last executing test programs: 16m2.243241472s ago: executing program 32 (id=34): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4899c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) write$dsp(r0, &(0x7f0000000040)='`', 0x1) 15m41.125829346s ago: executing program 3 (id=86): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000300)='./file1\x00', 0x240084, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000440)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 15m40.04733308s ago: executing program 3 (id=87): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 15m38.463558089s ago: executing program 3 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xb}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc53d, 0x4, 0x7, 0x6, 0x2, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 15m35.871823446s ago: executing program 3 (id=96): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 15m34.275374195s ago: executing program 3 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 15m32.59313788s ago: executing program 3 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 15m31.511146854s ago: executing program 33 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 13m21.298436469s ago: executing program 2 (id=377): syz_usb_connect(0x0, 0x3b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x80800) 13m17.522310068s ago: executing program 2 (id=383): r0 = socket(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2404c822}, 0x8000) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 13m16.261596314s ago: executing program 2 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 13m14.821558893s ago: executing program 2 (id=389): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10b4b3cad0fe92d2"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0xd) 13m14.083249343s ago: executing program 2 (id=391): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x1840c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x2) 13m11.903532642s ago: executing program 2 (id=393): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 12m56.734738879s ago: executing program 34 (id=393): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 11m50.921229954s ago: executing program 7 (id=567): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) r1 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0xff7f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11m48.607876152s ago: executing program 7 (id=572): creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 11m46.826465884s ago: executing program 7 (id=575): connect$unix(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000246000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x7ef34000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 11m42.888019844s ago: executing program 7 (id=582): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) 11m41.748058552s ago: executing program 7 (id=584): socket$nl_generic(0x10, 0x3, 0x10) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200) mkdir(&(0x7f0000000040)='./file0\x00', 0x28) 11m40.189221878s ago: executing program 7 (id=587): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 11m38.965257952s ago: executing program 35 (id=587): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 7m45.771272719s ago: executing program 8 (id=1128): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf9) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/327], 0x2, 0x5505, &(0x7f000000cf00)="$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") openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x183b41, 0x51) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) fallocate(r5, 0x0, 0x8001, 0x2000406) ioctl$SIOCAX25CTLCON(r0, 0x5411, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x7, 0x5, [@default, @bcast, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 7m43.85484149s ago: executing program 8 (id=1131): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f0000000980)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@usefree}, {@utf8}, {@numtail}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@check_strict}, {@utf8no}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 7m41.489043802s ago: executing program 8 (id=1139): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 7m40.259527467s ago: executing program 8 (id=1141): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 7m30.669982023s ago: executing program 8 (id=1162): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 7m25.75281421s ago: executing program 8 (id=1172): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x0, 0xc, 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 7m10.375942872s ago: executing program 36 (id=1172): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x0, 0xc, 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 3m9.178125407s ago: executing program 0 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3m7.803661431s ago: executing program 0 (id=1706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m5.487150419s ago: executing program 0 (id=1713): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 3m5.322017291s ago: executing program 0 (id=1715): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syz_clone3(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x400c005) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) syz_open_dev$usbfs(0x0, 0x75, 0x109301) 3m3.073058555s ago: executing program 0 (id=1721): connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) socket$inet6_sctp(0xa, 0x5, 0x84) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0x91, 0x3, 0x6, 0x81}, 0x6) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 3m1.362045892s ago: executing program 0 (id=1724): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x310, &(0x7f0000000300)) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 2m46.303800093s ago: executing program 37 (id=1724): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x310, &(0x7f0000000300)) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 19.937189505s ago: executing program 4 (id=2063): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x7, "ce89e2f6dc23280f3be1c3beb29b120a53da1f680736ab6e075471aa9b26acd4"}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 16.541156218s ago: executing program 4 (id=2068): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) brk(0x689d80000003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e200"/24], 0x50) socket(0x10, 0x80003, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r3}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x318, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x280, 0x230, 0x230, 0x280, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x1a8, 0x0, {0x1000000}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, [0xffffffff, 0x54691080da52b893, 0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0xff, 0xff, 0xffffff], @ipv6=@private0, [0xffffff00, 0xffffff00, 0xff], @ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0xffff00], 0xfffffffe, 0x6, 0x1d, 0x4e23, 0x4e21, 0x4e22, 0x4e22, 0xa00, 0x2200}, 0x100, 0x1004, 0x4e22, 0x4e23, 0x4e22, 0x4e23}}, @common=@unspec=@state={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x378) 12.475251586s ago: executing program 9 (id=2078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000002180)=0xd, 0x4) 12.319068187s ago: executing program 4 (id=2079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80), 0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000"], 0x20}}, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x2, 0x0, 0x4, 0x0, 0xfffd}, 0x20) close(0x3) 8.311802741s ago: executing program 5 (id=2092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x3c) r7 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u32=&(0x7f00000001c0)=0x2}}) 8.280599583s ago: executing program 4 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) keyctl$chown(0x4, r7, 0xee01, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dffbff, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x12c, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4, 0x7}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x1}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x2}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24048051}, 0x0) 8.198968838s ago: executing program 9 (id=2094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x3f2, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x75f18fb836a75d48) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0xff8c) syz_emit_ethernet(0x121, &(0x7f0000000340)=ANY=[], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) 7.961920705s ago: executing program 1 (id=2095): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffe, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0x40b, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 7.933336017s ago: executing program 6 (id=2096): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1010410, &(0x7f0000000040), 0x0, 0x76a, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$urandom(0xffffffffffffff9c, 0x0, 0x101902, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 6.917141807s ago: executing program 6 (id=2097): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 6.901947267s ago: executing program 1 (id=2098): r0 = fsopen(&(0x7f0000000300)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x8, 0x3}) 5.444157537s ago: executing program 1 (id=2099): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syz_clone3(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x400c005) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) syz_open_dev$usbfs(0x0, 0x75, 0x109301) 5.428865258s ago: executing program 6 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.547498499s ago: executing program 1 (id=2101): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) socket$inet6_sctp(0xa, 0x5, 0x84) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r4, &(0x7f0000000140)={0x22, 0x91, 0x3, 0x6, 0x81}, 0x6) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 4.456983375s ago: executing program 4 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r3, 0xc040583f, &(0x7f0000000880)={{@align=0xffffffffffffffff, {0x7ff, 0x6, 0x7, 0x4}}, {{[0x7, 0x5, 0x8, 0x7ff]}, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=[{{@align=0x8, {0xf, 0x81, 0x7, 0x2}}, 0x800, 0x0, '[(-[\x00'}, {{@_ha_fsid={[0xffffffff, 0xffff]}, {0x0, 0x5, 0x1, 0xff54}}, 0x5, 0x0, '\\\x00'}, {{@_ha_fsid={[0x0, 0x5]}, {0x1, 0x1, 0x4, 0xe}}, 0x401, 0x0, '*-\x00'}, {{@align=0xf, {0xff, 0xbd3f, 0xcd2, 0x401}}, 0xffffff7f, 0x0, 'nl80211\x00'}, {{@_ha_fsid={[0x46a, 0x5]}, {0x7, 0x1, 0x0, 0x8}}, 0x0, 0x0, '\x00'}, {{@align=0xd, {0x3ff, 0x1219, 0x1, 0x1c000000000000}}, 0x7ff, 0x0, '\x00'}]}}) 3.850030236s ago: executing program 6 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) pipe(&(0x7f0000000280)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x5a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf65694c681009078640151e8afd1aecbe6aa40981740800000000000000000020000004ec0a2e2d3a186cd5fc3ab887c3f4643500241c204f040315b305fad97db47ca8608d30aad367ae5615e084e774253979f97c419ed3d15b88658107af4ec2316078e56745cacb21aa97fbc2e4559786dffe4327c2120e1f1981926154240470a443acbac0091cb1043b7333dd2c79f8c0ddcfadfdb8223aed48a6a95b392087ec0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d002000190780000080a00000009000000030204fe00051200004800000000620000000500000009"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r3, &(0x7f0000000380)=""/46, 0xfffffeb4) r4 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000080), 0x4) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 3.849172297s ago: executing program 5 (id=2104): connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) socket$inet6_sctp(0xa, 0x5, 0x84) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0x91, 0x3, 0x6, 0x81}, 0x6) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 2.810646158s ago: executing program 6 (id=2105): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4c) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="71b674", 0x3}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x141) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES8, @ANYBLOB="e907c1268b86fc32daf19b26144a14cdc7480d2b7da7f90b6acde01fd7e945bd45de769114551e07c8fdabd800e563c6b0ae86c443e4573188abf400cfa4c40393b5c1660931a18eeff8de8d1ba6bcb8e8050399e61e9904eaff903e3ac6f9ac27cf0cb837b02aea1585e546e375a9b3ca80fe187d0a3ccffedb6c013968e4d6359b5b04972fdbc72d0197ed63ad5e80cad9bae3c46e65f1c6717a4b4efbc7a4e9bc2e1e5f1ee51ce7944bf1d800b9a09a94"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r7, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.794714779s ago: executing program 9 (id=2106): r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) sync_file_range(r0, 0x3, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8800000) rmdir(&(0x7f0000000040)='./file0\x00') 2.748557072s ago: executing program 5 (id=2107): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1010410, &(0x7f0000000040), 0x0, 0x76a, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$urandom(0xffffffffffffff9c, 0x0, 0x101902, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 1.272124003s ago: executing program 9 (id=2108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=')&:\x00') pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000"], 0x20}}, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x2, 0x0, 0x4, 0x0, 0xfffd}, 0x20) close(0x3) 1.268370633s ago: executing program 6 (id=2109): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r1) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000080)={0x1}, 0x0) syz_clone(0x801a8491, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 1.197207048s ago: executing program 4 (id=2110): r0 = fsopen(&(0x7f0000000300)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x8, 0x3}) 11.011139ms ago: executing program 1 (id=2111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x90000009}) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(r1, 0x80) utime(0x0, &(0x7f0000000040)={0x2, 0xa08b}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 0s ago: executing program 5 (id=2112): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syz_clone3(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x400c005) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) syz_open_dev$usbfs(0x0, 0x75, 0x109301) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.525739][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 227.536203][ T5820] netlink: 16 bytes leftover after parsing attributes in process `syz.6.296'. [ 228.116805][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 228.137898][ T5830] device syzkaller0 entered promiscuous mode [ 231.841770][ T5862] device syzkaller0 entered promiscuous mode [ 232.223922][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 233.105171][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 233.112446][ T4318] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 233.176693][ T4318] usb 2-1: config 0 has no interface number 0 [ 233.217809][ T4318] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 233.240871][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.263435][ T4318] usb 2-1: Product: syz [ 233.301454][ T4318] usb 2-1: Manufacturer: syz [ 233.320342][ T4318] usb 2-1: SerialNumber: syz [ 233.357684][ T4318] usb 2-1: config 0 descriptor?? [ 234.615482][ T4318] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 234.663115][ T4318] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 234.749148][ T4318] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 236.655734][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 236.664841][ T4738] usb 2-1: USB disconnect, device number 3 [ 236.706221][ T4738] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 236.753183][ T5915] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.318'. [ 236.812229][ T4738] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 236.890967][ T4738] quatech2 2-1:0.51: device disconnected [ 237.032236][ T5911] loop0: detected capacity change from 0 to 4096 [ 238.752738][ T5911] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 238.836804][ T5911] ntfs3: loop0: Failed to load $Extend. [ 243.806025][ T5990] loop0: detected capacity change from 0 to 128 [ 244.843268][ T6001] loop1: detected capacity change from 0 to 512 [ 244.855816][ T5990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.881666][ T6001] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 244.909102][ T5990] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.963850][ T6001] EXT4-fs (loop1): invalid journal inode [ 244.977802][ T6001] EXT4-fs (loop1): can't get journal size [ 245.150768][ T6001] EXT4-fs (loop1): 1 truncate cleaned up [ 245.167467][ T6001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 245.194689][ T6007] netlink: 'syz.5.335': attribute type 10 has an invalid length. [ 246.073225][ T6007] device veth0_vlan left promiscuous mode [ 246.085133][ T6007] device veth0_vlan entered promiscuous mode [ 246.096420][ T6007] team0: Device veth0_vlan failed to register rx_handler [ 246.334007][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 246.478139][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 246.630787][ T6019] loop5: detected capacity change from 0 to 2048 [ 246.656270][ T6021] loop1: detected capacity change from 0 to 1024 [ 246.713893][ T6026] tipc: Started in network mode [ 246.733474][ T6021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 246.739463][ T6026] tipc: Node identity 32b995bc0688, cluster identity 4711 [ 246.757829][ T6019] EXT4-fs (loop5): cluster size (2048) smaller than block size (4096) [ 246.793826][ T6026] tipc: Enabled bearer , priority 0 [ 247.005222][ T6031] device syzkaller0 entered promiscuous mode [ 248.308283][ T4323] tipc: Node number set to 875664828 [ 248.345360][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 248.381968][ T6034] tipc: Resetting bearer [ 248.453857][ T6022] tipc: Resetting bearer [ 248.509052][ T6022] tipc: Disabling bearer [ 250.319032][ T6067] loop6: detected capacity change from 0 to 2048 [ 250.370059][ T6067] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 253.502517][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.513712][ T6107] device bridge_slave_0 left promiscuous mode [ 253.532061][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.277812][ T6107] device bridge_slave_1 left promiscuous mode [ 254.284855][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.446174][ T6107] bond0: (slave bond_slave_0): Releasing backup interface [ 254.578998][ T6107] bond0: (slave bond_slave_1): Releasing backup interface [ 255.193376][ T6107] team0: Port device team_slave_0 removed [ 255.263417][ T6107] team0: Port device team_slave_1 removed [ 255.278245][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.297131][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.331300][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.390115][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.845522][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852442][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.197568][ T6145] loop0: detected capacity change from 0 to 2048 [ 257.259088][ T6145] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 257.770349][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'. [ 257.874861][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 259.071216][ T6160] loop0: detected capacity change from 0 to 1024 [ 259.100726][ T6162] loop6: detected capacity change from 0 to 512 [ 259.151884][ T6162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.428863][ T6162] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 259.531792][ T6162] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.653989][ T4907] EXT4-fs (loop6): unmounting filesystem. [ 261.366253][ T6194] loop1: detected capacity change from 0 to 40427 [ 261.481863][ T6194] F2FS-fs (loop1): invalid crc value [ 261.512678][ T6194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 261.556993][ T6194] F2FS-fs (loop1): Start checkpoint disabled! [ 261.699477][ T6194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 263.292914][ T14] libceph: connect (1)[c::]:6789 error -101 [ 263.332272][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 263.407679][ T14] libceph: connect (1)[c::]:6789 error -101 [ 263.449882][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 263.470633][ T6196] ceph: No mds server is up or the cluster is laggy [ 263.547158][ T4419] kworker/u4:13: attempt to access beyond end of device [ 263.547158][ T4419] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 263.659779][ T6212] loop0: detected capacity change from 0 to 512 [ 263.757187][ T14] libceph: connect (1)[c::]:6789 error -101 [ 263.764586][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 263.815833][ T6212] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 263.835555][ T6212] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.048392][ T6219] loop1: detected capacity change from 0 to 1024 [ 264.730099][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 266.111600][ T4361] hfsplus: b-tree write err: -5, ino 25 [ 266.119752][ T4361] hfsplus: b-tree write err: -5, ino 4 [ 266.127881][ T4361] hfsplus: b-tree write err: -5, ino 2 [ 266.135283][ T4361] hfsplus: b-tree write err: -5, ino 26 [ 270.004454][ T6261] tipc: Started in network mode [ 270.036300][ T6261] tipc: Node identity 9e1a48abfd, cluster identity 4711 [ 270.044614][ T6261] tipc: Enabled bearer , priority 0 [ 270.300520][ T6261] device syzkaller0 entered promiscuous mode [ 271.282211][ T128] tipc: Node number set to 1662666923 [ 271.298616][ T6276] tipc: Resetting bearer [ 271.541547][ T6257] tipc: Resetting bearer [ 271.905370][ T6257] tipc: Disabling bearer [ 274.553813][ T6322] loop1: detected capacity change from 0 to 512 [ 274.598806][ T6322] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 274.884711][ T6322] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.405: bg 0: block 473: padding at end of block bitmap is not set [ 274.992731][ T6322] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 275.261109][ T4446] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 275.279411][ T6322] EXT4-fs (loop1): 1 orphan inode deleted [ 275.488265][ T4446] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:15: Failed to release dquot type 1 [ 275.532269][ T6322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 275.616053][ T6322] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.943835][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 280.186337][ T6383] loop6: detected capacity change from 0 to 2048 [ 280.230974][ T6383] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 281.110385][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.5.417'. [ 282.251910][ T6409] Bluetooth: MGMT ver 1.22 [ 282.813399][ T1159] block nbd1: Attempted send on invalid socket [ 282.820842][ T1159] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.123648][ T6421] qnx6: unable to read the first superblock [ 283.135277][ T1159] block nbd1: Attempted send on invalid socket [ 283.142378][ T1159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.152613][ T6421] qnx6: unable to read the first superblock [ 283.159331][ T6421] qnx6: unable to read the first superblock [ 285.651813][ T6440] loop6: detected capacity change from 0 to 2048 [ 285.874615][ T6440] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 286.609603][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.430'. [ 286.793838][ T6448] device bond_slave_0 entered promiscuous mode [ 286.800850][ T6448] device bond_slave_1 entered promiscuous mode [ 287.033659][ T6448] device macvtap1 entered promiscuous mode [ 287.087625][ T6448] device bond0 entered promiscuous mode [ 287.159365][ T6448] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 287.200611][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.212890][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.223257][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.232286][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.241263][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.248934][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.306751][ T6450] device bond0 left promiscuous mode [ 287.313253][ T6450] device bond_slave_0 left promiscuous mode [ 287.319614][ T6450] device bond_slave_1 left promiscuous mode [ 288.955163][ T4374] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.130500][ T4374] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.327913][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 289.375376][ T4374] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.914502][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 290.035864][ T4374] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.268894][ T6494] device syzkaller0 entered promiscuous mode [ 290.501440][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.527050][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.575357][ T6451] device bridge_slave_0 entered promiscuous mode [ 290.647446][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.682762][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.712279][ T6451] device bridge_slave_1 entered promiscuous mode [ 291.035401][ T6515] xt_HMARK: spi-set and port-set can't be combined [ 291.481831][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 292.129964][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.196052][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.234574][ T6451] team0: Port device team_slave_0 added [ 292.241703][ T6526] loop6: detected capacity change from 0 to 2048 [ 292.285160][ T6451] team0: Port device team_slave_1 added [ 292.323374][ T6526] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 293.073405][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.129306][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.181630][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.273977][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.299711][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.541055][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.554937][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 294.272219][ T6542] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 294.379412][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 295.634991][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 295.739430][ T6451] device hsr_slave_0 entered promiscuous mode [ 295.984888][ T6451] device hsr_slave_1 entered promiscuous mode [ 296.036453][ T6584] loop6: detected capacity change from 0 to 2048 [ 296.130680][ T6584] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 296.141367][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.167715][ T6451] Cannot create hsr debugfs directory [ 296.471168][ T4353] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.316906][ T6625] loop6: detected capacity change from 0 to 16 [ 300.870464][ T6625] erofs: (device loop6): mounted with root inode @ nid 36. [ 302.071869][ T6636] loop0: detected capacity change from 0 to 40427 [ 302.101608][ T6636] F2FS-fs (loop0): invalid crc value [ 302.333709][ T6636] F2FS-fs (loop0): Found nat_bits in checkpoint [ 302.922247][ T6636] F2FS-fs (loop0): Start checkpoint disabled! [ 303.043292][ T6636] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 304.198505][ T6655] loop1: detected capacity change from 0 to 2364 [ 305.296508][ T75] kworker/u4:4: attempt to access beyond end of device [ 305.296508][ T75] loop0: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 306.320104][ T75] kworker/u4:4: attempt to access beyond end of device [ 306.320104][ T75] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 308.508651][ T6451] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 308.691641][ T6451] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 308.743004][ T6451] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 308.798125][ T4374] device hsr_slave_0 left promiscuous mode [ 308.830296][ T4374] device hsr_slave_1 left promiscuous mode [ 308.962974][ T4374] device veth1_macvtap left promiscuous mode [ 308.984924][ T4374] device veth0_macvtap left promiscuous mode [ 309.023285][ T4374] device veth1_vlan left promiscuous mode [ 309.029665][ T4374] device veth0_vlan left promiscuous mode [ 312.481471][ T6733] loop1: detected capacity change from 0 to 8192 [ 312.668459][ T6733] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 312.683441][ T6733] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 312.696007][ T6733] REISERFS (device loop1): using ordered data mode [ 312.755459][ T6733] reiserfs: using flush barriers [ 312.900412][ T6733] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 313.457528][ T6733] REISERFS (device loop1): checking transaction log (loop1) [ 313.537572][ T6733] REISERFS (device loop1): Using r5 hash to sort names [ 313.664369][ T6733] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 315.567693][ T4374] bond0 (unregistering): Released all slaves [ 315.680890][ T6451] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 316.023549][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.183821][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.209123][ T6762] loop5: detected capacity change from 0 to 128 [ 316.214129][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.235872][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.262725][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'. [ 316.296652][ T6762] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 316.319046][ T6762] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 316.396732][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.403206][ T6766] loop6: detected capacity change from 0 to 1024 [ 316.417493][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.428759][ T6766] hfsplus: unable to parse mount options [ 317.380295][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.392797][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.579096][ T4541] EXT4-fs (loop5): unmounting filesystem. [ 317.706111][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.714017][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.868579][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.911095][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.930804][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.984786][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.992426][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.039247][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.081177][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.165483][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.214118][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.233964][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.276868][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.296947][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 318.319031][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.341531][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.387143][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.399677][ T6451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.536827][ T6451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.706117][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.734536][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.177034][ T6834] loop1: detected capacity change from 0 to 512 [ 322.285452][ T6834] EXT4-fs (loop1): 1 truncate cleaned up [ 322.291144][ T6834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 322.307609][ T6834] syz.1.500 uses obsolete (PF_INET,SOCK_PACKET) [ 322.344418][ T6844] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 322.344418][ T6844] The task syz.0.497 (6844) triggered the difference, watch for misbehavior. [ 322.393703][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.427479][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.459182][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.477537][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 323.121417][ T6857] loop5: detected capacity change from 0 to 128 [ 323.516027][ T6860] loop0: detected capacity change from 0 to 40427 [ 323.836315][ T6860] F2FS-fs (loop0): invalid crc value [ 323.862421][ T6860] F2FS-fs (loop0): Found nat_bits in checkpoint [ 323.890286][ T6860] F2FS-fs (loop0): Start checkpoint disabled! [ 324.014084][ T6860] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 324.352736][ T6867] openvswitch: netlink: Message has 8 unknown bytes. [ 327.324355][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.367792][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.456936][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.499894][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.560641][ T6451] device veth0_vlan entered promiscuous mode [ 327.587484][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.638965][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.700528][ T6451] device veth1_vlan entered promiscuous mode [ 327.940259][ T6903] kvm [6900]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xcf3a [ 327.967168][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.004645][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.081546][ T6910] loop5: detected capacity change from 0 to 32768 [ 328.189686][ T6910] JBD2: Ignoring recovery information on journal [ 328.201599][ T6903] kvm [6900]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000e5c0 [ 328.905877][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.988212][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.012757][ T6910] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 329.043928][ T6451] device veth0_macvtap entered promiscuous mode [ 329.109530][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.231171][ T6451] device veth1_macvtap entered promiscuous mode [ 329.246575][ T4541] ocfs2: Unmounting device (7,5) on (node local) [ 329.445948][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.494779][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.530466][ T6934] loop6: detected capacity change from 0 to 16 [ 329.591093][ T6934] erofs: (device loop6): mounted with root inode @ nid 36. [ 329.631298][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.924818][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.656360][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.762270][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.877054][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.925979][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.024495][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.205658][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.217386][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.232103][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.244171][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.257564][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.769019][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.819253][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.779882][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.835813][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.997656][ T6451] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.252828][ T6451] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.619447][ T6451] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.708640][ T6451] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.288236][ T6983] device syzkaller0 entered promiscuous mode [ 335.216609][ T5225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.286738][ T5225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.407220][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.450222][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.516826][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.613716][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.083814][ T7033] loop6: detected capacity change from 0 to 1024 [ 338.173082][ T7033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.372365][ T7033] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 339.146345][ T7033] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 339.320328][ T7049] loop1: detected capacity change from 0 to 128 [ 339.390941][ T7044] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 339.415010][ T7049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 339.442163][ T7049] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.482689][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 340.571905][ T7033] batman_adv: batadv0: Adding interface: gretap1 [ 340.624872][ T7033] batman_adv: batadv0: Interface activated: gretap1 [ 341.707512][ T4907] EXT4-fs (loop6): unmounting filesystem. [ 342.580126][ T7095] loop6: detected capacity change from 0 to 512 [ 342.708652][ T7095] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.547: invalid indirect mapped block 256 (level 2) [ 342.759649][ T7095] EXT4-fs (loop6): 2 truncates cleaned up [ 342.767346][ T7101] device syzkaller0 entered promiscuous mode [ 342.797097][ T7095] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 343.719872][ T4907] EXT4-fs (loop6): unmounting filesystem. [ 346.709899][ T7150] loop7: detected capacity change from 0 to 2048 [ 346.913769][ T7150] EXT4-fs (loop7): cluster size (2048) smaller than block size (4096) [ 349.873851][ T7189] loop1: detected capacity change from 0 to 1024 [ 350.802514][ T7189] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 351.840834][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 354.515494][ T7242] loop1: detected capacity change from 0 to 2048 [ 355.298992][ T7242] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 358.093216][ T7278] loop7: detected capacity change from 0 to 512 [ 358.128471][ T7278] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 358.143935][ T7278] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.288440][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.304685][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.319437][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.345160][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.359059][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.371530][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.391178][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.410651][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.424613][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 359.440849][ T6451] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 360.396256][ T6451] EXT4-fs (loop7): unmounting filesystem. [ 361.042283][ T4620] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.846747][ T4620] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.042048][ T7313] loop1: detected capacity change from 0 to 128 [ 362.205182][ T4620] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.249340][ T4353] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 363.164392][ T4620] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.970848][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.983850][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.993678][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.002007][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.010948][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 367.018323][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.587548][ T7363] loop1: detected capacity change from 0 to 128 [ 367.739862][ T7363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 367.796729][ T7363] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.641329][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 368.648799][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 369.077256][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 369.472429][ T7383] loop6: detected capacity change from 0 to 128 [ 369.705433][ T4353] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 371.234601][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 372.358916][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.217264][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.426489][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 373.525045][ T7341] device bridge_slave_0 entered promiscuous mode [ 373.576201][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.633780][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.256749][ T7341] device bridge_slave_1 entered promiscuous mode [ 376.276940][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 376.380907][ T7437] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 376.425844][ T7437] device veth0_vlan left promiscuous mode [ 376.437706][ T7437] device veth0_vlan entered promiscuous mode [ 376.450246][ T7437] team0: Device veth0_vlan failed to register rx_handler [ 376.587074][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.746815][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.661327][ T7341] team0: Port device team_slave_0 added [ 377.766625][ T7341] team0: Port device team_slave_1 added [ 378.861024][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.887793][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.098221][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.122248][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.374628][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.263344][ T26] audit: type=1804 audit(1775621435.918:102): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.627" name="bus" dev="ramfs" ino=44695 res=1 errno=0 [ 381.464352][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.491875][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.946876][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.996942][ T26] audit: type=1804 audit(1775621436.008:103): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.627" name="bus" dev="ramfs" ino=44695 res=1 errno=0 [ 383.718324][ T7540] batman_adv: batadv0: Adding interface: gretap1 [ 383.751785][ T7540] batman_adv: batadv0: Interface activated: gretap1 [ 384.308004][ T7341] device hsr_slave_0 entered promiscuous mode [ 386.091433][ T7341] device hsr_slave_1 entered promiscuous mode [ 386.105460][ T7341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.114631][ T7341] Cannot create hsr debugfs directory [ 386.587329][ T4620] device hsr_slave_0 left promiscuous mode [ 386.598457][ T4620] device hsr_slave_1 left promiscuous mode [ 386.609203][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.543944][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.714382][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.751741][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.781814][ T4620] device bridge_slave_1 left promiscuous mode [ 388.799840][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.836282][ T4620] device bridge_slave_0 left promiscuous mode [ 388.842935][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.003822][ T4620] device veth1_macvtap left promiscuous mode [ 389.041504][ T4620] device veth0_macvtap left promiscuous mode [ 389.048071][ T4620] device veth1_vlan left promiscuous mode [ 389.054247][ T4620] device veth0_vlan left promiscuous mode [ 391.816638][ T4620] team0 (unregistering): Port device team_slave_1 removed [ 391.903373][ T4620] team0 (unregistering): Port device team_slave_0 removed [ 392.057161][ T4620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.100206][ T4620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.351962][ T4620] bond0 (unregistering): Released all slaves [ 394.533719][ T7600] batman_adv: batadv0: Adding interface: gretap1 [ 394.549025][ T7600] batman_adv: batadv0: Interface activated: gretap1 [ 396.137879][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.186484][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.195459][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.317135][ T7644] device bridge_slave_0 left promiscuous mode [ 396.323446][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.368585][ T7644] device bridge_slave_1 left promiscuous mode [ 398.385058][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.048342][ T7644] bond0: (slave bond_slave_0): Releasing backup interface [ 399.077747][ T7644] bond0: (slave bond_slave_1): Releasing backup interface [ 399.176697][ T7644] team0: Port device team_slave_0 removed [ 399.211478][ T7644] team0: Port device team_slave_1 removed [ 399.222748][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.233125][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.251731][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.263937][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.288930][ T7644] batman_adv: batadv0: Interface deactivated: gretap1 [ 399.302276][ T7644] batman_adv: batadv0: Removing interface: gretap1 [ 399.383832][ T7650] team0: Mode changed to "loadbalance" [ 399.676183][ T4285] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 399.839340][ T7341] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 399.927313][ T7341] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 400.057449][ T7341] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 400.724289][ T7341] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 402.017504][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.164336][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.230568][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.047647][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.139669][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.151579][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.162024][ T4484] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.169234][ T4484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.178900][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.195583][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.215322][ T4484] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.222984][ T4484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.348997][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.586519][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.670023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.778873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 406.154836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.202988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 406.265831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.291156][ T7341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.302144][ T7341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.520182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.530167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 406.565757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.184508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.956314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.969061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.074026][ T7787] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.686'. [ 410.155828][ T7797] loop6: detected capacity change from 0 to 32768 [ 410.418865][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.447205][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.459673][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.697462][ T7797] XFS (loop6): Mounting V5 Filesystem [ 411.070534][ T7797] XFS (loop6): Ending clean mount [ 411.090289][ T7797] XFS (loop6): Quotacheck needed: Please wait. [ 411.330541][ T7797] XFS (loop6): Quotacheck: Done. [ 412.290441][ T7833] netlink: 'syz.5.693': attribute type 1 has an invalid length. [ 412.497961][ T4907] XFS (loop6): Unmounting Filesystem [ 414.237416][ T7873] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.701'. [ 414.934146][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 415.107655][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 415.325975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 415.342094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.375563][ T7341] device veth0_vlan entered promiscuous mode [ 415.390516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.420869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.582985][ T7341] device veth1_vlan entered promiscuous mode [ 415.739924][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 415.758061][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 415.941762][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 415.960350][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 416.083201][ T7341] device veth0_macvtap entered promiscuous mode [ 416.346232][ T7341] device veth1_macvtap entered promiscuous mode [ 416.513718][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.574030][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.622149][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.643548][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.681091][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.879926][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.891277][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.902242][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.923540][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.940446][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.354562][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 417.386960][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 417.462787][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 417.472591][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.606262][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 417.662324][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.737930][ T7341] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.749478][ T7341] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.806231][ T7341] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.053144][ T7341] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.604156][ T7622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.628071][ T7622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.651306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 418.674034][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.683919][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.693574][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.786014][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 421.805910][ T7985] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 424.957734][ T8036] xt_TPROXY: Can be used only with -p tcp or -p udp [ 424.992328][ T4283] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 424.993637][ T4283] Bluetooth: hci2: Malformed LE Event: 0x02 [ 429.432418][ T8071] sp0: Synchronizing with TNC [ 430.234820][ T4283] Bluetooth: Unexpected continuation frame (len 10) [ 431.572073][ T8099] loop8: detected capacity change from 0 to 32768 [ 433.694341][ T8099] XFS (loop8): Mounting V5 Filesystem [ 433.877927][ T8099] XFS (loop8): Ending clean mount [ 433.898171][ T8099] XFS (loop8): Quotacheck needed: Please wait. [ 434.050489][ T8099] XFS (loop8): Quotacheck: Done. [ 434.711049][ T8135] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 435.795902][ T7341] XFS (loop8): Unmounting Filesystem [ 436.328853][ T8141] netlink: 'syz.0.748': attribute type 10 has an invalid length. [ 436.463887][ T8141] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 439.282116][ T7684] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 439.468691][ T8188] loop8: detected capacity change from 0 to 2364 [ 440.066477][ T7684] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.085423][ T7684] usb 7-1: config 0 has no interfaces? [ 440.093242][ T7684] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 440.108701][ T7684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.130392][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.137347][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.145915][ T7684] usb 7-1: Product: syz [ 440.175121][ T7684] usb 7-1: Manufacturer: syz [ 440.202723][ T7684] usb 7-1: SerialNumber: syz [ 440.229271][ T7684] usb 7-1: config 0 descriptor?? [ 441.305239][ T8141] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.315594][ T8141] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.324923][ T8141] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.334427][ T8141] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.456395][ T8141] batman_adv: batadv0: Interface deactivated: gretap1 [ 442.612670][ T4341] usb 7-1: USB disconnect, device number 2 [ 445.355029][ T4341] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 445.879069][ T4341] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 446.016544][ T4341] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.526892][ T8265] ubi31: attaching mtd0 [ 446.549797][ T8265] ubi31: scanning is finished [ 446.555468][ T8265] ubi31: empty MTD device detected [ 447.185641][ T4341] usb 7-1: config 0 interface 0 has no altsetting 0 [ 447.209411][ T8265] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 447.286322][ T4341] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 447.304836][ T4341] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 447.313293][ T4341] usb 7-1: Product: syz [ 447.458573][ T4341] usb 7-1: Manufacturer: syz [ 447.463284][ T4341] usb 7-1: SerialNumber: syz [ 448.126197][ T8278] loop6: detected capacity change from 0 to 128 [ 448.153627][ T4341] usb 7-1: config 0 descriptor?? [ 448.335877][ T4341] usb 7-1: can't set config #0, error -71 [ 448.395113][ T8278] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 448.414354][ T4341] usb 7-1: USB disconnect, device number 3 [ 448.442333][ T8278] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 448.840073][ T8295] o2cb: This node has not been configured. [ 448.846930][ T8295] o2cb: Cluster check failed. Fix errors before retrying. [ 448.854610][ T8295] (syz.0.780,8295,1):user_dlm_register:674 ERROR: status = -22 [ 448.862782][ T8295] (syz.0.780,8295,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 449.524299][ T4907] EXT4-fs (loop6): unmounting filesystem. [ 453.013476][ T8343] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 453.023402][ T8343] overlayfs: missing 'lowerdir' [ 455.876516][ T8368] loop6: detected capacity change from 0 to 256 [ 456.222560][ T8373] device syzkaller0 entered promiscuous mode [ 458.136323][ T8373] simple: basic_1 [ 458.140915][ T8373] simple: basic_2 [ 458.144826][ T8373] simple: basic_3 [ 458.148669][ T8373] simple: basic_4 [ 458.152494][ T8373] simple: basic_5 [ 458.156450][ T8373] simple: basic_6 [ 458.160118][ T8373] simple: basic_7 [ 458.163873][ T8373] simple: basic_8 [ 458.167784][ T8373] simple: basic_9 [ 458.171716][ T8373] simple: basic_10 [ 458.175497][ T8373] simple: basic_11 [ 458.179244][ T8373] simple: basic_12 [ 458.183460][ T8373] simple: basic_13 [ 458.187277][ T8373] simple: basic_14 [ 458.191271][ T8373] simple: basic_15 [ 458.195067][ T8373] simple: basic_16 [ 458.198820][ T8373] simple: basic_17 [ 458.202747][ T8373] 0: reclassify loop, rule prio 0, protocol 800 [ 461.469194][ T8396] bridge0: port 1(vlan2) entered blocking state [ 461.534905][ T8396] bridge0: port 1(vlan2) entered disabled state [ 463.138059][ T8445] loop6: detected capacity change from 0 to 128 [ 463.392463][ T8445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 463.436519][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 463.525241][ T8445] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 464.145455][ T4907] EXT4-fs (loop6): unmounting filesystem. [ 469.280078][ T8514] loop6: detected capacity change from 0 to 2048 [ 469.400942][ T8514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.750416][ T8524] loop8: detected capacity change from 0 to 2048 [ 470.977319][ T8524] EXT4-fs (loop8): cluster size (2048) smaller than block size (4096) [ 471.255945][ T26] audit: type=1800 audit(1775621525.908:104): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.826" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 472.791223][ T4283] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 473.523191][ T8576] loop8: detected capacity change from 0 to 32768 [ 473.703531][ T8569] tipc: Enabled bearer , priority 0 [ 473.746085][ T8569] device syzkaller0 entered promiscuous mode [ 474.022182][ T8569] tipc: Resetting bearer [ 474.074485][ T8567] tipc: Resetting bearer [ 474.140963][ T8576] XFS (loop8): Mounting V5 Filesystem [ 474.232314][ T8576] XFS (loop8): Ending clean mount [ 474.241857][ T8576] XFS (loop8): Quotacheck needed: Please wait. [ 474.301804][ T8567] tipc: Disabling bearer [ 474.847066][ T8576] XFS (loop8): Quotacheck: Done. [ 475.601772][ T7341] XFS (loop8): Unmounting Filesystem [ 476.850263][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'. [ 477.291130][ T8645] netlink: 64 bytes leftover after parsing attributes in process `syz.8.846'. [ 479.579042][ T4323] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 479.792349][ T4323] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 479.803677][ T4323] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.014858][ T4323] usb 9-1: config 0 interface 0 has no altsetting 0 [ 480.049855][ T4323] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.069424][ T4323] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 480.104755][ T4323] usb 9-1: Product: syz [ 480.124771][ T4323] usb 9-1: Manufacturer: syz [ 480.129520][ T4323] usb 9-1: SerialNumber: syz [ 480.217132][ T4323] usb 9-1: config 0 descriptor?? [ 480.239885][ T4323] hub 9-1:0.0: bad descriptor, ignoring hub [ 480.304214][ T4323] hub: probe of 9-1:0.0 failed with error -5 [ 480.370253][ T4323] snd-usb-audio: probe of 9-1:0.0 failed with error -22 [ 481.090788][ T8383] udevd[8383]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.395726][ T4359] usb 9-1: USB disconnect, device number 2 [ 484.605258][ T8725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 485.435554][ T8735] loop6: detected capacity change from 0 to 256 [ 486.212846][ T8742] loop6: detected capacity change from 0 to 128 [ 488.227096][ T8761] loop6: detected capacity change from 0 to 2048 [ 489.270264][ T8761] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 490.665810][ T8784] capability: warning: `syz.1.882' uses 32-bit capabilities (legacy support in use) [ 490.953965][ T8787] loop8: detected capacity change from 0 to 256 [ 491.365888][ T8383] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 491.462655][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 493.437408][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 493.918657][ T8819] loop6: detected capacity change from 0 to 128 [ 495.647232][ T8880] loop6: detected capacity change from 0 to 128 [ 496.042982][ T8880] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 496.061952][ T8880] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 496.696286][ T4907] EXT4-fs (loop6): unmounting filesystem. [ 498.055664][ T8905] netlink: 'syz.6.902': attribute type 10 has an invalid length. [ 498.156839][ T8905] team0: Port device vxcan1 added [ 498.175739][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.183895][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.266877][ T8919] loop8: detected capacity change from 0 to 1764 [ 499.423247][ T8919] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 501.715182][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.721703][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.129464][ T8945] netdevsim netdevsim8: Firmware load for './file0/file0/..' refused, path contains '..' component [ 505.480276][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.6.912'. [ 507.057233][ T8987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.492713][ T9007] afs: Unknown parameter 'dy' [ 508.600870][ T9008] random: crng reseeded on system resumption [ 509.101363][ T9009] 9pnet_virtio: no channels available for device 127.0.0.1 [ 511.590457][ T9032] loop6: detected capacity change from 0 to 32768 [ 511.641215][ T9032] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.930 (9032) [ 511.684124][ T9032] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 511.695644][ T9032] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 511.705265][ T9032] BTRFS info (device loop6): enabling disk space caching [ 511.712416][ T9032] BTRFS info (device loop6): force clearing of disk cache [ 511.720618][ T9032] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 511.730762][ T9032] BTRFS info (device loop6): use zstd compression, level 3 [ 511.738175][ T9032] BTRFS info (device loop6): disk space caching is enabled [ 512.441253][ T9032] BTRFS info (device loop6): enabling ssd optimizations [ 512.461670][ T9032] BTRFS info (device loop6): rebuilding free space tree [ 513.088796][ T9032] BTRFS info (device loop6): disabling free space tree [ 513.096131][ T9032] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 513.109735][ T9032] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 513.655138][ T9071] tipc: Started in network mode [ 513.660320][ T9071] tipc: Node identity bacfaebaea5e, cluster identity 4711 [ 513.694972][ T9071] tipc: Enabled bearer , priority 0 [ 513.740214][ T9078] tipc: Enabling of bearer rejected, failed to enable media [ 513.840795][ T9081] fs-verity: sha512 using implementation "sha512-avx2" [ 513.964612][ T9081] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4) [ 514.082607][ T9071] device syzkaller0 entered promiscuous mode [ 514.197518][ T9071] tipc: Resetting bearer [ 514.284975][ T9065] tipc: Resetting bearer [ 514.397612][ T9065] tipc: Disabling bearer [ 514.413904][ T4907] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 516.961532][ T8994] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop6 scanned by udevd (8994) [ 518.583546][ T4285] Bluetooth: hci4: Malformed Event: 0x02 [ 520.471166][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.950'. [ 521.670788][ T4285] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 527.149947][ T9202] libceph: resolve '0..' (ret=-3): failed [ 527.539440][ T9242] loop8: detected capacity change from 0 to 512 [ 527.547695][ T9242] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 527.589373][ T9242] EXT4-fs error (device loop8): ext4_init_orphan_info:621: comm syz.8.965: orphan file block 0: bad magic [ 527.609145][ T9242] EXT4-fs (loop8): mount failed [ 529.651856][ T9265] loop8: detected capacity change from 0 to 128 [ 529.855944][ T9265] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 529.904939][ T9265] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 531.817010][ T7341] EXT4-fs (loop8): unmounting filesystem. [ 535.656407][ T9314] loop8: detected capacity change from 0 to 512 [ 535.892637][ T9314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 536.574514][ T9324] loop6: detected capacity change from 0 to 128 [ 536.871677][ T9317] UDF-fs: error (device loop8): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 537.220299][ T9324] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 52) [ 537.330033][ T9324] FAT-fs (loop6): Filesystem has been set read-only [ 537.392525][ T9324] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 52) [ 539.061346][ T9375] tipc: Enabling of bearer rejected, failed to enable media [ 539.208425][ T9382] netlink: 44 bytes leftover after parsing attributes in process `syz.5.991'. [ 541.411268][ T9413] tipc: Enabling of bearer rejected, failed to enable media [ 543.373165][ T9442] ALSA: mixer_oss: invalid OSS volume 'VOL' [ 544.084231][ T4285] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 544.925171][ T9459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 550.056572][ T9524] loop8: detected capacity change from 0 to 1024 [ 550.110398][ T9524] EXT4-fs: Ignoring removed nobh option [ 550.256792][ T9524] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 551.168477][ T7341] EXT4-fs (loop8): unmounting filesystem. [ 551.428100][ T9550] loop8: detected capacity change from 0 to 128 [ 551.636901][ T9550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.997791][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.004749][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.608880][ T9796] device syzkaller0 entered promiscuous mode [ 568.922521][ T9816] loop8: detected capacity change from 0 to 1024 [ 568.995738][ T9816] hfsplus: unable to parse mount options [ 572.680694][ T9861] overlayfs: failed to clone upperpath [ 575.334102][ T9896] loop8: detected capacity change from 0 to 128 [ 575.486063][ T9896] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 575.517924][ T9896] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 575.819162][ T9894] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.962115][ T9916] overlayfs: failed to clone upperpath [ 577.400197][ T9894] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.602520][ T9894] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.946561][ T9894] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.191058][ T9894] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.265807][ T9894] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.323061][ T9894] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.387450][ T7341] EXT4-fs (loop8): unmounting filesystem. [ 578.396513][ T9894] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.394073][ T9968] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1098'. [ 580.524268][ T9967] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 580.739077][ T9967] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 582.127816][ T4285] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 582.137879][ T4285] CPU: 1 PID: 4285 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 582.145463][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 582.155984][ T4285] Workqueue: hci2 hci_rx_work [ 582.160999][ T4285] Call Trace: [ 582.164400][ T4285] [ 582.167452][ T4285] dump_stack_lvl+0x188/0x24e [ 582.172268][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 582.178198][ T4285] ? show_regs_print_info+0x12/0x12 [ 582.183681][ T4285] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 582.189529][ T4285] sysfs_create_dir_ns+0x26a/0x290 [ 582.194946][ T4285] ? sysfs_warn_dup+0xa0/0xa0 [ 582.199662][ T4285] ? do_raw_spin_unlock+0x11d/0x230 [ 582.204884][ T4285] kobject_add_internal+0x61c/0xcc0 [ 582.210119][ T4285] kobject_add+0x160/0x230 [ 582.214766][ T4285] ? kobject_init+0x1d0/0x1d0 [ 582.219574][ T4285] ? klist_children_get+0x50/0x50 [ 582.224711][ T4285] ? get_device_parent+0x121/0x3f0 [ 582.230001][ T4285] device_add+0x483/0xfb0 [ 582.235079][ T4285] ? kmem_cache_free+0xf7/0x290 [ 582.239977][ T4285] hci_conn_add_sysfs+0xd1/0x1e0 [ 582.244950][ T4285] le_conn_complete_evt+0x1062/0x1670 [ 582.250479][ T4285] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 582.256978][ T4285] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 582.262822][ T4285] ? skb_pull_data+0xf7/0x200 [ 582.267612][ T4285] hci_le_conn_complete_evt+0x183/0x440 [ 582.273379][ T4285] ? hci_remote_host_features_evt+0x270/0x270 [ 582.279594][ T4285] hci_event_packet+0x7b9/0x1280 [ 582.284601][ T4285] ? bis_list+0x280/0x280 [ 582.289151][ T4285] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 582.295099][ T4285] ? kcov_remote_start+0x4c7/0x7e0 [ 582.300264][ T4285] ? sync_thread_master+0x620/0x10b0 [ 582.305679][ T4285] ? hci_send_to_monitor+0x9c/0x4a0 [ 582.311185][ T4285] hci_rx_work+0x3eb/0xd40 [ 582.315820][ T4285] ? process_one_work+0x7b0/0x1160 [ 582.321218][ T4285] process_one_work+0x8a2/0x1160 [ 582.326284][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 582.332337][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 582.338183][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 582.343927][ T4285] ? kthread_data+0x4b/0xc0 [ 582.348567][ T4285] worker_thread+0xaa2/0x1270 [ 582.353293][ T4285] ? __kthread_parkme+0x162/0x1c0 [ 582.358715][ T4285] kthread+0x29d/0x330 [ 582.363078][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 582.368339][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 582.373404][ T4285] ret_from_fork+0x1f/0x30 [ 582.378039][ T4285] [ 582.399926][ T4285] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 582.414499][ T4285] Bluetooth: hci2: failed to register connection device [ 582.470566][ T9991] loop8: detected capacity change from 0 to 2048 [ 582.520223][ T9991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 584.567984][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 589.149972][T10033] loop8: detected capacity change from 0 to 4096 [ 589.476214][T10053] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 592.494498][T10081] device syzkaller0 entered promiscuous mode [ 593.789494][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1120'. [ 595.481924][T10113] loop8: detected capacity change from 0 to 40427 [ 595.540170][T10113] F2FS-fs (loop8): invalid crc value [ 595.567788][T10113] F2FS-fs (loop8): Found nat_bits in checkpoint [ 595.667266][T10113] F2FS-fs (loop8): Start checkpoint disabled! [ 595.815645][T10113] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 597.593168][ T4475] kworker/u4:16: attempt to access beyond end of device [ 597.593168][ T4475] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 597.679817][T10136] autofs4:pid:10136:autofs_fill_super: called with bogus options [ 598.955871][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.028475][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.101606][T10158] loop8: detected capacity change from 0 to 256 [ 599.342219][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.408514][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.313749][T10239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1154'. [ 610.424396][T10269] loop8: detected capacity change from 0 to 128 [ 610.478818][T10269] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 610.563014][T10269] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 616.406252][ T7341] EXT4-fs (loop8): unmounting filesystem. [ 619.786007][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1172'. [ 622.977979][T10379] capability: warning: `syz.1.1184' uses deprecated v2 capabilities in a way that may be insecure [ 624.827300][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.834261][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.171594][T10413] bridge0: port 1(vlan2) entered blocking state [ 628.614768][T10413] bridge0: port 1(vlan2) entered disabled state [ 633.079042][T10461] MPTCP: addr_signal error, rm_addr=1 [ 633.094167][T10461] MPTCP: addr_signal error, rm_addr=1 [ 633.286053][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 633.337860][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 633.347759][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.371026][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.391441][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 633.402153][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 633.620266][ T5251] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.684462][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 633.842616][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.858355][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.010357][T10472] device bridge_slave_0 left promiscuous mode [ 634.027803][T10472] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.089033][T10482] ptrace attach of "./syz-executor exec"[4907] was attempted by ""[10482] [ 634.618418][T10472] device bridge_slave_1 left promiscuous mode [ 634.636407][T10472] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.723621][T10472] bond0: (slave bond_slave_0): Releasing backup interface [ 634.783643][T10472] bond0: (slave bond_slave_1): Releasing backup interface [ 635.476792][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 635.874167][T10472] team0: Port device team_slave_0 removed [ 635.913115][T10472] team0: Port device team_slave_1 removed [ 636.056321][T10472] bond1: (slave veth3): Releasing active interface [ 636.091131][T10472] bond2: (slave bridge1): Releasing active interface [ 636.839915][T10474] team0: Mode changed to "loadbalance" [ 636.880260][ T5251] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.979310][ T5251] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.147582][ T5251] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.325536][T10466] chnl_net:caif_netlink_parms(): no params data found [ 637.555003][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 638.718716][ T5251] tipc: Left network mode [ 638.779060][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.787070][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.384567][T10466] device bridge_slave_0 entered promiscuous mode [ 639.423675][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.504853][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.546966][T10466] device bridge_slave_1 entered promiscuous mode [ 639.627665][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.635346][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 641.010576][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.280824][T10466] team0: Port device team_slave_0 added [ 641.572207][T10466] team0: Port device team_slave_1 added [ 641.836050][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 642.570287][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.633685][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.749543][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.748064][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.773954][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.963889][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.859496][T10466] device hsr_slave_0 entered promiscuous mode [ 649.066000][T10466] device hsr_slave_1 entered promiscuous mode [ 649.749878][T10466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.757939][T10466] Cannot create hsr debugfs directory [ 652.559643][T10466] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 653.435563][T10466] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 654.924081][T10466] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 655.377464][T10466] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 655.494607][ T5251] device hsr_slave_0 left promiscuous mode [ 655.657392][ T5251] device hsr_slave_1 left promiscuous mode [ 655.667276][ T5251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.679353][ T5251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.699422][ T5251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.825646][ T5251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.049138][ T5251] device bridge_slave_1 left promiscuous mode [ 656.056311][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.072307][ T5251] device bridge_slave_0 left promiscuous mode [ 656.080119][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.588455][ T5251] device veth1_macvtap left promiscuous mode [ 656.605271][ T5251] device veth0_macvtap left promiscuous mode [ 656.611929][ T5251] device veth1_vlan left promiscuous mode [ 656.642910][ T5251] device veth0_vlan left promiscuous mode [ 657.743968][ T5251] team0 (unregistering): Port device team_slave_1 removed [ 657.811738][ T5251] team0 (unregistering): Port device team_slave_0 removed [ 657.872051][ T5251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.941209][ T5251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.442203][ T5251] bond0 (unregistering): Released all slaves [ 658.639896][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.766204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.787373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.971905][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.117589][T10466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 663.159345][T10466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.229770][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 663.283214][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 663.337487][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.344823][ T8873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.392705][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 663.402378][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.460940][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.468349][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.628823][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 663.644335][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 663.669899][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 663.746459][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 664.399353][ T26] audit: type=1326 audit(1775621718.398:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8b9c819 code=0x7ffc0000 [ 664.448914][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 664.464845][ T26] audit: type=1326 audit(1775621718.408:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8b9c819 code=0x7ffc0000 [ 664.494517][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 664.514078][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 664.554485][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 664.578296][ T26] audit: type=1326 audit(1775621718.408:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8b9c819 code=0x7ffc0000 [ 664.601971][ T26] audit: type=1326 audit(1775621718.408:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8b9c819 code=0x7ffc0000 [ 664.626590][ T26] audit: type=1326 audit(1775621718.418:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f4ac8b9c819 code=0x7ffc0000 [ 664.652077][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 664.690237][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 664.698972][ T26] audit: type=1326 audit(1775621718.458:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8b9c819 code=0x7ffc0000 [ 664.722886][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 664.734844][ T26] audit: type=1326 audit(1775621718.458:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8b9c819 code=0x7ffc0000 [ 664.743433][T10715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 664.765256][ T26] audit: type=1326 audit(1775621718.458:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ac8b9c582 code=0x7ffc0000 [ 664.885757][ T26] audit: type=1326 audit(1775621718.458:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4ac8b9c617 code=0x7ffc0000 [ 664.912103][T10715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.931716][ T26] audit: type=1326 audit(1775621718.468:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4ac8b59511 code=0x7ffc0000 [ 664.960851][T10715] team0: Port device vxcan1 removed [ 664.993075][T10720] team0: Unable to change to the same mode the team is in [ 665.061795][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 665.085287][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 665.240438][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 666.758355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.833324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 669.158208][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.501883][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 669.501899][ T26] audit: type=1326 audit(1775621724.158:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 670.548099][ T26] audit: type=1326 audit(1775621725.178:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 670.572766][ T26] audit: type=1326 audit(1775621725.178:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 670.597017][ T26] audit: type=1326 audit(1775621725.178:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 670.763082][ T26] audit: type=1326 audit(1775621725.178:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 670.887655][ T26] audit: type=1326 audit(1775621725.178:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 670.925401][ T26] audit: type=1326 audit(1775621725.178:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 671.322510][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'. [ 671.483782][ T26] audit: type=1326 audit(1775621725.178:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 671.547455][ T26] audit: type=1326 audit(1775621725.178:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 672.041499][ T26] audit: type=1326 audit(1775621725.178:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa52199c819 code=0x7ffc0000 [ 681.362788][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 681.969274][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.311996][T10466] device veth0_vlan entered promiscuous mode [ 683.499430][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 683.831120][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.863536][T10466] device veth1_vlan entered promiscuous mode [ 683.880581][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 683.897564][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 683.973584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 683.995079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 684.031742][T10466] device veth0_macvtap entered promiscuous mode [ 684.074137][T10466] device veth1_macvtap entered promiscuous mode [ 684.146329][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.171731][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.183825][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.197033][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 684.281794][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 684.545033][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 684.726101][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 685.035014][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.118593][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.202413][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.224338][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 685.234682][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 685.253891][T10466] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.267021][T10466] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.286033][T10466] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.310900][T10466] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.565784][ T8883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.574269][ T8883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.602756][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 685.621846][ T7622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.632210][ T7622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.640783][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 685.955152][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.961747][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.053467][T10992] loop9: detected capacity change from 0 to 512 [ 688.259981][T10992] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 688.731608][T10992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 688.740284][T10992] System zones: 1-12 [ 688.753471][T10992] EXT4-fs (loop9): 1 truncate cleaned up [ 688.759381][T10992] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 689.628985][T10466] EXT4-fs (loop9): unmounting filesystem. [ 690.685119][T11011] netlink: 'syz.5.1292': attribute type 10 has an invalid length. [ 690.939803][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805734e800: rx timeout, send abort [ 691.121673][T11011] team0: Device vxcan1 is of different type [ 696.864117][T11066] loop9: detected capacity change from 0 to 512 [ 696.876866][T11066] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 696.916662][T11066] EXT4-fs error (device loop9): ext4_init_orphan_info:621: comm syz.9.1310: orphan file block 0: bad magic [ 696.940711][T11066] EXT4-fs (loop9): mount failed [ 703.974779][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1327'. [ 705.349692][T11160] No such timeout policy "syz1" [ 707.983963][ T9128] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 712.946250][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 712.946267][ T26] audit: type=1326 audit(1775622023.355:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 712.977336][ T26] audit: type=1326 audit(1775622023.355:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 713.003312][ T26] audit: type=1326 audit(1775622023.355:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 713.092686][ T26] audit: type=1326 audit(1775622023.355:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 713.116642][ T26] audit: type=1326 audit(1775622023.355:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 713.170136][ T26] audit: type=1326 audit(1775622023.405:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 713.224799][ T9128] usb 10-1: device descriptor read/64, error -110 [ 713.259361][ T26] audit: type=1326 audit(1775622023.405:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 713.397693][T11220] libceph: resolve '0..' (ret=-3): failed [ 713.439689][ T26] audit: type=1326 audit(1775622023.405:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 714.072663][ T9128] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 715.436070][ T9128] usb 10-1: device descriptor read/64, error -32 [ 715.442969][ T26] audit: type=1326 audit(1775622023.405:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba79c819 code=0x7ffc0000 [ 715.478578][ T26] audit: type=1326 audit(1775622023.405:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61ba79c582 code=0x7ffc0000 [ 715.556134][ T9128] usb usb10-port1: attempt power cycle [ 723.149477][T11310] loop9: detected capacity change from 0 to 128 [ 723.176445][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 723.176459][ T26] audit: type=1326 audit(1775622033.845:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 723.329769][T11310] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 723.338822][ T26] audit: type=1326 audit(1775622033.865:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 723.366530][T11310] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 723.537276][ T26] audit: type=1326 audit(1775622033.875:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 724.559805][ T26] audit: type=1326 audit(1775622033.875:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 724.692700][ T26] audit: type=1326 audit(1775622033.875:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 724.715912][ T26] audit: type=1326 audit(1775622033.925:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 724.738869][ T26] audit: type=1326 audit(1775622033.925:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 724.763951][ T26] audit: type=1326 audit(1775622033.925:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 724.791184][ T26] audit: type=1326 audit(1775622033.945:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 725.222778][ T26] audit: type=1326 audit(1775622033.945:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826079c819 code=0x7ffc0000 [ 729.236210][T10466] EXT4-fs (loop9): unmounting filesystem. [ 731.149463][T11400] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1383'. [ 735.714511][T11448] loop9: detected capacity change from 0 to 512 [ 736.122613][T11448] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 736.266789][T11448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 736.275861][T11448] System zones: 1-12 [ 736.342777][T11448] EXT4-fs (loop9): 1 truncate cleaned up [ 736.348849][T11448] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 736.609510][T10466] EXT4-fs (loop9): unmounting filesystem. [ 737.678232][T11469] No such timeout policy "syz1" [ 738.631512][T11472] loop9: detected capacity change from 0 to 2048 [ 738.686756][T11472] EXT4-fs (loop9): cluster size (2048) smaller than block size (4096) [ 744.969186][T11552] No such timeout policy "syz1" [ 747.639166][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.645819][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.744885][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1417'. [ 754.413754][T11629] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 754.493312][T11623] loop9: detected capacity change from 0 to 2048 [ 754.842526][T11623] EXT4-fs (loop9): cluster size (2048) smaller than block size (4096) [ 756.179659][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1435'. [ 756.390554][T11652] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1436'. [ 756.770180][T11660] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 759.874706][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 763.977232][T11740] overlayfs: failed to clone upperpath [ 764.270732][T11754] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1454'. [ 764.411257][T11758] No such timeout policy "syz1" [ 768.934723][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'. [ 770.679022][T11827] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 772.011264][T11846] loop9: detected capacity change from 0 to 4096 [ 772.120394][T11853] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 777.141774][T11956] xt_TCPMSS: Only works on TCP SYN packets [ 780.972778][T12008] autofs4:pid:12008:autofs_fill_super: called with bogus options [ 784.785182][ T4323] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 785.105152][ T4323] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 785.136242][ T4323] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 785.198009][ T4323] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 785.268361][ T4323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.556368][T12059] netlink: 'syz.5.1513': attribute type 3 has an invalid length. [ 786.785644][T12065] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 786.785644][T12065] program syz.9.1509 not setting count and/or reply_len properly [ 787.289697][T12059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.299994][T12059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.323500][T12059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.780928][ T9128] usb 10-1: USB disconnect, device number 5 [ 793.035650][T12139] fuse: Bad value for 'fd' [ 795.902056][T12162] tipc: Enabling of bearer rejected, failed to enable media [ 796.482133][T12175] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1534'. [ 801.135445][T12229] tmpfs: Unknown parameter 'noswap' [ 801.973375][T12231] loop9: detected capacity change from 0 to 32768 [ 801.997419][T12231] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 12 [ 806.074600][T12274] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 806.716437][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 806.727495][ T4283] CPU: 0 PID: 4283 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 806.735405][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 806.745897][ T4283] Workqueue: hci4 hci_rx_work [ 806.750868][ T4283] Call Trace: [ 806.754558][ T4283] [ 806.757934][ T4283] dump_stack_lvl+0x188/0x24e [ 806.762695][ T4283] ? show_regs_print_info+0x12/0x12 [ 806.768106][ T4283] ? load_image+0x400/0x400 [ 806.772705][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 806.777921][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 806.782812][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 806.788121][ T4283] kobject_add_internal+0x61c/0xcc0 [ 806.794049][ T4283] kobject_add+0x160/0x230 [ 806.798674][ T4283] ? kobject_init+0x1d0/0x1d0 [ 806.803679][ T4283] ? klist_children_get+0x50/0x50 [ 806.809158][ T4283] ? get_device_parent+0x121/0x3f0 [ 806.814644][ T4283] device_add+0x483/0xfb0 [ 806.819623][ T4283] ? kmem_cache_free+0xf7/0x290 [ 806.825031][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 806.829979][ T4283] le_conn_complete_evt+0x1062/0x1670 [ 806.835481][ T4283] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 806.841942][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 806.847769][ T4283] ? skb_pull_data+0xf7/0x200 [ 806.852463][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 806.858329][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 806.864411][ T4283] hci_event_packet+0x7b9/0x1280 [ 806.869390][ T4283] ? bis_list+0x280/0x280 [ 806.873863][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 806.880389][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 806.886121][ T4283] ? sync_thread_master+0x620/0x10b0 [ 806.891687][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 806.897005][ T4283] hci_rx_work+0x3eb/0xd40 [ 806.901601][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 806.906469][ T4283] ? process_one_work+0x7b0/0x1160 [ 806.911762][ T4283] process_one_work+0x8a2/0x1160 [ 806.916817][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 806.922724][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 806.927753][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 806.933561][ T4283] ? kthread_data+0x4b/0xc0 [ 806.938290][ T4283] worker_thread+0xaa2/0x1270 [ 806.943069][ T4283] kthread+0x29d/0x330 [ 806.947232][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 806.952255][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 806.957100][ T4283] ret_from_fork+0x1f/0x30 [ 806.961640][ T4283] [ 806.967933][ T4283] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 806.981658][ T4283] Bluetooth: hci4: failed to register connection device [ 807.000112][T12184] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 12 [ 808.758937][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.766103][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.322711][T12315] autofs4:pid:12315:autofs_fill_super: called with bogus options [ 815.911962][T12364] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 816.817826][T12367] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 816.900912][T12367] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 817.002430][T12369] bond1: (slave gretap2): making interface the new active one [ 817.016428][T12369] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 817.204312][T12364] device macvlan3 entered promiscuous mode [ 817.225423][T12364] device bond1 entered promiscuous mode [ 817.364451][T12364] device gretap2 entered promiscuous mode [ 817.395437][T12364] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 817.442406][T12364] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 817.669745][T12364] device bond1 left promiscuous mode [ 817.886404][T12364] device gretap2 left promiscuous mode [ 824.386014][T12463] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 824.716418][T12471] autofs4:pid:12471:autofs_fill_super: called with bogus options [ 830.208733][T12527] Cannot find add_set index 65532 as target [ 844.998835][T12658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 849.338186][T12697] nfs: Unknown parameter 'smackfsroot' [ 852.262870][T12766] NILFS (nullb0): couldn't find nilfs on the device [ 854.157183][T12777] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 854.168643][T12777] overlayfs: failed to set xattr on upper [ 854.175495][T12777] overlayfs: ...falling back to index=off,metacopy=off. [ 857.076775][T12804] overlayfs: failed to clone upperpath [ 858.644334][T12811] loop9: detected capacity change from 0 to 512 [ 858.821924][T12819] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1676'. [ 858.908351][T12811] EXT4-fs (loop9): 1 truncate cleaned up [ 858.914252][T12811] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 859.435837][T10466] EXT4-fs (loop9): unmounting filesystem. [ 862.678840][T12863] mmap: syz.6.1683 (12863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 862.760706][ T4283] Bluetooth: Unexpected continuation frame (len 10) [ 869.865543][T12938] overlayfs: failed to clone upperpath [ 869.890656][T12938] overlayfs: failed to clone upperpath [ 870.248101][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.254902][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.697420][T12946] overlayfs: failed to clone upperpath [ 875.026970][T12994] loop9: detected capacity change from 0 to 4096 [ 875.205169][T12994] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 875.309971][T12994] ntfs3: loop9: mft corrupted [ 875.320113][T12994] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 875.329273][T12994] ntfs3: loop9: Failed to load $AttrDef -> 0 [ 876.663728][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1716'. [ 876.775630][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1716'. [ 876.978073][T13024] [U]  [ 877.969667][T13075] loop9: detected capacity change from 0 to 32768 [ 878.048600][T13075] XFS (loop9): Mounting V5 Filesystem [ 878.747595][T13075] XFS (loop9): Ending clean mount [ 878.758012][T13075] XFS (loop9): Quotacheck needed: Please wait. [ 879.732636][T13075] XFS (loop9): Quotacheck: Done. [ 880.940619][T10466] XFS (loop9): Unmounting Filesystem [ 881.720345][T13124] overlayfs: failed to clone lowerpath [ 881.777097][T13125] overlayfs: failed to clone upperpath [ 884.794560][T13159] futex_wake_op: syz.5.1736 tries to shift op by 144; fix this program [ 884.812851][T13158] loop9: detected capacity change from 0 to 128 [ 888.963472][T13192] ax25_connect(): syz.9.1741 uses autobind, please contact jreuter@yaina.de [ 888.978679][T13192] loop9: detected capacity change from 0 to 16 [ 888.995998][T13192] erofs: (device loop9): check_layout_compatibility: unidentified incompatible feature c0, please upgrade kernel version [ 901.481160][ T52] block nbd9: Attempted send on invalid socket [ 901.488613][ T52] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 901.608974][T13269] EXT4-fs (nbd9): unable to read superblock [ 902.973264][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 902.986004][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 902.996112][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 903.005435][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 903.013874][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 903.056565][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 903.405123][T13022] bond0: (slave syz_tun): Releasing backup interface [ 903.412037][T13022] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 904.708250][T13321] syz.9.1771 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 904.923292][T13285] chnl_net:caif_netlink_parms(): no params data found [ 905.044583][ T8156] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 905.154697][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 905.324736][ T8156] usb 10-1: Using ep0 maxpacket: 8 [ 905.712881][ T8156] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 905.724930][ T8156] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 905.736296][ T8156] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 905.749354][ T8156] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 905.761896][ T8156] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.783222][ T8156] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 905.806946][ T8156] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.962063][T13285] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.574625][ T8156] usb 10-1: GET_CAPABILITIES returned 0 [ 906.581854][ T8156] usbtmc 10-1:16.0: can't read capabilities [ 906.654669][T13285] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.664270][T13285] device bridge_slave_0 entered promiscuous mode [ 906.683942][T13285] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.704634][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.719790][T13285] device bridge_slave_1 entered promiscuous mode [ 907.554648][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 907.566174][ T4316] usb 10-1: USB disconnect, device number 6 [ 907.567878][T13285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.625618][T13345] ±ÿ: renamed from team_slave_1 [ 907.696323][T13285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.864058][T13285] team0: Port device team_slave_0 added [ 907.875732][T13285] team0: Port device team_slave_1 added [ 908.696642][T13285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.758233][T13285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.873974][T13285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.927850][T13285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.935136][T13285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.168614][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 910.227940][T13285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.323176][T13285] device hsr_slave_0 entered promiscuous mode [ 910.358150][T13285] device hsr_slave_1 entered promiscuous mode [ 910.421171][T13285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.464605][T13285] Cannot create hsr debugfs directory [ 912.257061][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 914.597108][T13417] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 916.641778][T13436] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1793'. [ 916.654690][T13436] overlayfs: failed to clone upperpath [ 919.781939][T13446] bridge0: port 1(syz_tun) entered blocking state [ 919.789610][T13446] bridge0: port 1(syz_tun) entered disabled state [ 919.799180][T13446] device syz_tun entered promiscuous mode [ 919.810195][T13446] bridge0: port 1(syz_tun) entered blocking state [ 919.817669][T13446] bridge0: port 1(syz_tun) entered forwarding state [ 919.830563][T13447] netlink: 'syz.6.1797': attribute type 10 has an invalid length. [ 919.864867][T13447] bridge0: port 1(syz_tun) entered disabled state [ 919.875776][T13447] bridge0: port 1(syz_tun) entered blocking state [ 919.883128][T13447] bridge0: port 1(syz_tun) entered forwarding state [ 919.892639][T13447] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 920.097939][T13452] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1798'. [ 920.809912][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1799'. [ 921.772898][T13481] netlink: 'syz.5.1802': attribute type 2 has an invalid length. [ 921.782003][T13481] netlink: 'syz.5.1802': attribute type 1 has an invalid length. [ 921.794668][T13481] netlink: 'syz.5.1802': attribute type 1 has an invalid length. [ 924.592716][T13512] No such timeout policy "syz1" [ 926.852416][T13285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 926.978888][T13285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 927.023196][T13285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 927.093104][T13285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 927.332696][T13535] loop9: detected capacity change from 0 to 4096 [ 928.021328][T13536] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 928.186543][T13285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.249756][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 928.267521][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 928.317304][T13285] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.407650][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 928.456038][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 929.244132][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.251516][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.287932][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 929.298289][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 929.307847][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.315303][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.324416][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 929.353345][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 929.392114][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 929.416375][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 929.556440][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 929.592900][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 929.663951][T13285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 930.030815][T13285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.284342][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 930.295981][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 930.305484][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 930.315892][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 930.342956][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 930.352537][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 930.385433][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 932.194906][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.201347][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.692834][T13285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.720222][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 932.730462][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 937.986336][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 938.024094][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 939.697836][T13285] device veth0_vlan entered promiscuous mode [ 940.024667][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 940.041936][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 940.430123][T13285] device veth1_vlan entered promiscuous mode [ 940.849315][T13702] netlink: 'syz.1.1843': attribute type 2 has an invalid length. [ 940.857477][T13702] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 940.865587][T13702] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 940.904342][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 940.966304][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 942.248581][T13285] device veth0_macvtap entered promiscuous mode [ 942.259707][T13285] device veth1_macvtap entered promiscuous mode [ 942.277239][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.318458][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.331724][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.343164][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.391057][T13285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.415573][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 942.425529][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 942.444588][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 942.464941][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 942.711791][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 942.796131][T13719] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1837'. [ 942.808020][ T4283] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 943.143128][T13722] loop9: detected capacity change from 0 to 64 [ 943.274932][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 943.330064][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.428142][T13722] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 943.463562][T13722] Trying to free block not in datazone [ 943.475775][T13722] syz.9.1839: attempt to access beyond end of device [ 943.475775][T13722] loop9: rw=2049, sector=412, nr_sectors = 2 limit=64 [ 943.491436][T13722] Buffer I/O error on dev loop9, logical block 206, lost async page write [ 943.531932][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.706353][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.942979][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.015816][T13285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.039659][T13285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.048790][T13285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.158606][T13285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.199086][T13285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.664989][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.682183][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.855149][ T8873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.873438][ T8873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.237306][ T8877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 946.265417][ T8877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 946.303451][ T8877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 946.472682][ T8877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 948.604053][T13759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1846'. [ 949.164415][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'. [ 949.229814][T13769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1858'. [ 950.992739][T13791] xt_cgroup: invalid path, errno=-2 [ 952.319755][T13806] loop9: detected capacity change from 0 to 512 [ 952.853110][T13806] EXT4-fs: test_dummy_encryption requires encrypt feature [ 954.107436][T13826] loop9: detected capacity change from 0 to 256 [ 954.167967][T13826] FAT-fs (loop9): Directory bread(block 64) failed [ 954.174737][T13826] FAT-fs (loop9): Directory bread(block 65) failed [ 954.181619][T13826] FAT-fs (loop9): Directory bread(block 66) failed [ 954.188509][T13826] FAT-fs (loop9): Directory bread(block 67) failed [ 954.195352][T13826] FAT-fs (loop9): Directory bread(block 68) failed [ 954.201912][T13826] FAT-fs (loop9): Directory bread(block 69) failed [ 954.208979][T13826] FAT-fs (loop9): Directory bread(block 70) failed [ 954.215778][T13826] FAT-fs (loop9): Directory bread(block 71) failed [ 954.222919][T13826] FAT-fs (loop9): Directory bread(block 72) failed [ 954.229630][T13826] FAT-fs (loop9): Directory bread(block 73) failed [ 954.761552][T13830] syz.9.1861: attempt to access beyond end of device [ 954.761552][T13830] loop9: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 954.776866][T13830] syz.9.1861: attempt to access beyond end of device [ 954.776866][T13830] loop9: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 954.798434][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 954.798726][ T26] audit: type=1800 audit(1775622265.455:383): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1861" name="file0" dev="loop9" ino=1048797 res=0 errno=0 [ 955.959256][T13842] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1864'. [ 958.750250][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1869'. [ 960.828918][T13901] netlink: 'syz.6.1879': attribute type 3 has an invalid length. [ 961.311821][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 961.321659][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 961.334295][T13901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 968.083744][T13968] binder: binder_mmap: 13958 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 968.926585][T13978] loop9: detected capacity change from 0 to 128 [ 968.955019][T13979] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1894'. [ 969.382105][T13978] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 969.391967][T13978] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 970.684261][T10466] EXT4-fs (loop9): unmounting filesystem. [ 971.061328][T14011] xt_cgroup: invalid path, errno=-2 [ 974.693978][T14043] loop9: detected capacity change from 0 to 128 [ 975.415445][T14043] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 975.439286][T14043] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 976.969558][T10466] EXT4-fs (loop9): unmounting filesystem. [ 982.602608][T14098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 982.610524][T14098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 982.650612][T14100] loop9: detected capacity change from 0 to 2368 [ 983.330209][T14098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 983.469699][T14105] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 983.551582][T14107] xt_cgroup: invalid path, errno=-2 [ 987.901460][T14155] xt_l2tp: v2 doesn't support IP mode [ 989.629519][T14177] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 993.714054][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.720412][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.333429][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1948'. [ 1000.268961][T14262] loop9: detected capacity change from 0 to 256 [ 1000.340100][T14262] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1000.360848][T14262] exFAT-fs (loop9): IO charset cp865.uN“id=zŒXdÄJõš¼Þ9L`¦-Øê­G4›[šãrÚ¸Îw¸ÁNªŠÒµúeľ6–a [ 1000.360848][T14262] ²¬‚/er‡™!½Bz not found [ 1006.032309][T14322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1968'. [ 1006.159521][ T26] audit: type=1326 audit(1775622316.825:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14305 comm="syz.9.1965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b7359c819 code=0x0 [ 1007.933052][T14352] delete_channel: no stack [ 1010.326485][T14382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1011.190336][T14393] loop9: detected capacity change from 0 to 256 [ 1012.583365][T14393] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1012.598423][T14393] exFAT-fs (loop9): IO charset cp865.uN“id=zŒXdÄJõš¼Þ9L`¦-Øê­G4›[šãrÚ¸Îw¸ÁNªŠÒµúeľ6–a [ 1012.598423][T14393] ²¬‚/er‡™!½Bz not found [ 1012.622599][T14390] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1984'. [ 1012.923450][T14404] netlink: 164 bytes leftover after parsing attributes in process `syz.9.1991'. [ 1014.724615][T14102] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1015.527984][T14102] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.566652][T14102] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1015.696018][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1015.704221][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1015.809301][T14443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1015.925856][T14102] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1016.049117][T14102] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1016.074497][T14102] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.115503][T14102] usb 10-1: Product: syz [ 1016.121452][T14102] usb 10-1: Manufacturer: syz [ 1016.167655][T14102] usb 10-1: SerialNumber: syz [ 1016.193371][T14102] usb 10-1: config 0 descriptor?? [ 1016.997118][T14463] usb usb7: usbfs: process 14463 (syz.9.1996) did not claim interface 0 before use [ 1020.186472][ T8156] usb 10-1: USB disconnect, device number 7 [ 1022.143604][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.152291][T14513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.596720][T14524] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1027.787368][T14570] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1027.799076][T14570] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1030.391844][T14602] overlayfs: failed to clone upperpath [ 1031.370966][ T26] audit: type=1326 audit(1775622342.035:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.1.2039" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f826079c819 code=0x0 [ 1031.602083][T14615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1038.063898][T14675] loop9: detected capacity change from 0 to 2048 [ 1038.117945][T14675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1042.892711][T14718] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2064'. [ 1045.748021][ T4434] tipc: Left network mode [ 1048.886333][T14789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2077'. [ 1054.517536][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.524715][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.889756][ T4434] batman_adv: batadv0: Removing interface: gretap1 [ 1056.357517][ T4434] bond1: (slave gretap2): Releasing active interface [ 1058.484728][T14893] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1058.496136][T14893] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1060.012290][ T4434] bond0: (slave wlan1): Releasing backup interface [ 1060.964385][ T4434] ------------[ cut here ]------------ [ 1060.970925][ T4434] WARNING: CPU: 0 PID: 4434 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 1060.981934][ T4434] Modules linked in: [ 1060.985930][ T4434] CPU: 0 PID: 4434 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1060.993849][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1061.004802][ T4434] Workqueue: netns cleanup_net [ 1061.009618][ T4434] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 1061.016574][ T4434] Code: 7c 2d 00 00 74 08 48 89 df e8 ac bb 1d f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 ef 80 00 e8 70 b0 cc f7 <0f> 0b eb c5 48 c7 c1 a4 13 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1061.036369][ T4434] RSP: 0000:ffffc900047e76e8 EFLAGS: 00010293 [ 1061.042632][ T4434] RAX: ffffffff89b5c420 RBX: ffff8880542d15a8 RCX: ffff888024b2d940 [ 1061.051360][ T4434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1061.059567][ T4434] RBP: 0000000000000000 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 1061.067770][ T4434] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: ffff8880542d2ab0 [ 1061.076070][ T4434] R13: 1ffff1100a85a2b5 R14: ffff8880542d2228 R15: dffffc0000000000 [ 1061.084839][ T4434] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1061.094302][ T4434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1061.100984][ T4434] CR2: 00007fa521bed700 CR3: 00000000364e0000 CR4: 00000000003506f0 [ 1061.109121][ T4434] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1061.117792][ T4434] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1061.126524][ T4434] Call Trace: [ 1061.130223][ T4434] [ 1061.133264][ T4434] ? trace_drv_return_void+0x240/0x240 [ 1061.138946][ T4434] unregister_netdevice_many+0x1376/0x1930 [ 1061.144914][ T4434] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1061.150821][ T4434] ? alloc_netdev_mqs+0xf00/0xf00 [ 1061.155979][ T4434] ? mutex_unlock+0x10/0x10 [ 1061.160745][ T4434] ? unregister_netdevice_queue+0x1aa/0x370 [ 1061.167066][ T4434] ? list_netdevice+0x6c0/0x6c0 [ 1061.172014][ T4434] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 1061.178127][ T4434] ? cfg80211_shutdown_all_interfaces+0x175/0x1c0 [ 1061.184749][ T4434] ieee80211_remove_interfaces+0x453/0x710 [ 1061.190755][ T4434] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1061.196090][ T4434] ? up_write+0x1bb/0x420 [ 1061.200512][ T4434] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1061.207015][ T4434] ieee80211_unregister_hw+0x59/0x290 [ 1061.212611][ T4434] mac80211_hwsim_del_radio+0x285/0x480 [ 1061.218596][ T4434] ? rhashtable_remove_fast+0xc50/0xc50 [ 1061.224255][ T4434] hwsim_exit_net+0x589/0x650 [ 1061.229094][ T4434] ? hwsim_init_net+0x80/0x80 [ 1061.233801][ T4434] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1061.239644][ T4434] cleanup_net+0x706/0xba0 [ 1061.244075][ T4434] ? ops_free_list+0x3b0/0x3b0 [ 1061.248877][ T4434] ? preempt_schedule_thunk+0x16/0x18 [ 1061.254256][ T4434] ? process_one_work+0x7b0/0x1160 [ 1061.259507][ T4434] process_one_work+0x8a2/0x1160 [ 1061.264567][ T4434] ? worker_detach_from_pool+0x240/0x240 [ 1061.270309][ T4434] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1061.275457][ T4434] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1061.280993][ T4434] ? kthread_data+0x4b/0xc0 [ 1061.285523][ T4434] worker_thread+0xaa2/0x1270 [ 1061.290224][ T4434] ? __kthread_parkme+0x162/0x1c0 [ 1061.295535][ T4434] kthread+0x29d/0x330 [ 1061.299698][ T4434] ? worker_clr_flags+0x1a0/0x1a0 [ 1061.304773][ T4434] ? kthread_blkcg+0xd0/0xd0 [ 1061.309362][ T4434] ret_from_fork+0x1f/0x30 [ 1061.314129][ T4434] [ 1061.317269][ T4434] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1061.324709][ T4434] CPU: 0 PID: 4434 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1061.332431][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1061.342935][ T4434] Workqueue: netns cleanup_net [ 1061.347810][ T4434] Call Trace: [ 1061.351183][ T4434] [ 1061.354713][ T4434] dump_stack_lvl+0x188/0x24e [ 1061.359596][ T4434] ? memcpy+0x3c/0x60 [ 1061.363796][ T4434] ? show_regs_print_info+0x12/0x12 [ 1061.369213][ T4434] ? load_image+0x400/0x400 [ 1061.373897][ T4434] panic+0x2e5/0x730 [ 1061.377894][ T4434] ? bpf_jit_dump+0xd0/0xd0 [ 1061.382492][ T4434] ? ret_from_fork+0x1f/0x30 [ 1061.387302][ T4434] __warn+0x2f8/0x4f0 [ 1061.391284][ T4434] ? ieee80211_link_release_channel+0x150/0x180 [ 1061.397708][ T4434] ? ieee80211_link_release_channel+0x150/0x180 [ 1061.404162][ T4434] report_bug+0x2ba/0x4f0 [ 1061.408677][ T4434] ? ieee80211_link_release_channel+0x150/0x180 [ 1061.415085][ T4434] handle_bug+0x3a/0x70 [ 1061.419324][ T4434] exc_invalid_op+0x16/0x40 [ 1061.423819][ T4434] asm_exc_invalid_op+0x16/0x20 [ 1061.428673][ T4434] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 1061.435523][ T4434] Code: 7c 2d 00 00 74 08 48 89 df e8 ac bb 1d f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 ef 80 00 e8 70 b0 cc f7 <0f> 0b eb c5 48 c7 c1 a4 13 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1061.455556][ T4434] RSP: 0000:ffffc900047e76e8 EFLAGS: 00010293 [ 1061.461746][ T4434] RAX: ffffffff89b5c420 RBX: ffff8880542d15a8 RCX: ffff888024b2d940 [ 1061.469995][ T4434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1061.478503][ T4434] RBP: 0000000000000000 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 1061.486571][ T4434] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: ffff8880542d2ab0 [ 1061.494851][ T4434] R13: 1ffff1100a85a2b5 R14: ffff8880542d2228 R15: dffffc0000000000 [ 1061.503036][ T4434] ? ieee80211_link_release_channel+0x150/0x180 [ 1061.509283][ T4434] ? ieee80211_link_release_channel+0x150/0x180 [ 1061.515616][ T4434] ? trace_drv_return_void+0x240/0x240 [ 1061.521100][ T4434] unregister_netdevice_many+0x1376/0x1930 [ 1061.527089][ T4434] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1061.532897][ T4434] ? alloc_netdev_mqs+0xf00/0xf00 [ 1061.538008][ T4434] ? mutex_unlock+0x10/0x10 [ 1061.542597][ T4434] ? unregister_netdevice_queue+0x1aa/0x370 [ 1061.548665][ T4434] ? list_netdevice+0x6c0/0x6c0 [ 1061.553608][ T4434] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 1061.559883][ T4434] ? cfg80211_shutdown_all_interfaces+0x175/0x1c0 [ 1061.566715][ T4434] ieee80211_remove_interfaces+0x453/0x710 [ 1061.572643][ T4434] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1061.578117][ T4434] ? up_write+0x1bb/0x420 [ 1061.582528][ T4434] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1061.588939][ T4434] ieee80211_unregister_hw+0x59/0x290 [ 1061.594528][ T4434] mac80211_hwsim_del_radio+0x285/0x480 [ 1061.600282][ T4434] ? rhashtable_remove_fast+0xc50/0xc50 [ 1061.605894][ T4434] hwsim_exit_net+0x589/0x650 [ 1061.610577][ T4434] ? hwsim_init_net+0x80/0x80 [ 1061.615256][ T4434] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1061.621095][ T4434] cleanup_net+0x706/0xba0 [ 1061.625530][ T4434] ? ops_free_list+0x3b0/0x3b0 [ 1061.630291][ T4434] ? preempt_schedule_thunk+0x16/0x18 [ 1061.635891][ T4434] ? process_one_work+0x7b0/0x1160 [ 1061.641167][ T4434] process_one_work+0x8a2/0x1160 [ 1061.646113][ T4434] ? worker_detach_from_pool+0x240/0x240 [ 1061.651756][ T4434] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1061.656788][ T4434] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1061.662536][ T4434] ? kthread_data+0x4b/0xc0 [ 1061.667146][ T4434] worker_thread+0xaa2/0x1270 [ 1061.672004][ T4434] ? __kthread_parkme+0x162/0x1c0 [ 1061.677032][ T4434] kthread+0x29d/0x330 [ 1061.681405][ T4434] ? worker_clr_flags+0x1a0/0x1a0 [ 1061.686529][ T4434] ? kthread_blkcg+0xd0/0xd0 [ 1061.691114][ T4434] ret_from_fork+0x1f/0x30 [ 1061.695615][ T4434] [ 1061.699305][ T4434] Kernel Offset: disabled [ 1061.703955][ T4434] Rebooting in 86400 seconds..