last executing test programs: 2m57.723748699s ago: executing program 1 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa447c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x21, 0x0, @empty, @multicast1}}}}}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) 2m56.553697525s ago: executing program 1 (id=167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x46b) sendmmsg$inet(r0, 0x0, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000802}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setpriority(0x2, 0xff, 0x0) 2m56.387018117s ago: executing program 1 (id=170): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x30000000, 0x0, 0x0, 0x7, 0x4, 0xf8000000, 0x7ffe}, 0x1c) close(r2) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x10010, r2, 0xc973c000) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2m55.386397522s ago: executing program 1 (id=174): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) 2m55.131681255s ago: executing program 1 (id=176): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r1, 0x5) accept4(r1, &(0x7f0000000040)=@x25, 0x0, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$packet(0x11, 0x3, 0x300) 2m54.021356141s ago: executing program 1 (id=180): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x41) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m53.720940166s ago: executing program 32 (id=180): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x41) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m5.304065875s ago: executing program 5 (id=366): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @local}) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x3d, 0x5, 0x0, 0x20, 0x40}, 0x0, 0x0}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f50401000d"], 0x11fc}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={r2, 0x1, 0x6}, 0x10) sendto$packet(r1, &(0x7f0000000180)="3f030e00030000002b001e0089e9aaa929e0c2310f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3", 0x37, 0x0, &(0x7f0000000240)={0x11, 0x0, r2, 0x4, 0x0, 0x6, @random="3690f13519fc"}, 0x14) 2m4.032747693s ago: executing program 5 (id=374): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 2m2.988974068s ago: executing program 5 (id=376): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2m2.15739606s ago: executing program 5 (id=381): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000080)={[{@noinit_itable}, {@errors_remount}, {@noauto_da_alloc}, {@lazytime}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x23, 0x46e, &(0x7f0000000e00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x88) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x50f, &(0x7f0000000940)="$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") open_by_handle_at(0xffffffffffffffff, 0x0, 0x202080) capset(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6000010, &(0x7f0000000400)={0xa, 0x4e21, 0x8001, @mcast1, 0x1}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x40000000) 2m0.887229648s ago: executing program 5 (id=387): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) shutdown(r1, 0x0) close(r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m55.899758169s ago: executing program 5 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r3, r3}, &(0x7f0000000500)=""/82, 0x52, &(0x7f0000000340)={&(0x7f0000000080)={'sha512-avx\x00'}}) 1m55.665153502s ago: executing program 33 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r3, r3}, &(0x7f0000000500)=""/82, 0x52, &(0x7f0000000340)={&(0x7f0000000080)={'sha512-avx\x00'}}) 40.864106508s ago: executing program 6 (id=638): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 36.349575072s ago: executing program 6 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff0700e831b685152bb15e"], 0x1c}}, 0x8040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 30.007334673s ago: executing program 6 (id=663): syz_io_uring_setup(0x18a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) r0 = syz_io_uring_setup(0x20fe, &(0x7f0000001a80)={0x0, 0x0, 0x10100, 0x2, 0x309}, &(0x7f0000001b00)=0x0, &(0x7f0000000140)=0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1e, 0x2007, @fd_index=0xe, 0x7d9, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x3b8b, 0x0, 0x2, 0x0, 0x0) 29.864218404s ago: executing program 6 (id=664): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x44) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 28.686414211s ago: executing program 6 (id=670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0x3, 0x2, 0x14d, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x30) 27.949341142s ago: executing program 6 (id=674): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/4096, 0xffffffffffffffbb, 0x0, 0x0}, &(0x7f0000000280)=0x40) splice(r1, 0x0, r0, 0x0, 0x10020, 0x0) 27.264994932s ago: executing program 34 (id=674): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/4096, 0xffffffffffffffbb, 0x0, 0x0}, &(0x7f0000000280)=0x40) splice(r1, 0x0, r0, 0x0, 0x10020, 0x0) 14.515155723s ago: executing program 3 (id=726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x818) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) 13.124754503s ago: executing program 3 (id=731): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 10.177671265s ago: executing program 3 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) open(0x0, 0x14927e, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) syz_open_dev$sndmidi(0x0, 0x1, 0x40503) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) 6.576334106s ago: executing program 7 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) 4.583796154s ago: executing program 7 (id=745): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f0000000640)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 4.581820954s ago: executing program 4 (id=747): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x2, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@auto_da_alloc}, {@norecovery}]}, 0x1, 0x4fd, &(0x7f00000015c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5ILhxKQckfkSgBomDVzOepG5iN1bzw1H8+UijeW/e1N/3ms579TeJXwBD63pE7EbEWETcjYjp7HouO+KT9pHc92zv4dL+3sOlXLRan/0rl7Yn16LjzySuZa9ZjIgffS/ip7njcRvbO2uL1WplM6vPNmsbs43tnVurtcWVykplvVxemF+Y++j2h+UzG+s7tbGs9NWnf9z91s+Tbk1lVzrHcZbaQy8cxkmMRsQPziPYAIxk4xkbdEd4JfmIeDMi3k2f/+kYSb+aAMBV1mpNR2u6sw4AXHX5NAeWy5eyXMBU5POlUjuH91ZM5qv1RvPmvfrW+nI7VzYThfy91WplLssVzkQhl9Tn0/LzevlI/XZEvBERvxyfSOulpXp1eZD/8QGAIXbtyPr/3/H2+g8AXHHFQXcAALhw1n8AGD7WfwAYPtZ/ABg+7fV/YtDdAAAukPf/ADB8rP8AMFR++OmnydHazz7/evn+9tZa/f6t5UpjrVTbWiot1Tc3Siv1+kr6mT21k16vWq9vzH8QWw9mvr3RaM42tnfu1Opb68076ed636kU0rt2L2BkAEAvb7zz5C+5ZEX+eCI9omMvh8JAewact/ygOwAMzMigOwAMjN2+YHid4j2+9ABcEV226H1BsdsvCLVardb5dQk4Zze+JP8Pw6oj/++ngGHIyP/D8JL/h+HVauX63fM/+r0RALjc5PiBHt//fzM7/y775sBPlo/e8fg8ewUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACX28H+v6VsL/CpyOdLpYjXImImCrl7q9XKXES8HhF/Hi+MJ/X5AfcZADit/N9z2f5fN6bfn3qh6e1rh8WxiPjZrz/71YPFZnPzTxFjuX+PH1xvPs6uly++9wDAyQ7W6fTc8Ub+2d7DpYPjIvvzj+9GRLEdf39vLPYP44/GaHouRiEiJv+Ty+ptuY7cxWnsPmqfj48/F1NpDqS98+nR+Ens184q/hf7iZ9/IX4+bWufk7+LL5xBX2DYPEnmn0+6PX/5uJ6euz//xXSGOr1s/kteamk/nQOfxz+Y/0Z6zH/X+43xwR++3y5NHG97FPHl0YiD2Psd889B/FyP+O/3Gf+vX3n73V5trd9E3Iju8TtjzTZrG7ON7Z1bq7XFlcpKZb1cXphfmPvo9ofl2TRHPdt7Nfjnxzdf79WWjH+yR/ziCeP/ep/j/+3/7/74ay+J/833usXPx1sviZ+sid/oM/7i5O+LvdqS+Ms9xn/S1/9mn/Gf/m3n2LbhAMDgNLZ31har1cqmgsLlLyT/ZC9BN7oWvnNRscaie9Mv3ms/00eaWq1XitVrxjiLrBtwGRw+9BHxv0F3BgAAAAAAAAAAAAAA6OoifmNp0GMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vo8AAD///PAzws=") bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x400d0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4.21563803s ago: executing program 0 (id=751): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) dup(r0) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 4.129635721s ago: executing program 3 (id=753): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.879848725s ago: executing program 2 (id=754): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x0, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.762370786s ago: executing program 2 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r4, &(0x7f0000000300)={0x50}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/1) 3.726707257s ago: executing program 7 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 3.704666887s ago: executing program 0 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0) 3.48662037s ago: executing program 7 (id=758): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) 3.427673911s ago: executing program 2 (id=759): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.408858671s ago: executing program 4 (id=760): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.541920754s ago: executing program 0 (id=761): writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x880, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0xfffffffffffffeb4, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') setpgid(r0, 0x0) r1 = getpgid(r0) setpgid(0x0, r1) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000), 0x0, 0x234, &(0x7f0000000700)="$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") 2.317916097s ago: executing program 7 (id=762): timer_create(0x6, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000f40)='./bus\x00', 0x8, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) truncate(0x0, 0xf000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107242, 0x99) 2.235246888s ago: executing program 4 (id=763): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000480)='./file1\x00', 0x1800002, &(0x7f0000006d00)=ANY=[@ANYBLOB="002ecbc55fe6d6100837adda58fa7d10ab54aee93b992510be054d731ab7da7e75676e729a84f3b6a90100db5e477dbfee9ea3db9e2cdf0af3e9f7718732aaccc2158ad1dc498162eb5e87e3ec955164b6a97fb2a48d7a569258274a727cb0c7227e8f51529264e568b34e6f7ee018b3562d8fdd26e1b83ab2b09862ea8ac241fca01893c02becc286b2b17bd8c515b3dd02562333f6a7273bc91c9841bf3cb673bc8942336c5cebffbb08f82ba108af50c8dabb9628fc8e59c207395f370146898f1f3400f50f5e0566363558fe2c744cbebda08fe49b2155b62fcbb938b0d78d5e36b5e6b7d1c01f8b6423066333a94bb51f311c1d70dc272c6528d8057273e9bffbc8747d7c8a65b368828d39c69fc42125281702192328142ebb5b396e66db522ca6f2ae2ca64ab0d9d3f0eeb890d6b5a376ab004afb2ccc83293222ce378ef0e8d88e873ee168d615985aaabc293ce789dd163747e965405c11730f23faf8053fb37e93d5a54cdce54c1ce09598258ec5892938c5a16cf0c548695c973b45a0bc95feff28efd824744057c5da581fe9215d1a9e358a9da84b4ceb0f586c2ddbabbe2347dd728b8e05ecf90b4c7c9861ce1af7709c9babcdc2bd2175a8496a48942dc2755a5ed6296745ec0810e42050e657b2c0965d423077136da0140277053c8ce91d0000000000000000000000f81a60f8321a29d95e555edc5822e904e5b3821224bb704efb9aea0f736fa06f46b1023fc644c7879a6315e96f6695f65fef95d6dbf22d80c068a20fc98bad02dbeb3c9f478063d2f2f8fd5e8af7a5d5937e5626c71efa3369e99787e78597c01acfa3b273102993abd03263ae4115a65254d32c517eddeb58bbc458d025fdc566906ac145a9db74f46d10805e6c7560f6740cf29445f6aec713655cdd27032c6413f342d8e76782bdc2d96870cf7e84d15838c48aa6af77086acec169846791fbb50b0f648adbc6f4058870827efcf4da44b43c62f3", @ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYRES8, @ANYBLOB="52008483d823da83d8708fd64330f9bbba6cc1924588f8e5f93d0243", @ANYBLOB="0805c250a09347cb0bca3b9f8a8755b3945d3396e6eb14eb64426210d11830f13cb571b8967902d058a39cf86287f14c080fcb8d529bfcda2a3722d8dc8ebe2c29476750ec92bf56619454329e748b3549ba625812d4422958b334db652bd2b9492784354233a06d9b3f22846434889dbea72d8f13aa590030f83b62254e87e4230846ce6bd18bc79e73a1a1fa67571c3ba78979edf79dfc3410b95c51ce90bcca297c2a6995b21032e817c957cf8717fa28a560525b50a3a689d2bc34038bc078356614f0c584", @ANYRES8=0x0], 0x1, 0x1e1, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) getgid() 2.174496809s ago: executing program 2 (id=764): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000780)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x7, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x6c}}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4621, 0x4, @private2, 0x5}, 0xfffffdcb) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/46, 0x2e}, 0x10102) 2.058252331s ago: executing program 4 (id=765): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @void, @value}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/132, 0x84}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 2.057626151s ago: executing program 0 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.799574704s ago: executing program 0 (id=767): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f0000000640)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1.799435554s ago: executing program 3 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x13, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) 1.596956427s ago: executing program 7 (id=769): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) rseq(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.596735547s ago: executing program 4 (id=770): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.014267325s ago: executing program 4 (id=771): sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) 727.999469ms ago: executing program 3 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x17, 0x0, &(0x7f0000000040)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000240)=""/183, 0x26, 0xb7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x23, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x9, 0xfff3}}}, 0x24}}, 0x8000) 74.643198ms ago: executing program 0 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x477, &(0x7f0000000cc0)="$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") r3 = open(&(0x7f0000000140)='./file2\x00', 0x64842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 74.396209ms ago: executing program 2 (id=774): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) pipe2$9p(0x0, 0x0) socket(0x10, 0x80002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 0s ago: executing program 2 (id=775): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): 0.411310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.426621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.435464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.450872][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.463545][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.496336][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.512101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.526094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.535877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.544156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.552099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.561919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.571231][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.578342][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.587136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.608778][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.616413][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.626558][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.636889][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.644086][ T804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.652465][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.661450][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.676219][ T804] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.683402][ T804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.691251][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.701137][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.711192][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.720812][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.729467][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.736575][ T804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.777479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.789357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.799680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.809419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.817463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.825253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.835231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.844328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.854199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.867844][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.892525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.900534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.908948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.920068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.928913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.938487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.960578][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.971962][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.993152][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 60.999353][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 61.006159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.015328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.026378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.036252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.047207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.057147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.065543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.073970][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 61.078699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.080260][ T4212] Bluetooth: hci4: command 0x041b tx timeout [ 61.094114][ T4212] Bluetooth: hci3: command 0x041b tx timeout [ 61.104264][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.117881][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.137007][ T4167] device veth0_vlan entered promiscuous mode [ 61.151964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.161799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.183597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.199288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.210356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.230806][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.253439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.269267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.285355][ T4167] device veth1_vlan entered promiscuous mode [ 61.306405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.325179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.334956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.346094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.355233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.364217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.405536][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.417951][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.425809][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.434281][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.443431][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.451918][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.459873][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.473649][ T4167] device veth0_macvtap entered promiscuous mode [ 61.486516][ T4176] device veth0_vlan entered promiscuous mode [ 61.500001][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.520737][ T4167] device veth1_macvtap entered promiscuous mode [ 61.529778][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.541230][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.550858][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.566903][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.578664][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.589537][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.598740][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.608218][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.615375][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.626565][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.635679][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.644307][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.651371][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.659340][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.674134][ T4176] device veth1_vlan entered promiscuous mode [ 61.707047][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.718399][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.729263][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.740708][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.749309][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.758709][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.768861][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.779208][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.789173][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.800845][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.811584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.821294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.831674][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.865641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.880350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.897217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.908803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.918075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.929262][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.942026][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.956671][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.976553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.985651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.996164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.005237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.018677][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.028612][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.037849][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.047301][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.072701][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.081329][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.094334][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.103344][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.115696][ T4176] device veth0_macvtap entered promiscuous mode [ 62.149608][ T4176] device veth1_macvtap entered promiscuous mode [ 62.204753][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.220128][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.230518][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.239422][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.248331][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.256829][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.265646][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.274404][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.282689][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.290646][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.300948][ T4172] device veth0_vlan entered promiscuous mode [ 62.307889][ T4178] device veth0_vlan entered promiscuous mode [ 62.333822][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.346012][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.359635][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.375988][ T4172] device veth1_vlan entered promiscuous mode [ 62.384126][ T4178] device veth1_vlan entered promiscuous mode [ 62.404432][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.417273][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.426117][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.437310][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.446736][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.457354][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.469623][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.481751][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.499698][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.522383][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.531239][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.542634][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.550253][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.562093][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.572152][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.582401][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.591114][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.633023][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.641115][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.650156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.664153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.673599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.691473][ T4178] device veth0_macvtap entered promiscuous mode [ 62.719559][ T4172] device veth0_macvtap entered promiscuous mode [ 62.731166][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.739969][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.749182][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.758274][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.769502][ T4178] device veth1_macvtap entered promiscuous mode [ 62.788320][ T4172] device veth1_macvtap entered promiscuous mode [ 62.834413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.843891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.851996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.861346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.870609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.879338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.889524][ T804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.889954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.907332][ T804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.909783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.924563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.943825][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.954541][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.964698][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.975789][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.987535][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.007936][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.019312][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.031771][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.042549][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.053044][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.063833][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.075826][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.082857][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 63.089180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.097772][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 63.098528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.113219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.121815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.145693][ T4168] device veth0_vlan entered promiscuous mode [ 63.160966][ T4168] device veth1_vlan entered promiscuous mode [ 63.167571][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 63.184204][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.195855][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 63.201976][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 63.208618][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.222587][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.237169][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.249835][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.259112][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.275874][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.286472][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.297366][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.307608][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.318857][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.330502][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.349790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.358151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.367985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.377272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.386833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.401347][ T4178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.411421][ T4178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.420589][ T4178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.429910][ T4178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.449352][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.465535][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.478453][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.492547][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.524186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.552522][ T804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.560562][ T804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.599976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.617552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.641774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.666381][ T4168] device veth0_macvtap entered promiscuous mode [ 63.680286][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.701471][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.753215][ T4168] device veth1_macvtap entered promiscuous mode [ 63.771512][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.781820][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.801351][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.855153][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.896544][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.938742][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.958445][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.005875][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.016467][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.030719][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.041822][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.051865][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.883066][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.900379][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.922941][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.940555][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.968415][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.997668][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.010313][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.023373][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.031412][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.041498][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.050545][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.103590][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.121428][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.141645][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.158574][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.169599][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.195843][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.217489][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.234125][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.268127][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.331917][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.341218][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.356686][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.367062][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.759621][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 67.765792][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 67.771850][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 67.777936][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 67.785194][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 68.599795][ T804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.621333][ T804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.693239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.702311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.736209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.913592][ T4262] loop0: detected capacity change from 0 to 4096 [ 68.951325][ T4262] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 69.002516][ T4262] ntfs: (device loop0): parse_options(): Invalid uid option argument: ÿ [ 70.566085][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.629492][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.668844][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.677642][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.480274][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.486958][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.646351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.658691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.679208][ T4291] netlink: 'syz.4.13': attribute type 1 has an invalid length. [ 71.692355][ T4291] netlink: 'syz.4.13': attribute type 4 has an invalid length. [ 71.700113][ T4291] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.13'. [ 71.854049][ T4295] loop4: detected capacity change from 0 to 764 [ 72.239099][ T4295] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.762180][ C1] sched: RT throttling activated [ 74.775465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 74.852224][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.861324][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.870466][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.879726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.888757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.897830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.906814][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.915886][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.924887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.817984][ T4327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.859714][ T4325] loop3: detected capacity change from 0 to 1024 [ 75.867952][ T4324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.875561][ T4324] IPv6: NLM_F_CREATE should be set when creating new route [ 75.882851][ T4324] IPv6: NLM_F_CREATE should be set when creating new route [ 75.962109][ T4324] capability: warning: `syz.4.22' uses deprecated v2 capabilities in a way that may be insecure [ 76.034822][ T4325] hfsplus: invalid btree flag [ 76.066319][ T4325] hfsplus: failed to load extents file [ 76.144009][ T4334] loop4: detected capacity change from 0 to 8 [ 76.154480][ T4325] binder_alloc: 4323: binder_alloc_buf, no vma [ 76.287881][ T4334] SQUASHFS error: Unable to read inode 0xa7 [ 76.360101][ T4338] loop0: detected capacity change from 0 to 1024 [ 76.634823][ T4338] ======================================================= [ 76.634823][ T4338] WARNING: The mand mount option has been deprecated and [ 76.634823][ T4338] and is ignored by this kernel. Remove the mand [ 76.634823][ T4338] option from the mount to silence this warning. [ 76.634823][ T4338] ======================================================= [ 77.080442][ T4338] EXT4-fs (loop0): Ignoring removed bh option [ 77.095213][ T4346] loop3: detected capacity change from 0 to 764 [ 77.292440][ T4338] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.026792][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,delalloc,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 80.511799][ T4358] dccp_close: ABORT with 52 bytes unread [ 80.654621][ T4380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 80.677139][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 80.740793][ T4375] Zero length message leads to an empty skb [ 81.836401][ T1346] cfg80211: failed to load regulatory.db [ 82.054438][ T4393] device geneve1 entered promiscuous mode [ 82.113826][ T26] audit: type=1326 audit(1746191409.063:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4394 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 82.123842][ T4210] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.176308][ T4399] mmap: syz.0.46 (4399) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 82.191586][ T26] audit: type=1326 audit(1746191409.063:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4394 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 82.338544][ T26] audit: type=1326 audit(1746191409.073:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4394 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 82.412424][ T4210] usb 4-1: Using ep0 maxpacket: 32 [ 82.543515][ T4393] syz.2.45 (4393) used greatest stack depth: 20160 bytes left [ 82.563487][ T4210] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 82.638916][ T4210] usb 4-1: config 0 has no interface number 0 [ 82.754838][ T4210] usb 4-1: config 0 interface 5 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 82.836992][ T26] audit: type=1326 audit(1746191409.463:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4394 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 82.997212][ T4210] usb 4-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 83.010558][ T4210] usb 4-1: config 0 interface 5 has no altsetting 0 [ 83.090134][ T4406] loop4: detected capacity change from 0 to 1024 [ 83.132848][ T26] audit: type=1326 audit(1746191409.473:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4394 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 83.208006][ T4210] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 83.221100][ T4404] device syzkaller0 entered promiscuous mode [ 83.237646][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.266970][ T4210] usb 4-1: Product: syz [ 83.271193][ T4210] usb 4-1: Manufacturer: syz [ 83.291098][ T4210] usb 4-1: SerialNumber: syz [ 83.291106][ T4406] loop4: detected capacity change from 0 to 512 [ 83.330476][ T4210] usb 4-1: config 0 descriptor?? [ 83.349800][ T4406] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 83.646124][ T4210] radio-si470x 4-1:0.5: could not find interrupt in endpoint [ 83.662672][ T4210] radio-si470x: probe of 4-1:0.5 failed with error -5 [ 83.762431][ T4210] radio-raremono 4-1:0.5: this is not Thanko's Raremono. [ 83.779618][ T4210] usbhid 4-1:0.5: couldn't find an input interrupt endpoint [ 83.787322][ T26] audit: type=1804 audit(1746191410.743:7): pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.53" name="/newroot/10/bus/file1" dev="overlay" ino=78 res=1 errno=0 [ 83.862075][ T4210] usb 4-1: USB disconnect, device number 2 [ 85.841530][ T4440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.59'. [ 85.857721][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 85.939851][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 86.101264][ T4452] netlink: 108 bytes leftover after parsing attributes in process `syz.3.64'. [ 86.317234][ T4458] loop3: detected capacity change from 0 to 16 [ 86.389751][ T4458] erofs: (device loop3): mounted with root inode @ nid 36. [ 86.751068][ T4463] loop2: detected capacity change from 0 to 256 [ 87.702546][ T4463] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 87.944533][ T4471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.71'. [ 87.968474][ T4471] device erspan0 entered promiscuous mode [ 87.980189][ T4471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.71'. [ 88.189855][ T4216] libceph: connect (1)[c::]:6789 error -101 [ 88.200567][ T4216] libceph: mon0 (1)[c::]:6789 connect error [ 88.216559][ T4476] ceph: No mds server is up or the cluster is laggy [ 88.522851][ T1346] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.346026][ T21] libceph: connect (1)[c::]:6789 error -101 [ 90.362711][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 91.565441][ T1346] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 91.591122][ T1346] usb 2-1: can't read configurations, error -71 [ 93.247978][ T4516] loop1: detected capacity change from 0 to 8192 [ 93.280046][ T4502] loop3: detected capacity change from 0 to 32768 [ 97.729150][ T4565] loop0: detected capacity change from 0 to 4096 [ 97.894235][ T4565] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 98.159446][ T4568] netlink: 156 bytes leftover after parsing attributes in process `syz.4.98'. [ 98.524606][ T4567] device geneve2 entered promiscuous mode [ 98.635852][ T4565] ntfs3: loop0: Failed to load $UpCase. [ 98.751626][ T4577] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 98.759180][ T4577] PKCS7: Only support pkcs7_signedData type [ 99.639005][ T4587] device hsr_slave_0 left promiscuous mode [ 99.663624][ T4587] device hsr_slave_1 left promiscuous mode [ 99.807457][ T4597] xt_nat: multiple ranges no longer supported [ 100.560955][ T4608] tipc: Started in network mode [ 100.566995][ T4608] tipc: Node identity 4, cluster identity 4711 [ 100.574311][ T4608] tipc: Node number set to 4 [ 100.689857][ T4606] device bond0 entered promiscuous mode [ 100.717795][ T4606] device bond_slave_0 entered promiscuous mode [ 100.739724][ T4606] device bond_slave_1 entered promiscuous mode [ 100.770044][ T4606] device batadv0 entered promiscuous mode [ 100.790784][ T4606] device bond0 left promiscuous mode [ 100.808336][ T4606] device bond_slave_0 left promiscuous mode [ 100.828946][ T4606] device bond_slave_1 left promiscuous mode [ 100.906139][ T4606] device batadv0 left promiscuous mode [ 102.088940][ T4628] loop0: detected capacity change from 0 to 64 [ 102.176711][ T4631] loop1: detected capacity change from 0 to 1024 [ 102.249614][ T4631] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 102.463172][ T4639] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.481865][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.522829][ T4649] loop0: detected capacity change from 0 to 128 [ 105.880319][ T4680] loop1: detected capacity change from 0 to 512 [ 108.011579][ T4680] EXT4-fs (loop1): Ignoring removed nobh option [ 108.078169][ T4680] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.081199][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 108.145633][ T4680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.261453][ T4680] EXT4-fs (loop1): 1 truncate cleaned up [ 108.271025][ T4680] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 110.792515][ T4719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.326744][ T4744] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 111.346046][ T4216] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 111.832773][ T4216] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.944904][ T4216] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.223579][ T4216] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 112.262751][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.270805][ T4216] usb 3-1: SerialNumber: syz [ 112.369351][ T4216] usb 3-1: 0:2 : does not exist [ 112.542615][ T4771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.159'. [ 112.627355][ T4771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.159'. [ 112.785361][ T4774] binder: 4773:4774 ioctl c0306201 200000000140 returned -14 [ 112.980965][ T4779] loop3: detected capacity change from 0 to 2048 [ 113.027746][ T4779] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.772391][ T26] audit: type=1326 audit(1746191440.723:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7fc00000 [ 114.672365][ T4216] usb 3-1: USB disconnect, device number 2 [ 114.870258][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.936291][ T9] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 115.018032][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1484 with error 28 [ 115.041528][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.041528][ T9] [ 115.095387][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 115.295871][ T9] EXT4-fs (loop3): Free/Dirty block details [ 115.412281][ T9] EXT4-fs (loop3): free_blocks=2415919504 [ 115.517736][ T9] EXT4-fs (loop3): dirty_blocks=1488 [ 115.801168][ T9] EXT4-fs (loop3): Block reservation details [ 115.807389][ T9] EXT4-fs (loop3): i_reserved_data_blocks=93 [ 115.965662][ T4814] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.176876][ T4820] loop2: detected capacity change from 0 to 512 [ 116.998890][ T4820] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 117.089633][ T26] audit: type=1804 audit(1746191444.043:9): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.168" name="/newroot/34/file1" dev="fuse" ino=1 res=1 errno=0 [ 117.105137][ T4820] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.143322][ T26] audit: type=1800 audit(1746191444.043:10): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.168" name="/" dev="fuse" ino=1 res=0 errno=0 [ 117.165076][ T26] audit: type=1804 audit(1746191444.083:11): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.168" name="/newroot/34/file1" dev="fuse" ino=1 res=1 errno=0 [ 117.410009][ T4840] overlayfs: failed to clone upperpath [ 117.452062][ T1262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.501011][ T4837] device veth1_macvtap left promiscuous mode [ 117.508784][ T4837] device macsec0 entered promiscuous mode [ 117.708896][ T1262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.784251][ T4848] loop9: detected capacity change from 0 to 8 [ 117.948411][ T4848] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 117.961061][ T4848] loop9: partition table partially beyond EOD, truncated [ 118.074337][ T4848] loop9: p1 size 81768186 extends beyond EOD, truncated [ 118.364215][ T1262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.427076][ T4851] loop2: detected capacity change from 0 to 1024 [ 118.458451][ T1262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.610318][ T4851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.969635][ T4873] loop3: detected capacity change from 0 to 512 [ 120.859688][ T4873] EXT4-fs error (device loop3): ext4_fill_super:4841: inode #2: comm syz.3.193: iget: bad i_size value: -1 [ 120.874851][ T4873] EXT4-fs (loop3): get root inode failed [ 120.880535][ T4873] EXT4-fs (loop3): mount failed [ 120.902653][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 122.151003][ T4892] loop0: detected capacity change from 0 to 256 [ 122.279182][ T4856] chnl_net:caif_netlink_parms(): no params data found [ 122.506991][ T26] audit: type=1326 audit(1746191449.463:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4898 comm="syz.2.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x0 [ 122.941300][ T4899] netlink: 156 bytes leftover after parsing attributes in process `syz.2.196'. [ 123.084045][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 123.328551][ T4913] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.162307][ T2307] Bluetooth: hci2: command 0x040f tx timeout [ 125.191777][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.221527][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.268664][ T4856] device bridge_slave_0 entered promiscuous mode [ 125.331162][ T4856] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.343687][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.367071][ T4856] device bridge_slave_1 entered promiscuous mode [ 125.581655][ T4856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.699034][ T4856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.227334][ T4856] team0: Port device team_slave_0 added [ 127.235030][ T4210] Bluetooth: hci2: command 0x0419 tx timeout [ 127.298373][ T4856] team0: Port device team_slave_1 added [ 128.313810][ T4976] loop2: detected capacity change from 0 to 512 [ 128.423867][ T4856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.440957][ T4856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.486992][ T4976] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #2: comm syz.2.216: corrupted xattr block 255 [ 128.562663][ T4856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.605049][ T4856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.613278][ T4856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.626886][ T4976] EXT4-fs (loop2): Remounting filesystem read-only [ 128.657125][ T4856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.689545][ T4976] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 128.706207][ T4976] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,nolazytime,errors=remount-ro,nombcache,auto_da_alloc,grpjquota=.nouid32,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 128.738962][ T4976] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #2: comm syz.2.216: corrupted xattr block 255 [ 128.781452][ T4976] EXT4-fs (loop2): Remounting filesystem read-only [ 129.104112][ T4994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.219'. [ 131.025821][ T4856] device hsr_slave_0 entered promiscuous mode [ 131.117649][ T4856] device hsr_slave_1 entered promiscuous mode [ 131.181620][ T4856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.199733][ T4856] Cannot create hsr debugfs directory [ 132.205843][ T5007] input: syz1 as /devices/virtual/input/input5 [ 132.247077][ T1262] device hsr_slave_0 left promiscuous mode [ 132.289890][ T1262] device hsr_slave_1 left promiscuous mode [ 132.312436][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.330227][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.354508][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.366878][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.398578][ T5015] IPv4: Oversized IP packet from 127.202.26.0 [ 132.427743][ T1262] device bridge_slave_1 left promiscuous mode [ 132.437360][ T1262] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.474260][ T1262] device bridge_slave_0 left promiscuous mode [ 132.480800][ T1262] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.518874][ T1262] device veth1_macvtap left promiscuous mode [ 132.527279][ T1262] device veth0_macvtap left promiscuous mode [ 132.535413][ T1262] device veth1_vlan left promiscuous mode [ 132.542979][ T1262] device veth0_vlan left promiscuous mode [ 132.678049][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.686382][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.818583][ T1262] team0 (unregistering): Port device team_slave_1 removed [ 132.838620][ T1262] team0 (unregistering): Port device team_slave_0 removed [ 132.855908][ T1262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.876970][ T1262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.961151][ T1262] bond0 (unregistering): Released all slaves [ 133.393256][ T4856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.407265][ T5034] process 'syz.2.232' launched '/dev/fd/3' with NULL argv: empty string added [ 133.435055][ T5036] device vlan0 entered promiscuous mode [ 133.451423][ T5038] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.543896][ T5036] team0: Port device vlan0 added [ 133.549580][ T4856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.587854][ T4856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.619342][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 133.761970][ T5040] team0 (unregistering): Port device team_slave_0 removed [ 133.827330][ T5040] team0 (unregistering): Port device team_slave_1 removed [ 133.868675][ T5040] team0 (unregistering): Port device vlan0 removed [ 134.042761][ T4856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.351131][ T5068] xt_hashlimit: max too large, truncated to 1048576 [ 135.360514][ T5068] xt_nfacct: accounting object `syz0' does not exists [ 136.500655][ T26] audit: type=1326 audit(1746191463.453:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.509399][ T4856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.572255][ T26] audit: type=1326 audit(1746191463.503:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.575707][ T5075] loop3: detected capacity change from 0 to 1024 [ 136.610000][ T26] audit: type=1326 audit(1746191463.503:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.663202][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.692293][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.730330][ T26] audit: type=1326 audit(1746191463.503:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.735036][ T4856] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.770756][ T5075] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.781878][ T5075] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.802985][ T26] audit: type=1326 audit(1746191463.503:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.830208][ T26] audit: type=1326 audit(1746191463.503:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.852935][ T26] audit: type=1326 audit(1746191463.503:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.877235][ T26] audit: type=1326 audit(1746191463.503:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.917910][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.941700][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.995070][ T26] audit: type=1326 audit(1746191463.503:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 136.996130][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.024680][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.093303][ T5091] overlayfs: failed to clone upperpath [ 137.170547][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.208199][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.258097][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.302377][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.309563][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.361949][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.454267][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.513219][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.534611][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.554093][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.578449][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.619429][ T4856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.647738][ T4856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.734797][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.750978][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.791943][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.836021][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.877399][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.925373][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 137.998940][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.170344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.184722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.248717][ T4856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.256236][ T5134] sctp: [Deprecated]: syz.0.255 (pid 5134) Use of int in max_burst socket option. [ 138.256236][ T5134] Use struct sctp_assoc_value instead [ 139.458368][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 139.830392][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.848117][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.919133][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.937846][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.969459][ T4856] device veth0_vlan entered promiscuous mode [ 139.977548][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.003078][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.039068][ T4856] device veth1_vlan entered promiscuous mode [ 140.139590][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.155779][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.185559][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.221534][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.261736][ T4856] device veth0_macvtap entered promiscuous mode [ 140.301102][ T4856] device veth1_macvtap entered promiscuous mode [ 140.375723][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.401250][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 140.420965][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.435860][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.461048][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.488136][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.518862][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.568106][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.614848][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.688642][ T4856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.736223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.766954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.784385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.814150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.837690][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.865274][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.882085][ T5196] loop3: detected capacity change from 0 to 4096 [ 140.903771][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.942251][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.962269][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.992278][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.041581][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.064114][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.083883][ T4856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.102648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.166602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.204174][ T4856] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.248715][ T4856] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.287315][ T4856] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.324763][ T5215] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.346073][ T4856] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.607517][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.658171][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.741179][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.821263][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.852928][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.895045][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.763509][ T5276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 145.030391][ T5283] loop5: detected capacity change from 0 to 512 [ 145.194310][ T5283] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.231128][ T5276] team0 (unregistering): Port device team_slave_0 removed [ 145.285190][ T5283] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.023016][ T5276] team0 (unregistering): Port device team_slave_1 removed [ 147.300188][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 147.363532][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 147.379926][ T5309] loop8: detected capacity change from 0 to 7 [ 147.390678][ T4283] Dev loop8: unable to read RDB block 7 [ 147.403180][ T4283] loop8: unable to read partition table [ 147.409112][ T4283] loop8: partition table beyond EOD, truncated [ 147.506551][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 147.516024][ T5309] Dev loop8: unable to read RDB block 7 [ 147.555072][ T5309] loop8: unable to read partition table [ 147.583625][ T5309] loop8: partition table beyond EOD, truncated [ 147.591723][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.607042][ T5309] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 147.607042][ T5309] ) failed (rc=-5) [ 147.708587][ T5311] device bridge_slave_1 left promiscuous mode [ 147.763055][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.105368][ T5322] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 148.216977][ T5337] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.621483][ T5348] netlink: 'syz.2.302': attribute type 39 has an invalid length. [ 150.146053][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 151.442332][ T4214] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.683758][ T4214] usb 3-1: Using ep0 maxpacket: 16 [ 151.802991][ T4214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.062353][ T4214] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 153.071459][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.289937][ T4214] usb 3-1: Product: syz [ 155.139843][ T5414] netlink: 'syz.4.320': attribute type 4 has an invalid length. [ 155.162887][ T4214] usb 3-1: config 0 descriptor?? [ 155.182388][ T4214] usb 3-1: can't set config #0, error -71 [ 155.210014][ T4214] usb 3-1: USB disconnect, device number 3 [ 155.276725][ T5420] netlink: 'syz.4.320': attribute type 4 has an invalid length. [ 155.354926][ T5419] loop5: detected capacity change from 0 to 2048 [ 155.488245][ T5431] netlink: 33892 bytes leftover after parsing attributes in process `syz.3.325'. [ 155.499197][ T5419] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,data_err=ignore,noquota,,errors=continue. Quota mode: none. [ 155.706064][ T5435] loop2: detected capacity change from 0 to 256 [ 155.813673][ T5435] FAT-fs (loop2): Unrecognized mount option "shortnam" or missing value [ 156.052403][ T4210] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 156.612530][ T5447] Invalid ELF header magic: != ELF [ 157.382585][ T4210] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 157.406634][ T4210] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 157.440882][ T4210] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 157.464459][ T4210] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 157.490957][ T4210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.582683][ T5437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.852759][ T4210] snd-usb-audio: probe of 6-1:27.0 failed with error -12 [ 157.957357][ T4823] udevd[4823]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.989695][ T4210] usb 6-1: USB disconnect, device number 2 [ 158.977092][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 159.031813][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 159.152941][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 159.260915][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 159.332073][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 159.351638][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 159.389258][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 159.562282][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.570748][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.060352][ T5493] device bridge_slave_1 left promiscuous mode [ 160.331504][ T5493] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.506859][ T5493] device bridge_slave_0 left promiscuous mode [ 160.522764][ T5493] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.652498][ T26] audit: type=1326 audit(1746191487.613:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 160.704935][ T26] audit: type=1326 audit(1746191487.633:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 160.733299][ T26] audit: type=1326 audit(1746191487.633:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 160.772208][ T26] audit: type=1326 audit(1746191487.633:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 160.869596][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.344'. [ 160.941326][ T26] audit: type=1326 audit(1746191487.633:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 161.471610][ T26] audit: type=1326 audit(1746191487.633:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 161.514560][ T26] audit: type=1326 audit(1746191487.633:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 161.564787][ T5489] device syzkaller0 entered promiscuous mode [ 161.630941][ T26] audit: type=1326 audit(1746191487.633:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 161.668954][ T26] audit: type=1326 audit(1746191487.643:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 161.746702][ T26] audit: type=1326 audit(1746191487.643:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 161.812203][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 163.062652][ T5545] netlink: 'syz.0.353': attribute type 21 has an invalid length. [ 163.099701][ T5545] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 163.440432][ T5557] netlink: set zone limit has 8 unknown bytes [ 164.740671][ T5562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 164.805822][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 165.226000][ T5583] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(100183450936972) <= P.seqno(0) <= S.SWH(100183450937046)) and (P.ackno exists or LAWL(23648284795959) <= P.ackno(23648284795960) <= S.AWH(23648284795960), sending SYNC... [ 166.141829][ T5594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.398321][ T5620] bridge0: port 3(vlan2) entered blocking state [ 167.727611][ T5620] bridge0: port 3(vlan2) entered disabled state [ 168.308924][ T5620] device vlan2 entered promiscuous mode [ 168.323066][ T5620] device bond0 entered promiscuous mode [ 168.338987][ T5620] device bond_slave_0 entered promiscuous mode [ 168.370771][ T5620] device bond_slave_1 entered promiscuous mode [ 168.402207][ T5634] tipc: Failed to remove unknown binding: 66,1,1/4:1818833411/1818833413 [ 168.421972][ T5634] tipc: Failed to remove unknown binding: 66,1,1/4:1818833411/1818833413 [ 168.431965][ T5620] bridge0: port 3(vlan2) entered blocking state [ 168.438410][ T5620] bridge0: port 3(vlan2) entered forwarding state [ 168.485763][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.519626][ T5629] device bridge_slave_0 left promiscuous mode [ 168.547853][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.575435][ T5629] device bridge_slave_1 left promiscuous mode [ 168.594323][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.617257][ T5629] bond0: (slave bond_slave_0): Releasing backup interface [ 168.627529][ T4211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.645826][ T5629] device bond_slave_0 left promiscuous mode [ 168.690268][ T5629] bond0: (slave bond_slave_1): Releasing backup interface [ 168.710387][ T5629] device bond_slave_1 left promiscuous mode [ 168.777353][ T5629] team0: Port device team_slave_0 removed [ 168.820836][ T5629] team0: Port device team_slave_1 removed [ 168.834591][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.842328][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.855620][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.863852][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.890227][ T5629] device vlan2 left promiscuous mode [ 168.893627][ T4211] usb 3-1: Using ep0 maxpacket: 32 [ 168.907093][ T5629] device bond0 left promiscuous mode [ 168.925095][ T5629] bridge0: port 3(vlan2) entered disabled state [ 168.979690][ T5640] device wg2 entered promiscuous mode [ 169.043327][ T4211] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 169.077160][ T4211] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.231128][ T5658] loop5: detected capacity change from 0 to 512 [ 169.281638][ T4211] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 169.327707][ T4211] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 169.371161][ T5658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.382070][ T4211] usb 3-1: Product: syz [ 169.382154][ T4211] usb 3-1: Manufacturer: syz [ 169.566587][ T4211] hub 3-1:4.0: bad descriptor, ignoring hub [ 169.610714][ T5658] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:163: inode #15: comm syz.5.381: inline data xattr refers to an external xattr inode [ 169.747785][ T5658] EXT4-fs (loop5): Remounting filesystem read-only [ 169.756414][ T4211] hub: probe of 3-1:4.0 failed with error -5 [ 169.762338][ T5658] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.381: couldn't read orphan inode 15 (err -117) [ 169.810897][ T4211] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 169.861543][ T5658] EXT4-fs (loop5): Remounting filesystem read-only [ 169.887643][ T5658] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,errors=remount-ro,noauto_da_alloc,lazytime,nombcache,journal_ioprio=0x0000000000000004,. Quota mode: none. [ 169.965599][ T5669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 170.103969][ T5671] overlayfs: failed to get inode (-116) [ 170.110642][ T5671] overlayfs: failed to get inode (-116) [ 170.133503][ T5671] overlayfs: failed to get inode (-116) [ 170.154422][ T5671] overlayfs: failed to get inode (-116) [ 170.184155][ T5658] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #2: block 13: comm syz.5.381: lblock 0 mapped to illegal pblock 13 (length 1) [ 170.328866][ T5658] EXT4-fs (loop5): Remounting filesystem read-only [ 170.362921][ T5658] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #2: lblock 0: comm syz.5.381: error -117 reading directory block [ 170.405597][ T4856] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 170.438155][ T4856] EXT4-fs (loop5): Remounting filesystem read-only [ 170.997548][ T5665] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 171.441994][ T5665] EXT4-fs (loop5): Remounting filesystem read-only [ 171.505252][ T4856] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 171.548048][ T4856] EXT4-fs (loop5): Remounting filesystem read-only [ 171.576347][ T4856] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 171.612201][ T4856] EXT4-fs (loop5): Remounting filesystem read-only [ 171.625164][ T4856] EXT4-fs error (device loop5): ext4_dirty_inode:6039: inode #2: comm syz-executor: mark_inode_dirty error [ 171.670139][ T4856] EXT4-fs (loop5): Remounting filesystem read-only [ 171.698975][ T4214] usb 3-1: USB disconnect, device number 4 [ 171.707095][ T4570] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm kworker/u4:12: Invalid inode table block 5 in block_group 0 [ 171.754108][ T4570] EXT4-fs (loop5): Remounting filesystem read-only [ 171.790577][ T4570] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm kworker/u4:12: Invalid inode table block 5 in block_group 0 [ 172.502992][ T4570] EXT4-fs (loop5): Remounting filesystem read-only [ 172.627223][ T5708] loop2: detected capacity change from 0 to 2048 [ 175.164861][ T4283] loop2: unable to read partition table [ 175.171350][ T4283] loop2: partition table beyond EOD, truncated [ 175.255297][ T5736] capability: warning: `syz.0.399' uses 32-bit capabilities (legacy support in use) [ 175.402498][ T1262] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.567366][ T1262] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.667840][ T1262] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.684282][ T5756] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 175.692624][ T5756] netlink: 3 bytes leftover after parsing attributes in process `syz.0.403'. [ 175.746262][ T5708] loop2: unable to read partition table [ 175.752235][ T5708] loop2: partition table beyond EOD, truncated [ 175.786231][ T1262] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.786583][ T5708] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 175.985646][ T3547] loop2: unable to read partition table [ 176.002796][ T3547] loop2: partition table beyond EOD, truncated [ 176.356712][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 178.502691][ T4902] Bluetooth: hci2: command 0x0409 tx timeout [ 178.797757][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 179.022252][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.059090][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.069220][ T5770] device bridge_slave_0 entered promiscuous mode [ 179.117267][ T5822] batman_adv: Cannot find parent device [ 179.125101][ T5822] batman_adv: batadv0: Adding interface: ip6gretap1 [ 179.131942][ T5822] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.212011][ T5822] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 179.252452][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 179.287784][ T5823] batman_adv: batadv0: Removing interface: ip6gretap1 [ 179.368835][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.378520][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.402107][ T5770] device bridge_slave_1 entered promiscuous mode [ 179.530692][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.554093][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.637886][ T1262] device hsr_slave_0 left promiscuous mode [ 179.652500][ T1262] device hsr_slave_1 left promiscuous mode [ 179.665997][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.683760][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.695235][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.702882][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.728822][ T1262] device bridge_slave_1 left promiscuous mode [ 179.765583][ T1262] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.778005][ T1262] device bridge_slave_0 left promiscuous mode [ 179.784653][ T1262] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.799581][ T1262] device veth1_macvtap left promiscuous mode [ 179.806141][ T1262] device veth0_macvtap left promiscuous mode [ 179.812253][ T1262] device veth1_vlan left promiscuous mode [ 179.884816][ T1262] device veth0_vlan left promiscuous mode [ 180.473493][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880197c5c00: rx timeout, send abort [ 180.485203][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880197c5c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 180.603784][ T4902] Bluetooth: hci2: command 0x041b tx timeout [ 180.937306][ T4215] Bluetooth: hci1: command 0x0406 tx timeout [ 180.943612][ T4215] Bluetooth: hci0: command 0x0406 tx timeout [ 180.954770][ T4215] Bluetooth: hci3: command 0x0406 tx timeout [ 182.276662][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880193a4c00: rx timeout, send abort [ 182.285048][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d446400: rx timeout, send abort [ 182.674869][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 182.785044][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880193a4c00: abort rx timeout. Force session deactivation [ 182.803981][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d446400: abort rx timeout. Force session deactivation [ 182.892068][ T1262] team0 (unregistering): Port device team_slave_1 removed [ 182.954180][ T1262] team0 (unregistering): Port device team_slave_0 removed [ 182.995221][ T1262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.022072][ T1262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.123960][ T1262] bond0 (unregistering): Released all slaves [ 183.143166][ T5881] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 183.153870][ T5865] loop3: detected capacity change from 0 to 32768 [ 183.157353][ T4177] Bluetooth: Wrong link type (-22) [ 183.209572][ T5770] team0: Port device team_slave_0 added [ 183.225627][ T5865] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.423 (5865) [ 183.290439][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 183.346432][ T5770] team0: Port device team_slave_1 added [ 183.403197][ T5865] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 183.436710][ T5865] BTRFS info (device loop3): setting nodatasum [ 183.447579][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.460344][ T5865] BTRFS info (device loop3): using free space tree [ 183.469798][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.511618][ T5865] BTRFS info (device loop3): has skinny extents [ 183.547325][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.582904][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.603144][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.630369][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.947082][ T5865] BTRFS info (device loop3): enabling ssd optimizations [ 183.957997][ T5770] device hsr_slave_0 entered promiscuous mode [ 184.026346][ T5770] device hsr_slave_1 entered promiscuous mode [ 184.078990][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.124115][ T5770] Cannot create hsr debugfs directory [ 184.213601][ T5919] netlink: 156 bytes leftover after parsing attributes in process `syz.2.431'. [ 184.592188][ T5931] netlink: 'syz.4.434': attribute type 39 has an invalid length. [ 184.699471][ T5770] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.755080][ T4621] Bluetooth: hci2: command 0x0419 tx timeout [ 185.114888][ T5770] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.126377][ T5770] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.338592][ T5770] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.592281][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.402935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.411667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.459835][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.229745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.441947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.500511][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.507686][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.128923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.629178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.717319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.726030][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.733118][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.776698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.849569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.875105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.910788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.999355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.171638][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.257196][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.552307][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.683350][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.765661][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.020552][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.323760][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.333140][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.393198][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.900051][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.914398][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.948045][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.122612][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.129023][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.222260][ T6069] tipc: Started in network mode [ 195.274140][ T6069] tipc: Node identity 4, cluster identity 4711 [ 195.354072][ T6069] tipc: Node number set to 4 [ 195.796940][ T6084] xt_nat: multiple ranges no longer supported [ 196.213939][ T4902] Bluetooth: hci4: command 0x0406 tx timeout [ 197.290855][ T6090] syz.4.466 (6090) used greatest stack depth: 20064 bytes left [ 197.388400][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.470953][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.502631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.699454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.852147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.412355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.463800][ T5770] device veth0_vlan entered promiscuous mode [ 198.617290][ T5770] device veth1_vlan entered promiscuous mode [ 198.751628][ T5770] device veth0_macvtap entered promiscuous mode [ 198.776359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.794891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.963845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.120191][ T5770] device veth1_macvtap entered promiscuous mode [ 199.731291][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.917355][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.014317][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.025408][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.035571][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.107083][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.176380][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.235471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.281892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.306265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.712968][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.765145][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.798140][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.823738][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.859439][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.895097][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.920281][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.969640][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.007464][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.099664][ T5770] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.119971][ T5770] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.568438][ T5770] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.993306][ T5770] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.295373][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.334909][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.391411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.425535][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.473652][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.523677][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.925234][ T6184] overlayfs: failed to clone upperpath [ 204.087574][ T2307] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 204.162061][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 204.497867][ T2307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 204.557607][ T2307] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 204.586993][ T6209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.594478][ T6209] IPv6: NLM_F_CREATE should be set when creating new route [ 204.601843][ T6209] IPv6: NLM_F_CREATE should be set when creating new route [ 204.632705][ T2307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.711230][ T2307] usb 4-1: config 0 descriptor?? [ 204.860518][ T6217] netlink: 'syz.0.497': attribute type 11 has an invalid length. [ 205.149837][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 207.062098][ T2307] usbhid 4-1:0.0: can't add hid device: -71 [ 207.071224][ T2307] usbhid: probe of 4-1:0.0 failed with error -71 [ 207.109001][ T2307] usb 4-1: USB disconnect, device number 3 [ 207.426244][ T6260] tipc: Started in network mode [ 207.502112][ T6260] tipc: Node identity 7f000001, cluster identity 4711 [ 207.511753][ T6260] tipc: Enabled bearer , priority 10 [ 208.594932][ T2307] tipc: Node number set to 2130706433 [ 208.706663][ T6278] loop3: detected capacity change from 0 to 512 [ 211.500582][ T6278] fscrypt: Error allocating hmac(sha512): -2 [ 211.506724][ T6278] EXT4-fs (loop3): Error processing option "test_dummy_encryption" [-2] [ 211.900016][ T6295] netlink: 'syz.2.515': attribute type 39 has an invalid length. [ 212.109116][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 212.109132][ T26] audit: type=1326 audit(1746191539.063:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.177403][ T26] audit: type=1326 audit(1746191539.093:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.245016][ T26] audit: type=1326 audit(1746191539.093:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.358134][ T26] audit: type=1326 audit(1746191539.103:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.447282][ T26] audit: type=1326 audit(1746191539.103:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.549749][ T26] audit: type=1326 audit(1746191539.103:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.585519][ T6322] overlayfs: failed to clone lowerpath [ 212.612117][ T6322] overlayfs: failed to clone upperpath [ 212.638064][ T26] audit: type=1326 audit(1746191539.103:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.731861][ T26] audit: type=1326 audit(1746191539.103:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.894629][ T26] audit: type=1326 audit(1746191539.103:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 212.973314][ T26] audit: type=1326 audit(1746191539.103:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0c15d969 code=0x7ffc0000 [ 213.021938][ T6337] netlink: 'syz.6.526': attribute type 1 has an invalid length. [ 213.905020][ T6342] device ip6erspan0 entered promiscuous mode [ 214.076927][ T6349] loop6: detected capacity change from 0 to 1024 [ 214.178961][ T6349] EXT4-fs (loop6): Ignoring removed orlov option [ 215.107293][ T6349] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,quota,errors=remount-ro,grpid,orlov,. Quota mode: writeback. [ 215.485193][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 221.573992][ T6429] bridge0: port 2(vlan2) entered blocking state [ 221.629915][ T6429] bridge0: port 2(vlan2) entered disabled state [ 221.698492][ T6429] device vlan2 entered promiscuous mode [ 221.790983][ T6429] device bond0 entered promiscuous mode [ 221.796715][ T6429] device bond_slave_0 entered promiscuous mode [ 221.906830][ T6429] device bond_slave_1 entered promiscuous mode [ 222.085214][ T4243] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 222.159297][ T6429] bridge0: port 2(vlan2) entered blocking state [ 222.165743][ T6429] bridge0: port 2(vlan2) entered forwarding state [ 222.525781][ T6436] tipc: Enabled bearer , priority 0 [ 222.789588][ T4243] usb 4-1: Using ep0 maxpacket: 32 [ 222.949347][ T4243] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 222.982653][ T4243] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.971104][ T4243] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 224.013878][ T4243] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 224.050844][ T4243] usb 4-1: Product: syz [ 224.055068][ T4243] usb 4-1: Manufacturer: syz [ 224.762297][ T4243] usb 4-1: can't set config #4, error -71 [ 224.824684][ T4243] usb 4-1: USB disconnect, device number 4 [ 224.942859][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 225.151948][ T6475] tipc: Started in network mode [ 225.169456][ T6475] tipc: Node identity 4, cluster identity 4711 [ 225.192754][ T6475] tipc: Node number set to 4 [ 226.500136][ T1108] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 228.126063][ T6512] device batadv_slave_1 entered promiscuous mode [ 228.180512][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.218302][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.248431][ T6512] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 228.270150][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.289757][ T1108] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 228.316784][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.400927][ T1108] usb 4-1: config 0 descriptor?? [ 229.396890][ T4215] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 229.413636][ T6527] overlayfs: failed to clone upperpath [ 229.445037][ T6522] device vlan0 entered promiscuous mode [ 229.454907][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 229.462017][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 229.484681][ T1108] usb 4-1: USB disconnect, device number 5 [ 229.527404][ T6522] team0: Port device vlan0 added [ 229.650982][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 229.682525][ T4215] usb 7-1: Using ep0 maxpacket: 8 [ 229.900321][ T4215] usb 7-1: unable to get BOS descriptor or descriptor too short [ 230.019823][ T4215] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 230.114656][ T4215] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 230.328260][ T4215] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.457685][ T4215] usb 7-1: config 1 interface 0 has no altsetting 0 [ 230.665632][ T6531] team0 (unregistering): Port device vlan0 removed [ 230.678667][ T6547] MPTCP: addr_signal error, rm_addr=1 [ 230.744880][ T4215] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.765002][ T4215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.779253][ T4215] usb 7-1: Product: syz [ 230.783723][ T4215] usb 7-1: Manufacturer: syz [ 230.793982][ T4215] usb 7-1: SerialNumber: syz [ 230.830877][ T6552] bridge0: port 2(vlan2) entered disabled state [ 230.837567][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.845646][ T6517] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 230.859222][ T6517] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 230.901351][ T6555] device vlan2 left promiscuous mode [ 230.917210][ T6555] device bond0 left promiscuous mode [ 230.945986][ T6555] device bond_slave_0 left promiscuous mode [ 230.957553][ T6555] device bond_slave_1 left promiscuous mode [ 230.964859][ T6555] bridge0: port 2(vlan2) entered disabled state [ 230.981595][ T6555] device bridge_slave_0 left promiscuous mode [ 231.001611][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.189960][ T4215] usb 7-1: bad CDC descriptors [ 231.243157][ T4215] usb 7-1: USB disconnect, device number 2 [ 232.768254][ T6595] loop6: detected capacity change from 0 to 2048 [ 234.245160][ T4214] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 234.332200][ T5996] loop6: p1 < > p4 [ 234.346067][ T5996] loop6: p4 size 8388608 extends beyond EOD, truncated [ 234.418718][ T6595] loop6: p1 < > p4 [ 234.445237][ T6595] loop6: p4 size 8388608 extends beyond EOD, truncated [ 234.559364][ T4214] usb 4-1: Using ep0 maxpacket: 16 [ 234.597988][ T3547] loop6: p1 < > p4 [ 234.615142][ T3547] loop6: p4 size 8388608 extends beyond EOD, truncated [ 234.717985][ T4214] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 234.729224][ T4214] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.765599][ T6003] udevd[6003]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 235.784056][ T4214] usb 4-1: string descriptor 0 read error: -71 [ 235.790343][ T4214] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.809426][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 235.849346][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.059404][ T4214] usb 4-1: can't set config #1, error -71 [ 236.810941][ T6003] udevd[6003]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 236.917785][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 236.920612][ T6634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.932548][ T4214] usb 4-1: USB disconnect, device number 6 [ 236.960813][ T6624] ODEBUG: Out of memory. ODEBUG disabled [ 237.194305][ T6003] udevd[6003]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 238.059576][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 238.814745][ T6657] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 239.007846][ T6663] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 239.138857][ T6657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.145854][ T4424] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 239.227324][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 239.282775][ T6683] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 239.307005][ T4402] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 239.401460][ T6683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.560280][ T6683] device ip6erspan0 entered promiscuous mode [ 239.572591][ T6683] bond1: (slave ip6erspan0): making interface the new active one [ 239.583961][ T6683] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 239.618255][ T6683] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 240.540062][ T6697] netlink: 'syz.2.614': attribute type 11 has an invalid length. [ 240.569142][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 240.784053][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 240.784070][ T26] audit: type=1326 audit(1746191566.272:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 240.860267][ T26] audit: type=1326 audit(1746191566.272:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 240.901475][ T26] audit: type=1326 audit(1746191566.272:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 240.931943][ T26] audit: type=1326 audit(1746191566.272:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 240.998888][ T26] audit: type=1326 audit(1746191566.345:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 241.062327][ T26] audit: type=1326 audit(1746191566.345:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 241.237609][ T26] audit: type=1326 audit(1746191566.456:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 241.327226][ T6719] loop6: detected capacity change from 0 to 512 [ 241.373399][ T26] audit: type=1326 audit(1746191566.456:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 241.399262][ T26] audit: type=1326 audit(1746191566.456:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 241.929092][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 242.563819][ T26] audit: type=1326 audit(1746191566.465:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f56b0b7a969 code=0x7ffc0000 [ 242.679743][ T6719] EXT4-fs error (device loop6): ext4_fill_super:4841: inode #2: comm syz.6.617: iget: bad i_size value: -1 [ 242.692150][ T6719] EXT4-fs (loop6): get root inode failed [ 242.697797][ T6719] EXT4-fs (loop6): mount failed [ 242.709370][ T2307] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 243.023610][ T2307] usb 4-1: Using ep0 maxpacket: 8 [ 243.197229][ T2307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 245.055277][ T2307] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 245.063633][ T2307] usb 4-1: can't read configurations, error -71 [ 245.656599][ T6749] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 245.663372][ T6749] PKCS7: Only support pkcs7_signedData type [ 246.472463][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.479929][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.525615][ T6752] device bridge_slave_1 left promiscuous mode [ 246.580076][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.631761][ T6752] device bridge_slave_0 left promiscuous mode [ 246.678905][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.543043][ T6761] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 247.744693][ T6761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.759136][ T6764] device ip6erspan0 entered promiscuous mode [ 247.945733][ T6764] bond1: (slave ip6erspan0): making interface the new active one [ 247.955763][ T6764] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 247.970420][ T6768] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 248.962929][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 248.998337][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 249.161795][ T6788] loop6: detected capacity change from 0 to 2048 [ 249.338436][ T6788] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.236915][ T6788] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.635: bg 0: block 234: padding at end of block bitmap is not set [ 250.284890][ T6788] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1016 with error 28 [ 250.300839][ T6788] EXT4-fs (loop6): This should not happen!! Data will be lost [ 250.300839][ T6788] [ 250.312348][ T6788] EXT4-fs (loop6): Total free blocks count 0 [ 250.320163][ T6788] EXT4-fs (loop6): Free/Dirty block details [ 250.327727][ T6788] EXT4-fs (loop6): free_blocks=0 [ 250.337139][ T6788] EXT4-fs (loop6): dirty_blocks=1024 [ 250.344496][ T6788] EXT4-fs (loop6): Block reservation details [ 250.353835][ T6788] EXT4-fs (loop6): i_reserved_data_blocks=64 [ 252.410175][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 253.768174][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.819445][ T6818] MPTCP: kernel_bind error, err=-99 [ 253.855227][ T6816] bond0: (slave bond_slave_0): Releasing backup interface [ 254.155552][ T6816] bond0: (slave bond_slave_1): Releasing backup interface [ 254.865286][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.930355][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.992024][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.023671][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.361923][ T6816] bond1: (slave ip6erspan0): Releasing active interface [ 257.198333][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 258.384088][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.393416][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.835221][ T6914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.661'. [ 260.862941][ T6914] unsupported nlmsg_type 40 [ 260.929518][ T6917] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 261.031949][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.039724][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.587844][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 261.587860][ T26] audit: type=1326 audit(1746191585.464:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 261.598034][ T6934] loop6: detected capacity change from 0 to 1024 [ 261.679670][ T26] audit: type=1326 audit(1746191585.501:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 261.769936][ T26] audit: type=1326 audit(1746191585.510:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 261.848183][ T6934] EXT4-fs (loop6): Ignoring removed nobh option [ 261.862752][ T6934] EXT4-fs (loop6): Ignoring removed bh option [ 261.889217][ T6934] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.892363][ T26] audit: type=1326 audit(1746191585.510:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 261.987841][ T6934] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 262.022496][ T26] audit: type=1326 audit(1746191585.510:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 262.093300][ T26] audit: type=1326 audit(1746191585.510:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 262.127166][ T26] audit: type=1326 audit(1746191585.510:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 262.228785][ T26] audit: type=1326 audit(1746191585.510:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 262.304301][ T6962] EXT4-fs (loop6): shut down requested (1) [ 262.339493][ T26] audit: type=1326 audit(1746191585.510:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 262.361907][ T26] audit: type=1326 audit(1746191585.510:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d651c6969 code=0x7ffc0000 [ 262.601230][ T5770] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 262.767841][ T6976] xt_policy: neither incoming nor outgoing policy selected [ 265.957295][ T7019] chnl_net:caif_netlink_parms(): no params data found [ 266.904270][ T7019] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.928973][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.954945][ T7019] device bridge_slave_0 entered promiscuous mode [ 266.977432][ T7019] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.037560][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.069176][ T7019] device bridge_slave_1 entered promiscuous mode [ 267.163711][ T7019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.205382][ T7019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.335208][ T7019] team0: Port device team_slave_0 added [ 267.378990][ T7019] team0: Port device team_slave_1 added [ 267.507015][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.540277][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.651438][ T7019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.729869][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.783287][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.831351][ T4621] Bluetooth: hci2: command 0x0409 tx timeout [ 267.877042][ T7019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.235563][ T7019] device hsr_slave_0 entered promiscuous mode [ 268.242548][ T7019] device hsr_slave_1 entered promiscuous mode [ 268.260080][ T7019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.290758][ T7019] Cannot create hsr debugfs directory [ 268.613470][ T7019] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 268.633805][ T7019] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 268.644961][ T7019] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 268.656022][ T7019] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 270.898820][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 270.926399][ T7069] device vlan0 entered promiscuous mode [ 271.148488][ T7069] device hsr_slave_1 entered promiscuous mode [ 271.487717][ T7019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.538500][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 271.884715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.901650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.943319][ T7076] netlink: 'syz.3.702': attribute type 10 has an invalid length. [ 271.990866][ T7019] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.023200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.229027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.361712][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.368876][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.470289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.212240][ T7096] tipc: Enabled bearer , priority 0 [ 273.221527][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 273.240267][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.264205][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.300343][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.307551][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.344108][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.366910][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.469907][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.267083][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.593171][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.609152][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.619863][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.634097][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.644458][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.666335][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.746557][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.865660][ T7096] tipc: Disabling bearer [ 275.146293][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.172280][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.206713][ T7019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.461148][ T4215] Bluetooth: hci2: command 0x0419 tx timeout [ 275.515427][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.536687][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.576138][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.592470][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.638916][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.668001][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.693690][ T7019] device veth0_vlan entered promiscuous mode [ 275.735667][ T7019] device veth1_vlan entered promiscuous mode [ 275.812518][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.824942][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.840782][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.887816][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.917607][ T7019] device veth0_macvtap entered promiscuous mode [ 275.929086][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.950985][ T7019] device veth1_macvtap entered promiscuous mode [ 276.006485][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.033402][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.065951][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.079282][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.090236][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.102132][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.121553][ T7019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.177425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.195933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.367516][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.378770][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.389174][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.400139][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.412590][ T7019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.423014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.434505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.459582][ T7019] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.468656][ T7019] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.706266][ T7019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.715112][ T7019] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.952621][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 276.962169][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.989495][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.007794][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 277.018150][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.038495][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.055314][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.073563][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.581379][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 278.590983][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 278.600076][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 278.609147][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 278.618205][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 278.627227][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 278.636192][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 278.645281][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 278.654498][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 282.015051][ T7217] loop3: detected capacity change from 0 to 2048 [ 282.094376][ T7213] orangefs_mount: mount request failed with -4 [ 282.339677][ T7217] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.844851][ T7222] netlink: zone id is out of range [ 282.914576][ T7222] netlink: zone id is out of range [ 282.998082][ T7222] netlink: zone id is out of range [ 283.064640][ T7222] netlink: zone id is out of range [ 283.167081][ T7222] netlink: zone id is out of range [ 283.250443][ T7222] netlink: zone id is out of range [ 283.333952][ T7222] netlink: zone id is out of range [ 283.420793][ T7222] netlink: zone id is out of range [ 283.522720][ T7222] netlink: zone id is out of range [ 283.623011][ T7222] netlink: zone id is out of range [ 283.976163][ T7224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.025766][ T7227] __nla_validate_parse: 30 callbacks suppressed [ 284.026242][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.7.741'. [ 286.216290][ T7215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.738: bg 0: block 234: padding at end of block bitmap is not set [ 286.764971][ T7215] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 286.787468][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.745'. [ 286.796817][ T7215] EXT4-fs (loop3): This should not happen!! Data will be lost [ 286.796817][ T7215] [ 286.861461][ T26] kauditd_printk_skb: 137 callbacks suppressed [ 286.861482][ T26] audit: type=1326 audit(1746191608.780:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.4.747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x0 [ 286.911506][ T7215] EXT4-fs (loop3): Total free blocks count 0 [ 286.924581][ T7215] EXT4-fs (loop3): Free/Dirty block details [ 286.931502][ T7215] EXT4-fs (loop3): free_blocks=0 [ 286.936623][ T7215] EXT4-fs (loop3): dirty_blocks=8192 [ 286.949512][ T7215] EXT4-fs (loop3): Block reservation details [ 286.955588][ T7215] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 287.194277][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 287.229151][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 287.229151][ T9] [ 289.145904][ T26] audit: type=1326 audit(1746191610.893:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.239495][ T7284] loop7: detected capacity change from 0 to 8192 [ 289.241326][ T26] audit: type=1326 audit(1746191610.893:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.343138][ T26] audit: type=1326 audit(1746191610.893:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.420037][ T26] audit: type=1326 audit(1746191610.893:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.501792][ T26] audit: type=1326 audit(1746191610.893:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.527392][ T26] audit: type=1326 audit(1746191610.921:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.549787][ T26] audit: type=1326 audit(1746191610.921:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.586620][ T26] audit: type=1326 audit(1746191610.921:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.690356][ T26] audit: type=1326 audit(1746191610.921:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6701305969 code=0x7ffc0000 [ 289.775112][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 290.626302][ T7312] autofs4:pid:7312:autofs_fill_super: called with bogus options [ 290.791318][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 405.394795][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 405.401948][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l [ 405.410303][ C1] (detected by 1, t=10502 jiffies, g=22577, q=42) [ 405.416828][ C1] task:kworker/u4:0 state:R running task stack:22496 pid: 9 ppid: 2 flags:0x00004000 [ 405.428902][ C1] Workqueue: bat_events batadv_nc_worker [ 405.434598][ C1] Call Trace: [ 405.437889][ C1] [ 405.440840][ C1] __schedule+0x11b8/0x43b0 [ 405.445378][ C1] ? __switch_to_asm+0x34/0x60 [ 405.450164][ C1] ? mark_lock+0x94/0x320 [ 405.454637][ C1] ? mark_lock+0x94/0x320 [ 405.459111][ C1] ? release_firmware_map_entry+0x190/0x190 [ 405.465036][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 405.470352][ C1] preempt_schedule_irq+0xb1/0x150 [ 405.475601][ C1] ? __cond_resched+0xb0/0xb0 [ 405.480315][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 405.486148][ C1] irqentry_exit+0x63/0x70 [ 405.490580][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 405.496070][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 405.501376][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 405.521008][ C1] RSP: 0018:ffffc90000ce7aa0 EFLAGS: 00000206 [ 405.527287][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 9f2c7a382721d800 [ 405.535299][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2260 RDI: ffffffff8a59a2c0 [ 405.543302][ C1] RBP: ffffc90000ce7bc0 R08: dffffc0000000000 R09: fffffbfff1ff3219 [ 405.551311][ C1] R10: fffffbfff1ff3219 R11: 1ffffffff1ff3218 R12: ffffffff8c11be60 [ 405.559314][ C1] R13: 1ffff9200019cf60 R14: 0000000000000246 R15: dffffc0000000000 [ 405.567372][ C1] ? rcu_lock_release+0x5/0x20 [ 405.572160][ C1] ? read_lock_is_recursive+0x10/0x10 [ 405.577643][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 405.582691][ C1] ? rcu_lock_release+0xa/0x20 [ 405.587478][ C1] rcu_lock_acquire+0x2a/0x30 [ 405.592170][ C1] ? rcu_lock_acquire+0x5/0x30 [ 405.596946][ C1] batadv_nc_worker+0xc9/0x5c0 [ 405.601733][ C1] process_one_work+0x863/0x1000 [ 405.606707][ C1] ? worker_detach_from_pool+0x240/0x240 [ 405.612456][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 405.617795][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 405.622841][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 405.628235][ C1] ? wq_worker_running+0x97/0x170 [ 405.633289][ C1] worker_thread+0xaa8/0x12a0 [ 405.638016][ C1] kthread+0x436/0x520 [ 405.642102][ C1] ? rcu_lock_release+0x20/0x20 [ 405.646976][ C1] ? kthread_blkcg+0xd0/0xd0 [ 405.651589][ C1] ret_from_fork+0x1f/0x30 [ 405.656035][ C1] [ 405.659061][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10522 jiffies! g22577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 405.671398][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=10697 [ 405.679401][ C1] rcu: rcu_preempt kthread starved for 10528 jiffies! g22577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 405.690794][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 405.700779][ C1] rcu: RCU grace-period kthread stack dump: [ 405.706676][ C1] task:rcu_preempt state:I stack:27848 pid: 15 ppid: 2 flags:0x00004000 [ 405.715995][ C1] Call Trace: [ 405.719286][ C1] [ 405.722243][ C1] __schedule+0x11b8/0x43b0 [ 405.726776][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 405.732188][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 405.738413][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 405.744340][ C1] ? _raw_spin_unlock+0x40/0x40 [ 405.749210][ C1] ? rcu_is_watching+0x11/0xa0 [ 405.754146][ C1] ? release_firmware_map_entry+0x190/0x190 [ 405.760073][ C1] schedule+0x11b/0x1e0 [ 405.764255][ C1] schedule_timeout+0x15c/0x280 [ 405.769141][ C1] ? console_conditional_schedule+0x40/0x40 [ 405.775056][ C1] ? update_process_times+0x200/0x200 [ 405.780457][ C1] ? prepare_to_swait_event+0x331/0x350 [ 405.786047][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 405.790953][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 405.796358][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 405.801343][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 405.806145][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 405.811375][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 405.816704][ C1] rcu_gp_kthread+0x98/0x350 [ 405.821321][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 405.826450][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 405.832365][ C1] ? __kthread_parkme+0x157/0x1b0 [ 405.837416][ C1] kthread+0x436/0x520 [ 405.841500][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 405.846625][ C1] ? kthread_blkcg+0xd0/0xd0 [ 405.851237][ C1] ret_from_fork+0x1f/0x30 [ 405.855690][ C1] [ 405.858724][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 405.865158][ C1] NMI backtrace for cpu 1 [ 405.869592][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.181-syzkaller #0 [ 405.877414][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.887567][ C1] Call Trace: [ 405.890858][ C1] [ 405.893718][ C1] dump_stack_lvl+0x168/0x230 [ 405.898421][ C1] ? show_regs_print_info+0x20/0x20 [ 405.903721][ C1] ? load_image+0x3b0/0x3b0 [ 405.908242][ C1] ? irq_work_queue+0xbf/0x140 [ 405.913032][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 405.917990][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 405.924160][ C1] ? _printk+0xcc/0x110 [ 405.928341][ C1] ? cpu_online+0x1d/0x30 [ 405.932683][ C1] ? load_image+0x3b0/0x3b0 [ 405.937203][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 405.943296][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 405.949298][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 405.955558][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 405.961077][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 405.966117][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 405.971434][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 405.976672][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 405.981541][ C1] ? account_process_tick+0x227/0x3a0 [ 405.986935][ C1] update_process_times+0x193/0x200 [ 405.992154][ C1] tick_sched_timer+0x37d/0x560 [ 405.997028][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 406.002259][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 406.007964][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 406.013105][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 406.019200][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 406.024185][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 406.030196][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 406.035927][ C1] [ 406.038947][ C1] [ 406.041885][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 406.047918][ C1] RIP: 0010:default_idle+0xb/0x10 [ 406.052964][ C1] Code: bf 48 89 df e8 16 c3 12 f8 eb b5 e8 4f be f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 57 53 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 406.072589][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 406.078692][ C1] RAX: 3e7e142358099400 RBX: ffff88813fe38000 RCX: 3e7e142358099400 [ 406.086680][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b0fc0 RDI: ffffffff8a59a2c0 [ 406.094668][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a [ 406.102658][ C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d68aae8 [ 406.110656][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc7000 [ 406.118750][ C1] default_idle_call+0x81/0xc0 [ 406.123543][ C1] do_idle+0x21b/0x5b0 [ 406.127634][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 406.132845][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 406.138065][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 406.143726][ C1] cpu_startup_entry+0x14/0x20 [ 406.148515][ C1] start_secondary+0x31f/0x430 [ 406.153302][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 406.158701][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 406.164635][ C1]