descriptor?? [ 127.875827][ T6397] usb 1-1: Using ep0 maxpacket: 8 [ 127.887704][ T6397] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 127.890490][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 127.901241][ T6397] usb 1-1: config 0 has no interface number 0 [ 127.940175][ T6397] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 127.950101][ T6397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.998367][ T6491] overlayfs: missing 'lowerdir' [ 128.266131][ T5870] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 128.503778][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 128.602826][ T6397] usb 1-1: Product: syz [ 128.608036][ T5870] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 128.614424][ T6397] usb 1-1: Manufacturer: syz [ 128.620403][ T6397] usb 1-1: SerialNumber: syz [ 128.626131][ T5870] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 128.649307][ T6397] usb 1-1: config 0 descriptor?? [ 128.688669][ T5870] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 128.794173][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.898997][ T6397] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 128.940806][ T6397] usb 1-1: No valid video chain found. [ 128.960633][ T6397] usb 1-1: USB disconnect, device number 4 [ 128.962807][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 129.020471][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 129.027508][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 129.039721][ T5870] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 129.057300][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 129.081826][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 129.091747][ T5870] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 129.099719][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.105522][ T5870] usb 2-1: USB disconnect, device number 2 [ 129.167830][ T10] usb 3-1: config 0 descriptor?? [ 129.393328][ T10] ath6kl: Failed to submit usb control message: -71 [ 129.408218][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 129.416616][ T5963] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 129.427069][ T10] ath6kl: Unable to send get target info: -71 [ 129.436830][ T10] ath6kl: Failed to init ath6kl core: -71 [ 129.444510][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 129.459683][ T10] usb 3-1: USB disconnect, device number 5 [ 129.592624][ T5963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 129.622279][ T5963] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 129.657054][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.676879][ T9] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 129.688072][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 129.698699][ T5963] usb 6-1: config 0 descriptor?? [ 129.721357][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 129.733376][ T6502] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 129.747212][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 129.760205][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 130.043318][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 130.313031][ T6517] loop2: detected capacity change from 0 to 128 [ 130.366587][ T6517] EXT4-fs: Ignoring removed bh option [ 130.475096][ T6517] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.598017][ T5963] usbhid 6-1:0.0: can't add hid device: -71 [ 130.608693][ T5963] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 130.616818][ T9] usb 5-1: USB disconnect, device number 6 [ 130.629944][ T5963] usb 6-1: USB disconnect, device number 2 [ 130.662441][ T6517] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.706102][ T6522] tipc: Started in network mode [ 130.752729][ T6522] tipc: Node identity b2b3cdfd83e5, cluster identity 4711 [ 130.780779][ T6522] tipc: Enabled bearer , priority 0 [ 131.341447][ T6522] tipc: Resetting bearer [ 131.385034][ T5863] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.400001][ T6530] loop0: detected capacity change from 0 to 128 [ 131.413777][ T6530] EXT4-fs: Ignoring removed bh option [ 131.449916][ T6530] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.484040][ T6519] tipc: Disabling bearer [ 131.494614][ T6536] misc userio: No port type given on /dev/userio [ 131.518735][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 131.539090][ T6530] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.871559][ T6539] overlayfs: missing 'lowerdir' [ 132.472759][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.503522][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.716107][ T6541] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 132.724222][ T6541] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.168'. [ 132.733658][ T6541] nbd: must specify at least one socket [ 132.756981][ T6542] input: syz0 as /devices/virtual/input/input7 [ 133.292370][ T5862] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.164042][ T6566] netlink: 'syz.0.179': attribute type 4 has an invalid length. [ 134.184411][ T6574] loop1: detected capacity change from 0 to 128 [ 134.218684][ T6574] EXT4-fs: Ignoring removed bh option [ 134.242506][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 134.722963][ T6574] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.758970][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 134.879058][ T6574] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.920626][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 135.000605][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.219201][ T6581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.185'. [ 135.590967][ T9] usb 4-1: config 0 descriptor?? [ 135.597586][ T6571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.658541][ T6581] gretap0: entered promiscuous mode [ 135.673725][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.723913][ T6581] gretap0: left promiscuous mode [ 136.087118][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 136.121321][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.168122][ T9] usb 4-1: USB disconnect, device number 3 [ 136.207990][ T6604] loop1: detected capacity change from 0 to 128 [ 136.315633][ T6609] netlink: 32 bytes leftover after parsing attributes in process `syz.5.196'. [ 136.333722][ T6604] netlink: 44 bytes leftover after parsing attributes in process `syz.1.194'. [ 136.343066][ T6604] netlink: 43 bytes leftover after parsing attributes in process `syz.1.194'. [ 136.353619][ T6610] siw: device registration error -23 [ 136.359818][ T6604] netlink: 'syz.1.194': attribute type 5 has an invalid length. [ 136.359851][ T6604] netlink: 43 bytes leftover after parsing attributes in process `syz.1.194'. [ 136.600351][ T6612] netlink: 'syz.4.197': attribute type 4 has an invalid length. [ 137.040168][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 137.144086][ T6629] gretap0: entered promiscuous mode [ 137.178672][ T6629] gretap0: left promiscuous mode [ 137.324884][ T6639] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 137.370555][ T6639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.209'. [ 137.548986][ T6639] team0: Port device geneve0 added [ 137.629146][ T6646] loop4: detected capacity change from 0 to 128 [ 137.756045][ T6646] netlink: 44 bytes leftover after parsing attributes in process `syz.4.212'. [ 137.765303][ T6646] netlink: 43 bytes leftover after parsing attributes in process `syz.4.212'. [ 137.781058][ T6646] netlink: 'syz.4.212': attribute type 5 has an invalid length. [ 137.803516][ T6646] netlink: 43 bytes leftover after parsing attributes in process `syz.4.212'. [ 137.856874][ T6654] siw: device registration error -23 [ 138.077789][ T6657] debugfs: 'netdev:nicvf0' already exists in 'phy9' [ 138.265260][ T6652] netlink: 'syz.1.214': attribute type 4 has an invalid length. [ 138.440766][ T6630] loop5: detected capacity change from 0 to 32768 [ 138.512044][ T6668] misc userio: No port type given on /dev/userio [ 138.532752][ T6630] [ 138.532752][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.532752][ T6630] [ 138.637861][ T6630] [ 138.637861][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.637861][ T6630] [ 138.699755][ T6630] [ 138.699755][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.699755][ T6630] [ 138.789639][ T6630] [ 138.789639][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.789639][ T6630] [ 138.902502][ T6676] overlayfs: missing 'lowerdir' [ 139.399822][ T6673] Invalid ELF header type: 0 != 1 [ 139.480694][ T6630] [ 139.480694][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.480694][ T6630] [ 139.547488][ T6679] tmpfs: Bad value for 'nr_inodes' [ 139.651444][ T6630] [ 139.651444][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.651444][ T6630] [ 139.691226][ T6673] find_entry called with index = 0 [ 139.760713][ T6630] [ 139.760713][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.760713][ T6630] [ 139.797845][ T6673] read_mapping_page failed! [ 139.804126][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.226'. [ 139.807925][ T6673] ERROR: (device loop5): txCommit: [ 139.807925][ T6673] [ 139.901521][ T6630] [ 139.901521][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.901521][ T6630] [ 139.974521][ T6630] [ 139.974521][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.974521][ T6630] [ 140.106865][ T6630] [ 140.106865][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.106865][ T6630] [ 140.147527][ T5963] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.165571][ T6696] loop2: detected capacity change from 0 to 512 [ 140.202718][ T6696] EXT4-fs: Ignoring removed oldalloc option [ 140.275671][ T6696] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.230: dx entry: limit 1024 != root limit 124 [ 140.290813][ T5867] [ 140.290813][ T5867] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.290813][ T5867] [ 140.316336][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 140.341445][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 140.364650][ T5963] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 140.372193][ T6696] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.230: Corrupt directory, running e2fsck is recommended [ 140.411183][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.432007][ T5867] [ 140.432007][ T5867] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.432007][ T5867] [ 140.471959][ T6696] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 140.485674][ T6696] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.230: corrupted in-inode xattr: invalid ea_ino [ 140.486598][ T5963] usb 2-1: config 0 descriptor?? [ 140.559446][ T6696] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.230: couldn't read orphan inode 15 (err -117) [ 140.605758][ T6696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.722769][ T6707] loop3: detected capacity change from 0 to 2048 [ 140.787836][ T5963] ath6kl: Failed to submit usb control message: -71 [ 140.797272][ T6707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.817685][ T5863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.826788][ T5963] ath6kl: unable to send the bmi data to the device: -71 [ 140.848696][ T5963] ath6kl: Unable to send get target info: -71 [ 140.904100][ T5963] ath6kl: Failed to init ath6kl core: -71 [ 140.942052][ T5963] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 141.009117][ T5963] usb 2-1: USB disconnect, device number 3 [ 141.235296][ T6714] lo speed is unknown, defaulting to 1000 [ 141.474825][ T6723] overlayfs: missing 'lowerdir' [ 142.354096][ T6737] netlink: 'syz.4.242': attribute type 8 has an invalid length. [ 142.386340][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 142.455784][ T6740] loop3: detected capacity change from 0 to 256 [ 142.469883][ T6740] exfat: Deprecated parameter 'namecase' [ 142.500018][ T6740] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 142.576870][ T6737] bond0: entered promiscuous mode [ 142.610411][ T6737] bond_slave_0: entered promiscuous mode [ 142.632420][ T6737] bond_slave_1: entered promiscuous mode [ 142.660182][ T6737] bond0: left promiscuous mode [ 142.687187][ T6737] bond_slave_0: left promiscuous mode [ 142.697010][ T6737] bond_slave_1: left promiscuous mode [ 142.738910][ T6742] netlink: 36 bytes leftover after parsing attributes in process `syz.5.244'. [ 142.972821][ T6746] netlink: 'syz.4.246': attribute type 8 has an invalid length. [ 143.006521][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 143.057098][ T6750] loop3: detected capacity change from 0 to 512 [ 143.083982][ T6746] bond0: entered promiscuous mode [ 143.101940][ T6746] bond_slave_0: entered promiscuous mode [ 143.118949][ T6750] EXT4-fs: Ignoring removed oldalloc option [ 143.129980][ T6746] bond_slave_1: entered promiscuous mode [ 143.176433][ T6750] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.248: dx entry: limit 1024 != root limit 124 [ 143.186421][ T6746] bond0: left promiscuous mode [ 143.200564][ T6750] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.248: Corrupt directory, running e2fsck is recommended [ 143.259390][ T6746] bond_slave_0: left promiscuous mode [ 143.283014][ T6750] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 143.309889][ T6746] bond_slave_1: left promiscuous mode [ 143.330807][ T6750] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.248: corrupted in-inode xattr: invalid ea_ino [ 143.376582][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 143.395877][ T6758] wg1: entered promiscuous mode [ 143.406187][ T6750] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.248: couldn't read orphan inode 15 (err -117) [ 143.418226][ T6758] wg1: entered allmulticast mode [ 144.004542][ T6750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.276260][ T5861] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.494677][ T6775] netlink: 68 bytes leftover after parsing attributes in process `syz.3.256'. [ 144.622136][ T6777] loop1: detected capacity change from 0 to 2048 [ 144.678216][ T6777] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.699653][ T6779] loop2: detected capacity change from 0 to 256 [ 144.714494][ T6781] netlink: 36 bytes leftover after parsing attributes in process `syz.5.261'. [ 144.728863][ T6779] exfat: Deprecated parameter 'namecase' [ 144.805565][ T6779] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 145.330116][ T6795] lo speed is unknown, defaulting to 1000 [ 145.423593][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 146.432153][ T6812] overlayfs: missing 'lowerdir' [ 147.160849][ T6816] loop1: detected capacity change from 0 to 128 [ 147.364683][ T6816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.273'. [ 147.414951][ T6816] netlink: 43 bytes leftover after parsing attributes in process `syz.1.273'. [ 147.499257][ T6816] netlink: 'syz.1.273': attribute type 5 has an invalid length. [ 147.559591][ T6816] netlink: 43 bytes leftover after parsing attributes in process `syz.1.273'. [ 147.698750][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.278'. [ 147.730617][ T6827] netlink: 'syz.4.278': attribute type 7 has an invalid length. [ 147.761035][ T6827] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 147.782962][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 147.980287][ T6827] bond0: entered promiscuous mode [ 147.985968][ T6827] bond_slave_0: entered promiscuous mode [ 147.992998][ T6827] bond_slave_1: entered promiscuous mode [ 148.069936][ T6827] bond0: left promiscuous mode [ 148.119361][ T6827] bond_slave_0: left promiscuous mode [ 148.197334][ T6827] bond_slave_1: left promiscuous mode [ 148.977729][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 149.937933][ T6872] overlayfs: missing 'lowerdir' [ 151.044719][ T6886] tipc: Enabling of bearer rejected, failed to enable media [ 151.059675][ T6881] loop1: detected capacity change from 0 to 32768 [ 151.130322][ T6892] loop4: detected capacity change from 0 to 512 [ 151.185186][ T6892] EXT4-fs: Ignoring removed oldalloc option [ 151.457989][ T6892] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.293: dx entry: limit 1024 != root limit 124 [ 151.598865][ T6892] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.293: Corrupt directory, running e2fsck is recommended [ 151.648547][ T6881] [ 151.648547][ T6881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.648547][ T6881] [ 151.671495][ T6892] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 151.679760][ T6892] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.293: corrupted in-inode xattr: invalid ea_ino [ 151.706147][ T6892] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.293: couldn't read orphan inode 15 (err -117) [ 151.766046][ T6892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.836840][ T6881] Invalid ELF header type: 0 != 1 [ 151.856538][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 151.868133][ T6881] tmpfs: Bad value for 'nr_inodes' [ 151.874562][ T6881] find_entry called with index = 0 [ 151.880017][ T6881] read_mapping_page failed! [ 151.884704][ T6881] ERROR: (device loop1): txCommit: [ 151.884704][ T6881] [ 152.571870][ T1335] [ 152.571870][ T1335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.571870][ T1335] [ 152.586775][ T6903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 152.620741][ T1335] [ 152.620741][ T1335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.620741][ T1335] [ 152.636776][ T6903] netlink: 'syz.2.297': attribute type 7 has an invalid length. [ 152.690707][ T6903] netlink: 'syz.2.297': attribute type 8 has an invalid length. [ 152.702456][ T5856] [ 152.702456][ T5856] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.702456][ T5856] [ 152.730133][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 152.764522][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.772097][ T5856] [ 152.772097][ T5856] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.772097][ T5856] [ 152.818086][ T6903] bond0: entered promiscuous mode [ 152.827454][ T6903] bond_slave_0: entered promiscuous mode [ 152.836683][ T6903] bond_slave_1: entered promiscuous mode [ 152.854437][ T6903] bond0: left promiscuous mode [ 152.856203][ T109] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 152.859225][ T6903] bond_slave_0: left promiscuous mode [ 152.871253][ T109] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 152.871276][ T109] CPU: 1 UID: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 152.871304][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.900874][ T6903] bond_slave_1: left promiscuous mode [ 152.904285][ T109] RIP: 0010:lmLogSync+0xfb/0x9d0 [ 152.914542][ T109] Code: 40 7e fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 f3 b2 e1 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 d7 b2 e1 fe 49 8b 3f e8 cf af b4 fe [ 152.934237][ T109] RSP: 0018:ffffc90002da7b00 EFLAGS: 00010216 [ 152.940299][ T109] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0000000000000000 [ 152.948258][ T109] RDX: ffff88801e72bc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 152.956217][ T109] RBP: ffffc90002da7c08 R08: 0000000000000003 R09: ffffc90002da7b60 [ 152.964178][ T109] R10: dffffc0000000000 R11: fffff520005b4f70 R12: ffff8880681e2800 [ 152.972136][ T109] R13: dffffc0000000000 R14: ffff888076549238 R15: 0000000000000030 [ 152.980097][ T109] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 152.989009][ T109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.995578][ T109] CR2: 000055556a9d0808 CR3: 00000000569a8000 CR4: 0000000000350ef0 [ 153.003536][ T109] Call Trace: [ 153.006797][ T109] [ 153.009718][ T109] ? __pfx___mutex_lock+0x10/0x10 [ 153.014742][ T109] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 153.020639][ T109] ? __pfx_lmLogSync+0x10/0x10 [ 153.025395][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.031023][ T109] jfs_syncpt+0x7b/0x90 [ 153.035168][ T109] txEnd+0x2e5/0x530 [ 153.039054][ T109] jfs_lazycommit+0x5ba/0xa90 [ 153.043724][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 153.048930][ T109] ? __pfx_default_wake_function+0x10/0x10 [ 153.054748][ T109] ? __kthread_parkme+0x7b/0x200 [ 153.059681][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.065390][ T109] ? __kthread_parkme+0x1a1/0x200 [ 153.070420][ T109] kthread+0x711/0x8a0 [ 153.074488][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 153.079677][ T109] ? __pfx_kthread+0x10/0x10 [ 153.084257][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.089881][ T109] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.095075][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.100699][ T109] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.105881][ T109] ? __pfx_kthread+0x10/0x10 [ 153.110461][ T109] ret_from_fork+0x439/0x7d0 [ 153.115042][ T109] ? __pfx_ret_from_fork+0x10/0x10 [ 153.120145][ T109] ? __switch_to_asm+0x39/0x70 [ 153.124901][ T109] ? __switch_to_asm+0x33/0x70 [ 153.129660][ T109] ? __pfx_kthread+0x10/0x10 [ 153.134261][ T109] ret_from_fork_asm+0x1a/0x30 [ 153.139026][ T109] [ 153.142030][ T109] Modules linked in: [ 153.147067][ T109] ---[ end trace 0000000000000000 ]--- [ 153.161210][ T109] RIP: 0010:lmLogSync+0xfb/0x9d0 [ 153.166308][ T109] Code: 40 7e fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 f3 b2 e1 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 d7 b2 e1 fe 49 8b 3f e8 cf af b4 fe [ 153.189761][ T109] RSP: 0018:ffffc90002da7b00 EFLAGS: 00010216 [ 153.203841][ T109] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0000000000000000 [ 153.250099][ T109] RDX: ffff88801e72bc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 153.265874][ T109] RBP: ffffc90002da7c08 R08: 0000000000000003 R09: ffffc90002da7b60 [ 153.274649][ T109] R10: dffffc0000000000 R11: fffff520005b4f70 R12: ffff8880681e2800 [ 153.282815][ T109] R13: dffffc0000000000 R14: ffff888076549238 R15: 0000000000000030 [ 153.290916][ T109] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 153.299910][ T109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.307222][ T109] CR2: 000055556a9eb5c8 CR3: 0000000032730000 CR4: 0000000000350ef0 [ 153.315306][ T109] Kernel panic - not syncing: Fatal exception [ 153.321564][ T109] Kernel Offset: disabled [ 153.325873][ T109] Rebooting in 86400 seconds..