last executing test programs: 6m45.420646957s ago: executing program 0 (id=108): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r1, 0xffffffffffffffbf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0xe00, 0x48) 6m43.638687115s ago: executing program 0 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x44001, 0x0) 6m42.538036882s ago: executing program 0 (id=112): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1290, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x98, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12f0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r6, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="687567653d616c776179732c00c6c3ea"]) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x8000) ppoll(&(0x7f00000004c0)=[{r9, 0x1000}], 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r10, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 6m41.055431995s ago: executing program 0 (id=115): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {}, {}, {@nobarrier}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6m38.122798522s ago: executing program 0 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6m37.148652137s ago: executing program 0 (id=124): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, 0x0, 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r0, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m36.756466364s ago: executing program 32 (id=124): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, 0x0, 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r0, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m51.466579334s ago: executing program 1 (id=326): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) fstat(r1, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x700}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="43abe9248ccdb7abdc59a200074506ad", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) 4m50.257714063s ago: executing program 1 (id=328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x12, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000000fedb"], 0x28}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r7}, 0x38) 4m47.163186922s ago: executing program 1 (id=331): r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x80, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="270000407d04042cb68f274b8da363fb9cc9a40021f177ae50e2dee904a1c7b7021d3161a72e6181", 0x28, 0x4000, 0x0, 0x0) 4m47.043136774s ago: executing program 1 (id=333): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4044000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @local, 0x1}]}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x10020, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x61, 0x40000000, &(0x7f0000000480)={0xa, 0x0, 0x7, @remote}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x49, 0x0}, 0x8004) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m44.001154662s ago: executing program 1 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffcb1, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x2c, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x2c}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(0x3) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 4m43.072793877s ago: executing program 1 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 4m27.055259271s ago: executing program 33 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m14.882799589s ago: executing program 4 (id=647): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2m14.745761601s ago: executing program 4 (id=648): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m13.694223557s ago: executing program 4 (id=651): socket(0x3, 0x1, 0x80000000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xffffffff, 0x8, 0x0, 0x0, 0x1d, 0xf58, 0xb217, 0x9, 0xff, 0xe0, 0x1, 0xf3c, 0x7, 0x5, 0x3, 0x11, {0x3, 0x5}, 0x5, 0x7}}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x50d, &(0x7f0000000440)={0x0, 0xfeca, 0x1, 0x1, 0x3d4}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x16, 0x800000000002, @tid=0xffffffffffffffff}, &(0x7f0000bbdffc)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="773040a7d27e1b47e83e5f556ae242e7b51f816359d640585f8f53cd0694c4938249156b187e54c78daa73922f3222c00a617960af6f120df2554111a1b9b11f6daa1610ed5332af95fadc7f8081e20ad51674d03e6b97411d948827fd"], 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x240000d1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x7, 0x9, 0xb, "8a71cc2c2f7447ebcffb030000000000000007eb475651dc6281481000eb4d57f9c299d1e263799f84bd7b54047c9ad4767bb19f00", 0x3c}, 0x60) io_uring_enter(r3, 0xdb4, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2m12.617910485s ago: executing program 4 (id=654): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1290, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x98, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12f0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="687567653d616c776179732c00c6c3ea"]) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x8000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000080)=0x1c, 0x80800) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 2m11.227398267s ago: executing program 4 (id=657): socket$inet(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') read$FUSE(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 2m9.363420176s ago: executing program 4 (id=660): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x2, 0x0, 0x1, 0x12, 0x1}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x10000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r5, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) 1m53.762856294s ago: executing program 34 (id=660): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x2, 0x0, 0x1, 0x12, 0x1}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x10000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r5, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) 1m14.818026352s ago: executing program 2 (id=759): open(0x0, 0x141842, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) 1m14.603830846s ago: executing program 2 (id=761): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) shmctl$IPC_RMID(0x0, 0x0) 1m13.679128721s ago: executing program 2 (id=764): r0 = memfd_secret(0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000140)={[{0x2, 0x8, 0xb7, 0x6, 0x8, 0x4, 0x0, 0x9, 0x9, 0x2, 0x1, 0x16, 0x2}, {0x400, 0xf712, 0x2, 0xfe, 0x10, 0x84, 0xc, 0x0, 0xff, 0x6, 0x3, 0x81, 0x3}, {0x9, 0xfffd, 0x83, 0x7, 0xff, 0x1, 0x40, 0x0, 0x6, 0x1, 0xff, 0x11, 0x800000000ed0}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0xae9d, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(r0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)=0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x624040, 0x101) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 1m11.153016501s ago: executing program 2 (id=766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x149800, 0x0) r3 = socket(0x15, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mq_open(0x0, 0x42, 0x41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m2.294675661s ago: executing program 2 (id=784): socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x24, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) 1m2.033354115s ago: executing program 2 (id=786): clock_adjtime(0x0, 0x0) r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xe6) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401}) r5 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r5, &(0x7f0000000080)='w', 0x1, 0x4000001, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) 51.291438746s ago: executing program 7 (id=804): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 50.950463051s ago: executing program 7 (id=807): socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x24, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) 50.806432084s ago: executing program 7 (id=808): r0 = socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000"], 0x0, 0x56, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}]}, 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) 49.628700932s ago: executing program 7 (id=809): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xf, 0x81, 0x0, 0xfd, @time={0x4, 0x8003}, {0x0, 0xfc}, {0xe}, @raw8={"d0618dcd0c62e0d87b518cef"}}, {0x7, 0x7, 0xf8, 0x55, @tick=0x3, {0x7, 0x5}, {0x3, 0x7}, @result={0x6, 0xd}}], 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x4079af, 0x3180, 0x8004, 0x40024e}, 0x0, 0x0) socket(0x10, 0x803, 0x0) eventfd2(0xff, 0x80001) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) syz_mount_image$qnx6(&(0x7f0000009e00), &(0x7f0000000000)='./file0\x00', 0x20cc00, &(0x7f0000000080)={[{}, {}, {}, {}]}, 0x0, 0x9e18, &(0x7f000001da80)="$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") fanotify_mark(0xffffffffffffffff, 0x102, 0x48001050, 0xffffffffffffffff, 0x0) 49.386679616s ago: executing program 7 (id=811): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_unix(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10000, &(0x7f0000000440)={'trans=unix,', {[{@debug}, {@access_user}, {@access_uid={'access', 0x3d, 0xee01}}, {@access_user}, {@posixacl}, {@dfltgid}, {@loose}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'bridge0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1) 45.702078135s ago: executing program 35 (id=786): clock_adjtime(0x0, 0x0) r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1) 15.672351401s ago: executing program 3 (id=891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x149800, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mq_open(0x0, 0x42, 0x41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.628835537s ago: executing program 5 (id=908): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000dfac0000000000000000008500000018000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.215780484s ago: executing program 5 (id=909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 8.997293007s ago: executing program 5 (id=912): socket(0x3, 0x1, 0x80000000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xffffffff, 0x8, 0x0, 0x0, 0x1d, 0xf58, 0xb217, 0x9, 0xff, 0xe0, 0x1, 0xf3c, 0x7, 0x5, 0x3, 0x11, {0x3, 0x5}, 0x5, 0x7}}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x50d, &(0x7f0000000440)={0x0, 0xfeca, 0x1, 0x1, 0x3d4}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="773040a7d27e1b47e83e5f556ae242e7b51f816359d640585f8f53cd0694c4938249156b187e54c78daa73922f3222c00a617960af6f120df2554111a1b9b11f6daa1610ed5332af95fadc7f8081e20ad51674d03e6b97411d948827fd"], 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x240000d1) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r8, 0x5415, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x7, 0x9, 0xb, "8a71cc2c2f7447ebcffb030000000000000007eb475651dc6281481000eb4d57f9c299d1e263799f84bd7b54047c9ad4767bb19f00", 0x3c}, 0x60) io_uring_enter(r3, 0xdb4, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 7.930646374s ago: executing program 5 (id=914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x149800, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mq_open(0x0, 0x42, 0x41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.832830186s ago: executing program 8 (id=916): setpriority(0x0, 0x0, 0xacf0165) 7.394028382s ago: executing program 3 (id=917): r0 = socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000403000000000000000000000902"], 0x0, 0x56, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}]}, 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) 6.552772356s ago: executing program 6 (id=918): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 5.091776049s ago: executing program 5 (id=919): socket$inet(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') read$FUSE(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 4.949709311s ago: executing program 3 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x958, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) 4.853206563s ago: executing program 8 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4.851460743s ago: executing program 6 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875adbef0001000000002985"], 0x66) 4.728792715s ago: executing program 8 (id=923): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078252000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000af8a0085000000cb000000950000000000000044fc2463c83f"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 4.688910905s ago: executing program 3 (id=924): socket(0x3, 0x1, 0x80000000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xffffffff, 0x8, 0x0, 0x0, 0x1d, 0xf58, 0xb217, 0x9, 0xff, 0xe0, 0x1, 0xf3c, 0x7, 0x5, 0x3, 0x11, {0x3, 0x5}, 0x5, 0x7}}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x50d, &(0x7f0000000440)={0x0, 0xfeca, 0x1, 0x1, 0x3d4}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x16, 0x800000000002, @tid=0xffffffffffffffff}, &(0x7f0000bbdffc)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="773040a7d27e1b47e83e5f556ae242e7b51f816359d640585f8f53cd0694c4938249156b187e54c78daa73922f3222c00a617960af6f120df2554111a1b9b11f6daa1610ed5332af95fadc7f8081e20ad51674d03e6b97411d948827fd"], 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x240000d1) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r8, 0x5415, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x7, 0x9, 0xb, "8a71cc2c2f7447ebcffb030000000000000007eb475651dc6281481000eb4d57f9c299d1e263799f84bd7b54047c9ad4767bb19f00", 0x3c}, 0x60) io_uring_enter(r3, 0xdb4, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.862762979s ago: executing program 8 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 3.74477082s ago: executing program 5 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x149800, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mq_open(0x0, 0x42, 0x41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.611653242s ago: executing program 6 (id=927): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(0x0) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r4, r4, 0x0, 0x7f03) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x10001, 0x6, 0x10000, 0x8}}}}]}, 0x48}}, 0x804) 2.54058559s ago: executing program 8 (id=928): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) write$cgroup_int(r2, &(0x7f0000000040)=0x8000, 0x12) 2.453024841s ago: executing program 6 (id=929): r0 = socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000403000000000000000000000902"], 0x0, 0x56, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}]}, 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) 2.200751335s ago: executing program 3 (id=930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x149800, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mq_open(0x0, 0x42, 0x41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.688728343s ago: executing program 6 (id=931): syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) setpriority(0x0, 0x0, 0xacf0165) 22.953889ms ago: executing program 3 (id=932): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, 0x58ce, 0x7, 0x5, 0x0, 0x4, 0xb0c, 0x1}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x30000, 0xe, 0x4, 0x4}, 0x2, 0x1, 0x0, 0x7, 0x8153, 0x1b, 0x7, 0xf, 0x5, 0x7, {0x0, 0x100, 0x9, 0x53, 0x3, 0x3}}}}]}, 0x78}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x2) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r8, 0x21, 0x5, &(0x7f0000000040), &(0x7f0000000140)=0x4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0) 1.94255ms ago: executing program 6 (id=933): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x94, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./mnt\x00', 0x11) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x4040004) write$apparmor_exec(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147cca3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be81"], 0x564) 0s ago: executing program 8 (id=934): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x14143, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): ice hsr_slave_0 entered promiscuous mode [ 133.692794][ T4752] device hsr_slave_1 entered promiscuous mode [ 133.693453][ T4752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.693523][ T4752] Cannot create hsr debugfs directory [ 134.068962][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 134.178547][ T4788] loop4: detected capacity change from 0 to 40427 [ 134.243481][ T4752] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.264273][ T1108] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 134.289425][ T1108] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 134.440193][ T4788] F2FS-fs (loop4): invalid crc value [ 134.596270][ T4752] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.675151][ T4788] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.711342][ T4818] loop2: detected capacity change from 0 to 2048 [ 134.766778][ T4752] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.802657][ T4752] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.908961][ T1108] asix: probe of 2-1:0.0 failed with error -71 [ 134.920553][ T1108] usb 2-1: USB disconnect, device number 5 [ 135.103802][ T4788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 135.143234][ T4821] loop1: detected capacity change from 0 to 40427 [ 135.224872][ T4818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.248308][ T4821] F2FS-fs (loop1): invalid crc value [ 135.286217][ T4821] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.342429][ T4821] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.622288][ T26] audit: type=1804 audit(1744783843.089:11): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.137" name="/newroot/27/bus/bus/file1" dev="loop2" ino=1368 res=1 errno=0 [ 135.675257][ T4752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.025748][ T4165] attempt to access beyond end of device [ 136.025748][ T4165] loop4: rw=2049, want=45104, limit=40427 [ 136.070398][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.088695][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.157516][ T4752] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.222601][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.230977][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 136.315392][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.325202][ T4176] attempt to access beyond end of device [ 136.325202][ T4176] loop1: rw=2049, want=45104, limit=40427 [ 136.329727][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.343585][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.403469][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.460005][ T4848] loop3: detected capacity change from 0 to 2048 [ 136.530596][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.550388][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.579533][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.586691][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.616197][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.633801][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.701497][ T4848] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 136.796691][ T4292] device hsr_slave_0 left promiscuous mode [ 136.899070][ T4292] device hsr_slave_1 left promiscuous mode [ 136.912759][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.998732][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.052899][ T4860] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 137.232341][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.281513][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.330616][ T4292] device bridge_slave_1 left promiscuous mode [ 137.353222][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.451226][ T4292] device bridge_slave_0 left promiscuous mode [ 137.518574][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.874852][ T4292] device veth1_macvtap left promiscuous mode [ 137.942637][ T4292] device veth0_macvtap left promiscuous mode [ 137.948765][ T4292] device veth1_vlan left promiscuous mode [ 137.988334][ T4292] device veth0_vlan left promiscuous mode [ 138.096681][ T4870] loop4: detected capacity change from 0 to 4096 [ 138.156083][ T4870] ntfs3: Unknown parameter 'nocase' [ 138.826092][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 139.041270][ T4862] loop1: detected capacity change from 0 to 40427 [ 139.172310][ T4862] F2FS-fs (loop1): invalid crc value [ 139.210057][ T4862] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.324491][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 139.339144][ T4862] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.463562][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 139.515502][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.547406][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.949367][ T4292] bond0 (unregistering): Released all slaves [ 140.098328][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.114874][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.190560][ T4176] attempt to access beyond end of device [ 140.190560][ T4176] loop1: rw=2049, want=45104, limit=40427 [ 140.208062][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.225925][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.237928][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.246668][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.255157][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.394397][ T4752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.472548][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.480303][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.153'. [ 140.504544][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.523687][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.775345][ T4896] loop3: detected capacity change from 0 to 1024 [ 141.053435][ T4900] loop4: detected capacity change from 0 to 40427 [ 141.147265][ T4900] F2FS-fs (loop4): invalid crc value [ 141.220694][ T4900] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.425702][ T4900] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.771184][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.799969][ T4392] hfsplus: b-tree write err: -5, ino 4 [ 141.806021][ T4915] loop2: detected capacity change from 0 to 2048 [ 141.829682][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.104615][ T4915] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 142.347565][ T4752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.696400][ T4933] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 142.793492][ T4165] attempt to access beyond end of device [ 142.793492][ T4165] loop4: rw=2049, want=45104, limit=40427 [ 143.621501][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.671508][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.749179][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.778931][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.813014][ T4752] device veth0_vlan entered promiscuous mode [ 143.833182][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.881310][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.905933][ T4752] device veth1_vlan entered promiscuous mode [ 143.923822][ T4918] loop1: detected capacity change from 0 to 32768 [ 144.208367][ T4752] device veth0_macvtap entered promiscuous mode [ 144.244787][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 144.344992][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.379451][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.379451][ T4918] [ 144.393211][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.401054][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.401054][ T4918] [ 144.401520][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.418843][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.418843][ T4918] [ 144.482495][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.482495][ T4918] [ 144.498570][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.510893][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.510893][ T4918] [ 144.554603][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.554603][ T4918] [ 144.565212][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.585898][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.585898][ T4918] [ 144.648437][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.648437][ T4918] [ 144.650987][ T4752] device veth1_macvtap entered promiscuous mode [ 144.672392][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.672392][ T4918] [ 144.692310][ T4918] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 144.692310][ T4918] [ 144.723629][ T4959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.162'. [ 144.752698][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 144.858647][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.893774][ T4944] loop2: detected capacity change from 0 to 40427 [ 144.922293][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.962183][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.016175][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.047482][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.076703][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.096693][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.118436][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.144831][ T4752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.242477][ T4944] F2FS-fs (loop2): invalid crc value [ 145.287956][ T4944] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.325492][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.373506][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.404614][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.445779][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.486502][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.496883][ T4944] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.552637][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.608393][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.755726][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.788730][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.112156][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.376696][ T4961] loop4: detected capacity change from 0 to 32768 [ 146.473341][ T4752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.513097][ T4164] attempt to access beyond end of device [ 146.513097][ T4164] loop2: rw=2049, want=45104, limit=40427 [ 146.532525][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.541323][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.591417][ T4752] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.634607][ T4752] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.680345][ T4752] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.713578][ T4961] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 146.727660][ T4752] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.915415][ T26] audit: type=1800 audit(1744783854.429:12): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.163" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 147.115257][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.141125][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.188781][ T4165] ocfs2: Unmounting device (7,4) on (node local) [ 147.268541][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.302793][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.354143][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.156458][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.266166][ T4995] loop1: detected capacity change from 0 to 40427 [ 148.358418][ T4995] F2FS-fs (loop1): invalid crc value [ 148.414511][ T4995] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.468468][ T4995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.916889][ T5002] loop2: detected capacity change from 0 to 2048 [ 149.340358][ T5015] netlink: 76 bytes leftover after parsing attributes in process `syz.5.125'. [ 149.410541][ T5002] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 149.580825][ T4176] attempt to access beyond end of device [ 149.580825][ T4176] loop1: rw=2049, want=45104, limit=40427 [ 149.767752][ T5026] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 152.543114][ T5045] loop2: detected capacity change from 0 to 40427 [ 152.592809][ T5045] F2FS-fs (loop2): invalid crc value [ 152.614694][ T5045] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.689130][ T5045] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.943647][ T5057] loop1: detected capacity change from 0 to 512 [ 154.713818][ T5072] loop4: detected capacity change from 0 to 40427 [ 154.799721][ T5072] F2FS-fs (loop4): invalid crc value [ 154.841957][ T5072] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.924086][ T5072] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.958192][ T5057] EXT4-fs (loop1): Test dummy encryption mode enabled [ 155.002032][ T5057] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 155.042221][ T5057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.170355][ T5057] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.171: bad orphan inode 131083 [ 155.690582][ T5057] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,minixdf,,errors=continue. Quota mode: none. [ 155.753259][ T4165] attempt to access beyond end of device [ 155.753259][ T4165] loop4: rw=2049, want=45104, limit=40427 [ 157.608544][ T5116] loop2: detected capacity change from 0 to 1764 [ 158.608553][ T5133] loop4: detected capacity change from 0 to 2048 [ 158.907767][ T5134] loop5: detected capacity change from 0 to 40427 [ 159.198323][ T5134] F2FS-fs (loop5): invalid crc value [ 159.249727][ T5134] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.395520][ T5133] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 159.607143][ T5134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 159.784534][ T5153] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 160.455467][ T5159] attempt to access beyond end of device [ 160.455467][ T5159] loop5: rw=2049, want=53504, limit=40427 [ 161.531549][ T5129] loop3: detected capacity change from 0 to 32768 [ 161.920823][ T5175] syz.2.202 uses obsolete (PF_INET,SOCK_PACKET) [ 163.794021][ T5200] Invalid ELF header magic: != ELF [ 164.528751][ T5202] loop5: detected capacity change from 0 to 32768 [ 164.568241][ T5195] loop3: detected capacity change from 0 to 2048 [ 164.642755][ T5202] gfs2: fsid=îhSÃ…Ë: Trying to join cluster "lock_nolock", "îhSÃ…Ë" [ 164.651255][ T5202] gfs2: fsid=îhSÃ…Ë: Now mounting FS (format 1801)... [ 164.667014][ T5202] gfs2: fsid=îhSÃ…Ë.0: fatal: invalid metadata block [ 164.667014][ T5202] bh = 0 (magic number) [ 164.667014][ T5202] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 164.686460][ T5202] gfs2: fsid=îhSÃ…Ë.0: about to withdraw this file system [ 164.693917][ T5202] gfs2: fsid=îhSÃ…Ë.0: File system withdrawn [ 164.700023][ T5202] CPU: 1 PID: 5202 Comm: syz.5.199 Not tainted 5.15.180-syzkaller #0 [ 164.708110][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.718197][ T5202] Call Trace: [ 164.721496][ T5202] [ 164.724426][ T5202] dump_stack_lvl+0x1e3/0x2d0 [ 164.729105][ T5202] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 164.734737][ T5202] ? panic+0x860/0x860 [ 164.738809][ T5202] gfs2_withdraw+0xe9e/0x14e0 [ 164.743495][ T5202] ? gfs2_lm+0x230/0x230 [ 164.747725][ T5202] ? gfs2_meta_read+0x8fa/0xab0 [ 164.752580][ T5202] ? gfs2_meta_new+0x160/0x160 [ 164.757363][ T5202] ? validate_chain+0x112/0x5930 [ 164.762313][ T5202] gfs2_meta_check_ii+0x6e/0x80 [ 164.767171][ T5202] gfs2_meta_buffer+0x324/0x410 [ 164.772025][ T5202] ? gfs2_journal_wipe+0xcf0/0xcf0 [ 164.777135][ T5202] ? __lock_acquire+0x1295/0x1ff0 [ 164.782163][ T5202] gfs2_inode_refresh+0xdd/0x1070 [ 164.787210][ T5202] ? gfs2_inode_metasync+0xf0/0xf0 [ 164.792324][ T5202] ? __lock_acquire+0x1ff0/0x1ff0 [ 164.797345][ T5202] inode_go_lock+0x12c/0x470 [ 164.801961][ T5202] do_promote+0x74b/0xb10 [ 164.806287][ T5202] ? demote_incompat_holders+0x481/0x550 [ 164.811917][ T5202] finish_xmote+0x50d/0xb60 [ 164.816431][ T5202] do_xmote+0x775/0x10b0 [ 164.820675][ T5202] gfs2_glock_nq+0xc32/0x15e0 [ 164.825356][ T5202] gfs2_lookupi+0x3ff/0x5e0 [ 164.829864][ T5202] ? mark_lock+0x98/0x340 [ 164.834188][ T5202] ? gfs2_lookup_simple+0x170/0x170 [ 164.839384][ T5202] ? gfs2_lookupi+0x3f7/0x5e0 [ 164.844049][ T5202] ? crc32_le_base+0x79c/0xd20 [ 164.848813][ T5202] gfs2_lookup_simple+0xf2/0x170 [ 164.853764][ T5202] ? gfs2_lookup_by_inum+0xe0/0xe0 [ 164.858876][ T5202] init_journal+0x1be/0x23c0 [ 164.863463][ T5202] ? string+0x26a/0x2b0 [ 164.867614][ T5202] ? vsnprintf+0x1dd/0x1c70 [ 164.872134][ T5202] ? vsnprintf+0x1b93/0x1c70 [ 164.876728][ T5202] ? end_bio_io_page+0xf0/0xf0 [ 164.881513][ T5202] ? ptr_to_hashval+0x60/0x60 [ 164.886186][ T5202] ? init_sb+0xc50/0x1340 [ 164.890516][ T5202] ? snprintf+0xd6/0x120 [ 164.894755][ T5202] ? vscnprintf+0x80/0x80 [ 164.899090][ T5202] init_inodes+0xdc/0x310 [ 164.903421][ T5202] gfs2_fill_super+0x1c2c/0x2750 [ 164.908410][ T5202] ? gfs2_reconfigure+0xcf0/0xcf0 [ 164.913468][ T5202] ? ptr_to_hashval+0x60/0x60 [ 164.918155][ T5202] ? gfs2_glock_nq_num+0x123/0x270 [ 164.923274][ T5202] ? set_blocksize+0x1ec/0x370 [ 164.928071][ T5202] get_tree_bdev+0x3fe/0x620 [ 164.932681][ T5202] ? gfs2_reconfigure+0xcf0/0xcf0 [ 164.937708][ T5202] gfs2_get_tree+0x50/0x210 [ 164.942287][ T5202] ? bpf_lsm_capable+0x5/0x10 [ 164.947001][ T5202] vfs_get_tree+0x88/0x270 [ 164.951422][ T5202] do_new_mount+0x2ba/0xb40 [ 164.955929][ T5202] ? do_move_mount_old+0x160/0x160 [ 164.961041][ T5202] ? user_path_at_empty+0x12b/0x180 [ 164.966259][ T5202] __se_sys_mount+0x2d5/0x3c0 [ 164.971107][ T5202] ? __x64_sys_mount+0xc0/0xc0 [ 164.975862][ T5202] ? syscall_enter_from_user_mode+0x2e/0x240 [ 164.981834][ T5202] ? lockdep_hardirqs_on+0x94/0x130 [ 164.987036][ T5202] ? __x64_sys_mount+0x1c/0xc0 [ 164.991825][ T5202] do_syscall_64+0x3b/0xb0 [ 164.996248][ T5202] ? clear_bhb_loop+0x15/0x70 [ 165.000927][ T5202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.006821][ T5202] RIP: 0033:0x7fae52b5990a [ 165.011232][ T5202] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.030831][ T5202] RSP: 002b:00007fae5097de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.039248][ T5202] RAX: ffffffffffffffda RBX: 00007fae5097def0 RCX: 00007fae52b5990a [ 165.047222][ T5202] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fae5097deb0 [ 165.055198][ T5202] RBP: 000020000001f680 R08: 00007fae5097def0 R09: 0000000000000084 [ 165.063195][ T5202] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 165.071171][ T5202] R13: 00007fae5097deb0 R14: 000000000001f73d R15: 0000200000000240 [ 165.079156][ T5202] [ 165.133263][ T5202] gfs2: fsid=îhSÃ…Ë.0: can't lookup journal index: 0 [ 165.283660][ T5195] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.522114][ C1] sched: RT throttling activated [ 166.784780][ T5211] loop1: detected capacity change from 0 to 131072 [ 166.839948][ T5213] loop2: detected capacity change from 0 to 2048 [ 166.840720][ T5211] F2FS-fs (loop1): Test dummy encryption mode enabled [ 166.855780][ T5211] F2FS-fs (loop1): invalid crc value [ 166.873482][ T5195] NILFS (loop3): error -4 creating segctord thread [ 166.885615][ T5211] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.927557][ T5211] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 166.937114][ T5211] F2FS-fs (loop1): Failed to read root inode [ 167.027882][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 168.049149][ T5234] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 168.676034][ T5236] netlink: 'syz.1.213': attribute type 10 has an invalid length. [ 168.712272][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.916659][ T5236] team0: Device hsr_slave_0 failed to register rx_handler [ 168.956765][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 169.182328][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.794178][ T5242] loop1: detected capacity change from 0 to 256 [ 170.135510][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 170.145504][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 170.157219][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 170.172881][ T23] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 170.182290][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.366001][ T23] hub 4-1:1.0: bad descriptor, ignoring hub [ 170.391018][ T23] hub: probe of 4-1:1.0 failed with error -5 [ 171.118249][ T5260] mmap: syz.5.217 (5260) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 171.251721][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 171.257227][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 171.290059][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 171.290149][ T5242] MINIX-fs: deleted inode referenced: 1 [ 171.300052][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 171.312565][ T5242] MINIX-fs: get root inode failed [ 171.508179][ T23] usb 4-1: USB disconnect, device number 3 [ 172.388705][ T5263] loop5: detected capacity change from 0 to 1024 [ 174.075717][ T5236] syz.1.213 (5236) used greatest stack depth: 19480 bytes left [ 174.128205][ T5263] EXT4-fs: error -4 creating inode table initialization thread [ 174.292583][ T5263] EXT4-fs (loop5): mount failed [ 175.735372][ T5296] loop1: detected capacity change from 0 to 2048 [ 177.247336][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 178.949643][ T5325] device veth1_macvtap entered promiscuous mode [ 178.957032][ T5325] device macsec0 left promiscuous mode [ 178.965646][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.977126][ T4170] Bluetooth: hci0: unknown advertising packet type: 0x63 [ 178.978307][ T4170] Bluetooth: hci0: Dropping invalid advertising data [ 178.992709][ T4170] Bluetooth: hci0: Malicious advertising data. [ 179.918703][ T5331] loop3: detected capacity change from 0 to 1764 [ 181.628686][ T5345] loop1: detected capacity change from 0 to 2048 [ 181.811816][ T5349] loop5: detected capacity change from 0 to 512 [ 182.048416][ T5350] loop4: detected capacity change from 0 to 40427 [ 182.079329][ T5345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.119601][ T5350] F2FS-fs (loop4): invalid crc value [ 182.197918][ T5350] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.246293][ T5349] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.311668][ T5350] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.322697][ T5349] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.459234][ T5356] loop3: detected capacity change from 0 to 4096 [ 182.962981][ T26] audit: type=1804 audit(1744783890.469:13): pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.236" name="/newroot/48/bus/bus/file1" dev="loop1" ino=1368 res=1 errno=0 [ 183.043273][ T5356] ntfs3: Unknown parameter 'hide_dot_files' [ 183.994402][ T4165] attempt to access beyond end of device [ 183.994402][ T4165] loop4: rw=2049, want=45104, limit=40427 [ 186.716570][ T4215] Bluetooth: hci3: command 0x0406 tx timeout [ 186.726308][ T4215] Bluetooth: hci0: command 0x0406 tx timeout [ 186.734759][ T4215] Bluetooth: hci1: command 0x0406 tx timeout [ 186.744959][ T4215] Bluetooth: hci4: command 0x0406 tx timeout [ 188.199215][ T5420] loop1: detected capacity change from 0 to 2048 [ 188.387905][ T5420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.459041][ T26] audit: type=1804 audit(1744783896.969:14): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.249" name="/newroot/52/bus/bus/file1" dev="loop1" ino=1368 res=1 errno=0 [ 189.501010][ T5428] loop5: detected capacity change from 0 to 40427 [ 189.557238][ T5428] F2FS-fs (loop5): invalid crc value [ 189.643453][ T5430] loop4: detected capacity change from 0 to 2048 [ 189.656102][ T5428] F2FS-fs (loop5): Found nat_bits in checkpoint [ 189.709588][ T5428] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 189.872282][ T5430] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 189.929796][ T5434] loop3: detected capacity change from 0 to 4096 [ 191.077956][ T4752] attempt to access beyond end of device [ 191.077956][ T4752] loop5: rw=2049, want=45104, limit=40427 [ 191.083503][ T5434] ntfs3: Unknown parameter 'hide_dot_files' [ 193.340600][ T5471] loop3: detected capacity change from 0 to 1024 [ 194.163548][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169910][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.424204][ T5483] loop2: detected capacity change from 0 to 512 [ 195.524972][ T5471] hfsplus: unable to parse mount options [ 197.678344][ T5483] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.685360][ T5483] EXT4-fs (loop2): bad block size 16384 [ 197.715484][ T5476] device veth1_macvtap left promiscuous mode [ 197.804294][ T5476] device macsec0 entered promiscuous mode [ 199.493886][ T5495] loop3: detected capacity change from 0 to 2048 [ 199.633710][ T5495] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.717230][ T5496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.949492][ T5512] overlayfs: failed to resolve './file1': -2 [ 199.951009][ T26] audit: type=1804 audit(1744783907.459:15): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.263" name="/newroot/59/bus/bus/file1" dev="loop3" ino=1368 res=1 errno=0 [ 200.300837][ T5506] loop5: detected capacity change from 0 to 4096 [ 200.499546][ T5506] ntfs3: Unknown parameter 'hide_dot_files' [ 201.100305][ T5500] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 201.170872][ T5500] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 201.311628][ T5500] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 201.634343][ T5496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.122436][ T5496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.315314][ T5496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.516602][ T5496] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.529638][ T5528] loop3: detected capacity change from 0 to 32768 [ 202.568436][ T5496] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.585131][ T5496] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.601379][ T5496] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.908795][ T5528] XFS (loop3): Mounting V5 Filesystem [ 203.390676][ T5558] loop5: detected capacity change from 0 to 128 [ 204.539188][ T5558] EXT4-fs (loop5): Test dummy encryption mode enabled [ 204.662199][ T5558] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 204.682483][ T5558] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.732415][ T5528] XFS (loop3): Ending clean mount [ 205.962873][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.273'. [ 206.316951][ T5528] XFS (loop3): Quotacheck needed: Please wait. [ 206.657705][ T5528] XFS (loop3): Quotacheck: Done. [ 208.497466][ T4173] XFS (loop3): Unmounting Filesystem [ 208.911493][ T5606] loop1: detected capacity change from 0 to 4096 [ 208.973236][ T5606] ntfs3: Unknown parameter 'hide_dot_files' [ 209.102350][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.802247][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 209.932925][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.958639][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.991750][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 210.022119][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 210.560163][ T23] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 210.569334][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.052531][ T23] hub 6-1:1.0: bad descriptor, ignoring hub [ 211.058497][ T23] hub: probe of 6-1:1.0 failed with error -5 [ 211.352702][ T23] cdc_wdm 6-1:1.0: skipping garbage [ 211.361165][ T23] cdc_wdm 6-1:1.0: skipping garbage [ 211.536440][ T23] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 211.983496][ T23] cdc_wdm 6-1:1.0: Unknown control protocol [ 212.103080][ T23] usb 6-1: USB disconnect, device number 2 [ 216.003244][ T5676] loop3: detected capacity change from 0 to 4096 [ 216.123166][ T5676] ntfs3: Unknown parameter 'hide_dot_files' [ 217.762244][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 218.152545][ T5685] loop1: detected capacity change from 0 to 2048 [ 219.432669][ T5685] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.662601][ T5691] device veth1_macvtap left promiscuous mode [ 219.672489][ T5691] device macsec0 entered promiscuous mode [ 222.918767][ T26] audit: type=1804 audit(1744783927.769:16): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.301" name="/newroot/66/bus/bus/file1" dev="loop1" ino=1368 res=1 errno=0 [ 224.110903][ T5700] loop5: detected capacity change from 0 to 4096 [ 227.275145][ T5719] device veth1_macvtap left promiscuous mode [ 227.362739][ T5719] device macsec0 entered promiscuous mode [ 228.156853][ T5721] device veth1_macvtap entered promiscuous mode [ 228.496676][ T5721] device macsec0 left promiscuous mode [ 228.701639][ T5742] device veth1_macvtap left promiscuous mode [ 228.707826][ T5742] device macsec0 entered promiscuous mode [ 232.642547][ T5756] loop3: detected capacity change from 0 to 4096 [ 232.789603][ T5766] loop5: detected capacity change from 0 to 2048 [ 232.802821][ T5773] netlink: 76 bytes leftover after parsing attributes in process `syz.2.324'. [ 232.961217][ T5775] device veth1_macvtap entered promiscuous mode [ 232.997354][ T5756] ntfs3: Unknown parameter 'hide_dot_files' [ 233.202337][ T5766] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.389240][ T146] Bluetooth: hci3: unknown advertising packet type: 0x63 [ 233.389863][ T146] Bluetooth: hci3: Dropping invalid advertising data [ 233.406174][ T146] Bluetooth: hci3: Malicious advertising data. [ 233.413660][ T5775] device macsec0 left promiscuous mode [ 233.422833][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.468653][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 234.144310][ T26] audit: type=1804 audit(1744783941.649:17): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.321" name="/newroot/26/bus/bus/file1" dev="loop5" ino=1368 res=1 errno=0 [ 236.514833][ T5794] loop3: detected capacity change from 0 to 256 [ 237.186042][ T5794] FAT-fs (loop3): Directory bread(block 64) failed [ 237.232235][ T5794] FAT-fs (loop3): Directory bread(block 65) failed [ 237.242297][ T5794] FAT-fs (loop3): Directory bread(block 66) failed [ 237.248867][ T5794] FAT-fs (loop3): Directory bread(block 67) failed [ 237.312269][ T5794] FAT-fs (loop3): Directory bread(block 68) failed [ 237.332232][ T5794] FAT-fs (loop3): Directory bread(block 69) failed [ 237.352499][ T5794] FAT-fs (loop3): Directory bread(block 70) failed [ 237.379554][ T5794] FAT-fs (loop3): Directory bread(block 71) failed [ 237.392275][ T5794] FAT-fs (loop3): Directory bread(block 72) failed [ 237.419303][ T5794] FAT-fs (loop3): Directory bread(block 73) failed [ 240.044864][ T5799] loop4: detected capacity change from 0 to 32768 [ 240.898347][ T5818] loop3: detected capacity change from 0 to 2048 [ 241.117504][ T5818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.148679][ T5823] loop2: detected capacity change from 0 to 4096 [ 241.238589][ T5829] device veth1_macvtap entered promiscuous mode [ 241.246863][ T5829] device macsec0 left promiscuous mode [ 241.256138][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.268197][ T146] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 241.268232][ T146] Bluetooth: hci1: Dropping invalid advertising data [ 241.285497][ T146] Bluetooth: hci1: Malicious advertising data. [ 241.303601][ T5823] ntfs3: Unknown parameter 'hide_dot_files' [ 241.375438][ T5830] loop1: detected capacity change from 0 to 512 [ 241.470187][ T5830] EXT4-fs (loop1): orphan cleanup on readonly fs [ 241.493059][ T5830] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 241.503709][ T5830] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 241.513362][ T5830] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.341: Failed to acquire dquot type 1 [ 241.551425][ T5830] EXT4-fs (loop1): 1 truncate cleaned up [ 241.569301][ T5830] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 242.560313][ T26] audit: type=1804 audit(1744783950.069:18): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.339" name="/newroot/70/bus/bus/file1" dev="loop3" ino=1368 res=1 errno=0 [ 243.443388][ T5848] netlink: 76 bytes leftover after parsing attributes in process `syz.4.345'. [ 244.483770][ T5852] loop5: detected capacity change from 0 to 40427 [ 244.544774][ T5852] F2FS-fs (loop5): invalid crc value [ 244.570334][ T5852] F2FS-fs (loop5): Found nat_bits in checkpoint [ 244.652579][ T5852] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 244.937486][ T5841] loop3: detected capacity change from 0 to 40427 [ 246.428007][ T4752] attempt to access beyond end of device [ 246.428007][ T4752] loop5: rw=2049, want=45104, limit=40427 [ 246.551513][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 247.386850][ T5871] loop3: detected capacity change from 0 to 512 [ 247.618557][ T5871] EXT4-fs (loop3): Test dummy encryption mode enabled [ 247.677693][ T5878] device veth1_macvtap left promiscuous mode [ 247.684776][ T5871] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 247.700608][ T5878] device macsec0 entered promiscuous mode [ 247.734574][ T5871] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.353: bad orphan inode 131083 [ 247.826129][ T5871] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,minixdf,,errors=continue. Quota mode: none. [ 247.854663][ T5880] device veth1_macvtap entered promiscuous mode [ 247.939915][ T5880] device macsec0 left promiscuous mode [ 248.392730][ T5871] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 251.148163][ T5920] netlink: 76 bytes leftover after parsing attributes in process `syz.5.360'. [ 252.395871][ T5925] loop2: detected capacity change from 0 to 40427 [ 252.478340][ T5925] F2FS-fs (loop2): invalid crc value [ 252.559826][ T5925] F2FS-fs (loop2): Found nat_bits in checkpoint [ 252.624924][ T5925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 253.305421][ T5933] loop3: detected capacity change from 0 to 2048 [ 253.337797][ T4934] udevd[4934]: incorrect nilfs2 checksum on /dev/loop3 [ 253.402690][ T5933] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.529653][ T5936] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.549912][ T4164] attempt to access beyond end of device [ 253.549912][ T4164] loop2: rw=2049, want=45104, limit=40427 [ 253.680218][ T5939] loop4: detected capacity change from 0 to 2048 [ 253.695609][ T5941] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 253.830904][ T5941] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 253.961778][ T5939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.054526][ T5933] syz.3.364 (5933) used greatest stack depth: 18864 bytes left [ 254.245491][ T5941] Remounting filesystem read-only [ 254.251012][ T5941] NILFS (loop3): error -5 truncating bmap (ino=15) [ 254.437252][ T4173] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 255.555089][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.561436][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.933955][ T26] audit: type=1804 audit(1744783963.439:19): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.367" name="/newroot/79/bus/bus/file1" dev="loop4" ino=1368 res=1 errno=0 [ 256.550364][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 258.359191][ T5966] loop5: detected capacity change from 0 to 1024 [ 258.545260][ T5966] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.072702][ T5976] loop4: detected capacity change from 0 to 40427 [ 259.080709][ T5979] usb usb6: usbfs: process 5979 (syz.5.373) did not claim interface 0 before use [ 259.204965][ T5976] F2FS-fs (loop4): invalid crc value [ 259.714405][ T5976] F2FS-fs (loop4): Found nat_bits in checkpoint [ 259.766415][ T5985] netlink: 76 bytes leftover after parsing attributes in process `syz.2.376'. [ 259.777074][ T5976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 260.562888][ T5897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.617726][ T5977] attempt to access beyond end of device [ 260.617726][ T5977] loop4: rw=2049, want=53504, limit=40427 [ 260.662945][ T1324] Bluetooth: hci5: command 0x0409 tx timeout [ 260.714433][ T5897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.145791][ T5897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.195136][ T5994] loop5: detected capacity change from 0 to 256 [ 261.258054][ T5897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.316929][ T5994] FAT-fs (loop5): Directory bread(block 64) failed [ 261.336156][ T5994] FAT-fs (loop5): Directory bread(block 65) failed [ 261.351274][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 261.362340][ T5994] FAT-fs (loop5): Directory bread(block 66) failed [ 261.368922][ T5994] FAT-fs (loop5): Directory bread(block 67) failed [ 261.419445][ T5994] FAT-fs (loop5): Directory bread(block 68) failed [ 261.462245][ T5994] FAT-fs (loop5): Directory bread(block 69) failed [ 261.468976][ T5994] FAT-fs (loop5): Directory bread(block 70) failed [ 261.514631][ T5994] FAT-fs (loop5): Directory bread(block 71) failed [ 261.521288][ T5994] FAT-fs (loop5): Directory bread(block 72) failed [ 261.590021][ T5994] FAT-fs (loop5): Directory bread(block 73) failed [ 261.730001][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.749844][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.794047][ T5973] device bridge_slave_0 entered promiscuous mode [ 261.844594][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.862141][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.869381][ T6001] loop2: detected capacity change from 0 to 2048 [ 261.870476][ T5973] device bridge_slave_1 entered promiscuous mode [ 262.206631][ T6001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.352254][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.690463][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.786315][ T4256] Bluetooth: hci5: command 0x041b tx timeout [ 263.484587][ T26] audit: type=1804 audit(1744783970.999:20): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.380" name="/newroot/75/bus/bus/file1" dev="loop2" ino=1368 res=1 errno=0 [ 264.133935][ T5973] team0: Port device team_slave_0 added [ 264.358814][ T5973] team0: Port device team_slave_1 added [ 265.092183][ T1324] Bluetooth: hci5: command 0x040f tx timeout [ 265.151965][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.191631][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.329886][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.260280][ T4216] Bluetooth: hci5: command 0x0419 tx timeout [ 267.609862][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.645920][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.767999][ T6038] loop2: detected capacity change from 0 to 512 [ 267.894991][ T6036] loop5: detected capacity change from 0 to 40427 [ 267.979293][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.998643][ T6036] F2FS-fs (loop5): invalid crc value [ 268.062944][ T6036] F2FS-fs (loop5): Found nat_bits in checkpoint [ 268.102554][ T6038] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c119, mo2=0002] [ 268.111229][ T6038] System zones: 0-2, 18-18, 34-35 [ 268.122230][ T6036] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 268.396496][ T6038] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,,errors=continue. Quota mode: writeback. [ 269.132364][ T6038] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.175725][ T6038] EXT4-fs warning (device loop2): ext4_group_extend:1823: can't shrink FS - resize aborted [ 269.287982][ T6056] loop3: detected capacity change from 0 to 2048 [ 269.453855][ T5973] device hsr_slave_0 entered promiscuous mode [ 269.465828][ T6056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.613469][ T5973] device hsr_slave_1 entered promiscuous mode [ 269.620375][ T4752] attempt to access beyond end of device [ 269.620375][ T4752] loop5: rw=2049, want=45104, limit=40427 [ 270.028211][ T26] audit: type=1804 audit(1744783977.539:21): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.391" name="/newroot/82/bus/bus/file1" dev="loop3" ino=1368 res=1 errno=0 [ 271.109929][ T6066] loop3: detected capacity change from 0 to 1024 [ 271.875676][ T4230] hfsplus: b-tree write err: -5, ino 4 [ 275.445437][ T5973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.511684][ T5973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.521518][ T5973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.531303][ T5973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.675665][ T5897] device hsr_slave_0 left promiscuous mode [ 275.726982][ T6104] loop5: detected capacity change from 0 to 2048 [ 275.734041][ T5897] device hsr_slave_1 left promiscuous mode [ 275.743150][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.785285][ T6102] loop4: detected capacity change from 0 to 40427 [ 275.786182][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.829893][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.863124][ T6104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.882164][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.905016][ T5897] device bridge_slave_1 left promiscuous mode [ 275.912439][ T6102] F2FS-fs (loop4): invalid crc value [ 275.933288][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.972677][ T5897] device bridge_slave_0 left promiscuous mode [ 275.981838][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.993579][ T6102] F2FS-fs (loop4): Found nat_bits in checkpoint [ 276.134100][ T5897] device veth1_macvtap left promiscuous mode [ 276.140211][ T5897] device veth0_macvtap left promiscuous mode [ 276.210970][ T5897] device veth1_vlan left promiscuous mode [ 276.276026][ T6102] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.313835][ T5897] device veth0_vlan left promiscuous mode [ 276.613618][ T26] audit: type=1804 audit(1744783984.119:22): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.403" name="/newroot/42/bus/bus/file1" dev="loop5" ino=1368 res=1 errno=0 [ 277.359784][ T4165] attempt to access beyond end of device [ 277.359784][ T4165] loop4: rw=2049, want=45104, limit=40427 [ 278.696759][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 278.755823][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 278.797439][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.838635][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.975053][ T5897] bond0 (unregistering): Released all slaves [ 281.733642][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.782469][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.827497][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.852368][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.880236][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.890182][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.912744][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.919878][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.969246][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.990759][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.010354][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.083285][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.090559][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.150823][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.201429][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.242993][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.293491][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.323798][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.513788][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.543519][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.571286][ T5973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.582732][ T5973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.614333][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.627444][ T6150] loop2: detected capacity change from 0 to 512 [ 282.633829][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.634741][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.663434][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.687923][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.786909][ T4498] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 282.902295][ T6150] EXT4-fs (loop2): 1 orphan inode deleted [ 282.908093][ T6150] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_nolock,,errors=continue. Quota mode: writeback. [ 282.960390][ T6150] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.977655][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.025608][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.074852][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.152490][ T4498] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 283.187867][ T4498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.233558][ T4498] usb 6-1: config 0 descriptor?? [ 283.385133][ T6160] loop4: detected capacity change from 0 to 40427 [ 283.478737][ T6160] F2FS-fs (loop4): invalid crc value [ 283.535183][ T6160] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.692572][ T6160] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 285.355714][ T4498] kaweth 6-1:0.0: Firmware present in device. [ 287.502234][ T4498] kaweth 6-1:0.0: Error reading configuration (-71), no net device created [ 287.516992][ T4498] kaweth: probe of 6-1:0.0 failed with error -5 [ 287.633214][ T4498] usb 6-1: USB disconnect, device number 3 [ 288.250115][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.279715][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.424510][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.469217][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.506100][ T5973] device veth0_vlan entered promiscuous mode [ 288.548634][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.579375][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.618014][ T4165] attempt to access beyond end of device [ 288.618014][ T4165] loop4: rw=2049, want=45104, limit=40427 [ 288.695187][ T5973] device veth1_vlan entered promiscuous mode [ 289.173687][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.190222][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.249851][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.303909][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.364387][ T5973] device veth0_macvtap entered promiscuous mode [ 289.421945][ T5973] device veth1_macvtap entered promiscuous mode [ 289.948391][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.102373][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.132148][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.402348][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.472139][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.512284][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.592118][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.636860][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.682836][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.692989][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.722605][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.771099][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.346744][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.782644][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.835635][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.860270][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.878588][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.915216][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.945044][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.005406][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.053823][ T5973] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.218191][ T5973] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.227272][ T5973] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.247175][ T5973] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.704908][ T6216] loop3: detected capacity change from 0 to 40427 [ 293.779216][ T6216] F2FS-fs (loop3): invalid crc value [ 293.820648][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.833570][ T6216] F2FS-fs (loop3): Found nat_bits in checkpoint [ 293.906413][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.960909][ T6216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.622187][ T6065] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 294.699104][ T4173] attempt to access beyond end of device [ 294.699104][ T4173] loop3: rw=2049, want=45104, limit=40427 [ 294.729157][ T5890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.774194][ T5890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.799135][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.802899][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.830562][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.922153][ T6065] usb 5-1: Using ep0 maxpacket: 32 [ 294.937761][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.147046][ T6065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.162154][ T6065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.171974][ T6065] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 295.181578][ T6065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.206657][ T6065] usb 5-1: config 0 descriptor?? [ 296.746816][ T6237] loop4: detected capacity change from 0 to 512 [ 296.861501][ T6065] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 296.879016][ T6237] EXT4-fs (loop4): Ignoring removed bh option [ 297.022342][ T6237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 297.808040][ T6237] EXT4-fs: error -4 creating inode table initialization thread [ 297.832463][ T6237] EXT4-fs (loop4): mount failed [ 298.052719][ T4213] usb 5-1: USB disconnect, device number 2 [ 298.262771][ T6249] loop3: detected capacity change from 0 to 256 [ 298.395178][ T6249] FAT-fs (loop3): Directory bread(block 64) failed [ 298.416231][ T6249] FAT-fs (loop3): Directory bread(block 65) failed [ 298.445309][ T6249] FAT-fs (loop3): Directory bread(block 66) failed [ 298.498004][ T6249] FAT-fs (loop3): Directory bread(block 67) failed [ 298.526564][ T6249] FAT-fs (loop3): Directory bread(block 68) failed [ 298.563348][ T6249] FAT-fs (loop3): Directory bread(block 69) failed [ 298.590492][ T6249] FAT-fs (loop3): Directory bread(block 70) failed [ 298.622549][ T6249] FAT-fs (loop3): Directory bread(block 71) failed [ 298.639592][ T6249] FAT-fs (loop3): Directory bread(block 72) failed [ 298.655481][ T6249] FAT-fs (loop3): Directory bread(block 73) failed [ 299.856558][ T6263] loop2: detected capacity change from 0 to 40427 [ 299.916984][ T6263] F2FS-fs (loop2): invalid crc value [ 300.301378][ T6263] F2FS-fs (loop2): Found nat_bits in checkpoint [ 300.591742][ T6263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 303.007300][ T4164] attempt to access beyond end of device [ 303.007300][ T4164] loop2: rw=2049, want=45104, limit=40427 [ 309.965472][ T6323] loop4: detected capacity change from 0 to 40427 [ 310.162410][ T6327] loop3: detected capacity change from 0 to 128 [ 310.985828][ T6327] qnx6: superblock #1 checksum error [ 311.441646][ T6323] F2FS-fs (loop4): invalid crc value [ 311.602171][ T5675] block nbd2: Attempted send on invalid socket [ 311.621589][ T5675] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.758768][ T6333] vxfs: unable to read disk superblock at 1 [ 312.106793][ T5675] block nbd2: Attempted send on invalid socket [ 312.116804][ T5675] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.127941][ T6333] vxfs: unable to read disk superblock at 8 [ 312.144304][ T6333] vxfs: can't find superblock. [ 312.173218][ T6323] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 312.879301][ T6343] loop4: detected capacity change from 0 to 2048 [ 312.986945][ T6343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.564874][ T26] audit: type=1804 audit(1744784021.069:23): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.459" name="/newroot/98/bus/bus/file1" dev="loop4" ino=1368 res=1 errno=0 [ 316.761631][ T6370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.465'. [ 316.771379][ T6370] unsupported nlmsg_type 40 [ 318.349980][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.360681][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.406730][ T6371] loop4: detected capacity change from 0 to 40427 [ 318.445944][ T6371] F2FS-fs (loop4): invalid crc value [ 318.490204][ T6375] loop2: detected capacity change from 0 to 128 [ 318.523334][ T6371] F2FS-fs (loop4): Found nat_bits in checkpoint [ 318.538477][ T6372] loop6: detected capacity change from 0 to 4096 [ 318.602938][ T6372] ntfs3: Unknown parameter 'nocase' [ 318.619297][ T6371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 318.655006][ T6375] qnx6: superblock #1 checksum error [ 318.670323][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 319.752393][ T4165] attempt to access beyond end of device [ 319.752393][ T4165] loop4: rw=2049, want=45104, limit=40427 [ 319.862697][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 324.209024][ T6423] loop3: detected capacity change from 0 to 4096 [ 324.336132][ T6426] loop6: detected capacity change from 0 to 128 [ 324.473233][ T6423] ntfs3: Unknown parameter 'nocase' [ 324.577108][ T6427] loop2: detected capacity change from 0 to 40427 [ 324.597800][ T6426] qnx6: superblock #1 checksum error [ 325.097850][ T6427] F2FS-fs (loop2): invalid crc value [ 325.228854][ T6427] F2FS-fs (loop2): Found nat_bits in checkpoint [ 325.364413][ T6427] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 325.995543][ T4164] attempt to access beyond end of device [ 325.995543][ T4164] loop2: rw=2049, want=45104, limit=40427 [ 330.549236][ T6476] delete_channel: no stack [ 331.217606][ T6481] loop2: detected capacity change from 0 to 4096 [ 331.272894][ T6481] ntfs3: Unknown parameter 'nocase' [ 331.454246][ T6485] loop5: detected capacity change from 0 to 128 [ 332.072475][ T6485] qnx6: superblock #1 checksum error [ 332.521449][ T6488] loop2: detected capacity change from 0 to 40427 [ 332.643568][ T6488] F2FS-fs (loop2): invalid crc value [ 332.682449][ T6488] F2FS-fs (loop2): Found nat_bits in checkpoint [ 332.722136][ T6488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 334.462762][ T4216] Bluetooth: hci2: command 0x0406 tx timeout [ 335.546715][ T6516] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 335.554513][ T6516] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 335.562277][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.506'. [ 335.594719][ T6516] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 335.602627][ T6516] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 335.610336][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.506'. [ 337.510241][ T6527] capability: warning: `syz.6.510' uses deprecated v2 capabilities in a way that may be insecure [ 337.819226][ T6525] loop6: detected capacity change from 0 to 1764 [ 338.018978][ T6519] loop5: detected capacity change from 0 to 32768 [ 338.098873][ T6519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.507 (6519) [ 338.419470][ T6533] netlink: 'syz.6.512': attribute type 10 has an invalid length. [ 338.665893][ T6533] team0: Device hsr_slave_0 failed to register rx_handler [ 338.899802][ T4164] attempt to access beyond end of device [ 338.899802][ T4164] loop2: rw=2049, want=45104, limit=40427 [ 338.899813][ T6519] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 338.922616][ T6519] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 338.938193][ T6519] BTRFS info (device loop5): use zstd compression, level 3 [ 338.945936][ T6519] BTRFS info (device loop5): using free space tree [ 339.049254][ T6519] BTRFS info (device loop5): has skinny extents [ 340.294599][ T6519] BTRFS error (device loop5): open_ctree failed: -12 [ 340.447055][ T6583] loop3: detected capacity change from 0 to 256 [ 340.685543][ T6583] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 341.864009][ T6599] loop5: detected capacity change from 0 to 1024 [ 342.083210][ T5890] hfsplus: b-tree write err: -5, ino 4 [ 342.267185][ T6610] netlink: 'syz.5.529': attribute type 10 has an invalid length. [ 342.345050][ T6610] team0: Device hsr_slave_0 failed to register rx_handler [ 344.552280][ T6558] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 346.204198][ T6645] loop4: detected capacity change from 0 to 256 [ 346.281559][ T6646] loop3: detected capacity change from 0 to 1024 [ 346.411124][ T6645] FAT-fs (loop4): Directory bread(block 64) failed [ 346.443135][ T6645] FAT-fs (loop4): Directory bread(block 65) failed [ 346.469705][ T6631] hfsplus: b-tree write err: -5, ino 4 [ 346.470197][ T6645] FAT-fs (loop4): Directory bread(block 66) failed [ 346.516032][ T6645] FAT-fs (loop4): Directory bread(block 67) failed [ 346.554893][ T6645] FAT-fs (loop4): Directory bread(block 68) failed [ 346.561469][ T6645] FAT-fs (loop4): Directory bread(block 69) failed [ 346.643469][ T6645] FAT-fs (loop4): Directory bread(block 70) failed [ 346.684622][ T6645] FAT-fs (loop4): Directory bread(block 71) failed [ 346.792768][ T6645] FAT-fs (loop4): Directory bread(block 72) failed [ 346.885470][ T6645] FAT-fs (loop4): Directory bread(block 73) failed [ 349.649103][ T6630] loop5: detected capacity change from 0 to 40427 [ 349.806052][ T6667] netlink: 60 bytes leftover after parsing attributes in process `syz.6.547'. [ 350.617112][ T26] audit: type=1400 audit(1744784058.089:24): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE81 pid=6669 comm="syz.2.550" [ 352.444663][ T6687] loop6: detected capacity change from 0 to 1024 [ 352.472288][ T6574] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 352.713056][ T6574] usb 4-1: Using ep0 maxpacket: 8 [ 352.774450][ T6682] infiniband syz1: set active [ 352.779595][ T6682] infiniband syz1: added bond_slave_0 [ 352.950385][ T6682] RDS/IB: syz1: added [ 352.971128][ T6682] smc: adding ib device syz1 with port count 1 [ 353.052597][ T6682] smc: ib device syz1 port 1 has pnetid [ 353.156494][ T6574] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 353.166411][ T6574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.174509][ T6574] usb 4-1: Product: syz [ 353.178780][ T6574] usb 4-1: Manufacturer: syz [ 353.183995][ T6574] usb 4-1: SerialNumber: syz [ 353.202209][ T6574] usb 4-1: config 0 descriptor?? [ 354.147496][ T6574] usbtest 4-1:0.0: FX2 device [ 354.152343][ T6574] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 354.162883][ T6574] usb 4-1: USB disconnect, device number 5 [ 354.371528][ T6707] loop2: detected capacity change from 0 to 256 [ 355.162313][ T6707] FAT-fs (loop2): Directory bread(block 64) failed [ 355.202105][ T6707] FAT-fs (loop2): Directory bread(block 65) failed [ 355.230013][ T6707] FAT-fs (loop2): Directory bread(block 66) failed [ 355.305901][ T6707] FAT-fs (loop2): Directory bread(block 67) failed [ 355.365018][ T6707] FAT-fs (loop2): Directory bread(block 68) failed [ 355.371655][ T6707] FAT-fs (loop2): Directory bread(block 69) failed [ 355.560273][ T6707] FAT-fs (loop2): Directory bread(block 70) failed [ 355.604652][ T6707] FAT-fs (loop2): Directory bread(block 71) failed [ 355.611452][ T6707] FAT-fs (loop2): Directory bread(block 72) failed [ 355.648589][ T6707] FAT-fs (loop2): Directory bread(block 73) failed [ 356.118053][ T6726] loop2: detected capacity change from 0 to 8 [ 356.408646][ T26] audit: type=1400 audit(1744784063.919:25): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE81 pid=6727 comm="syz.4.565" [ 356.455564][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.543299][ T6631] hfsplus: b-tree write err: -5, ino 4 [ 357.530463][ T6746] loop5: detected capacity change from 0 to 64 [ 357.756655][ T6743] loop3: detected capacity change from 0 to 1024 [ 357.805465][ T6750] loop4: detected capacity change from 0 to 256 [ 358.052398][ T6743] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62106!=20869) [ 358.082695][ T6743] EXT4-fs (loop3): group descriptors corrupted! [ 358.275328][ T6750] FAT-fs (loop4): Directory bread(block 64) failed [ 358.296934][ T6750] FAT-fs (loop4): Directory bread(block 65) failed [ 358.319951][ T6750] FAT-fs (loop4): Directory bread(block 66) failed [ 358.341783][ T6750] FAT-fs (loop4): Directory bread(block 67) failed [ 358.544359][ T6750] FAT-fs (loop4): Directory bread(block 68) failed [ 358.551485][ T6750] FAT-fs (loop4): Directory bread(block 69) failed [ 358.665847][ T6750] FAT-fs (loop4): Directory bread(block 70) failed [ 358.955205][ T6750] FAT-fs (loop4): Directory bread(block 71) failed [ 359.264549][ T6750] FAT-fs (loop4): Directory bread(block 72) failed [ 359.284387][ T6750] FAT-fs (loop4): Directory bread(block 73) failed [ 359.459257][ T6762] loop5: detected capacity change from 0 to 1024 [ 359.583998][ T6765] loop3: detected capacity change from 0 to 2048 [ 359.829349][ T6765] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.105565][ T26] audit: type=1800 audit(1744784067.609:26): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.576" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 360.736540][ T6765] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 363.148952][ T6807] netlink: 'syz.2.587': attribute type 1 has an invalid length. [ 363.255951][ T6805] netlink: 'syz.4.585': attribute type 10 has an invalid length. [ 363.262890][ T6809] loop3: detected capacity change from 0 to 1024 [ 363.327329][ T6805] team0: Device hsr_slave_0 failed to register rx_handler [ 363.366906][ T6809] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.624710][ T6821] loop4: detected capacity change from 0 to 256 [ 363.801497][ T6821] FAT-fs (loop4): Directory bread(block 64) failed [ 363.839296][ T6821] FAT-fs (loop4): Directory bread(block 65) failed [ 363.850126][ T5887] hfsplus: b-tree write err: -5, ino 4 [ 363.852390][ T6821] FAT-fs (loop4): Directory bread(block 66) failed [ 363.887624][ T6821] FAT-fs (loop4): Directory bread(block 67) failed [ 363.981042][ T6821] FAT-fs (loop4): Directory bread(block 68) failed [ 364.018282][ T6821] FAT-fs (loop4): Directory bread(block 69) failed [ 364.290696][ T6821] FAT-fs (loop4): Directory bread(block 70) failed [ 364.598168][ T6821] FAT-fs (loop4): Directory bread(block 71) failed [ 364.623340][ T6821] FAT-fs (loop4): Directory bread(block 72) failed [ 364.629912][ T6821] FAT-fs (loop4): Directory bread(block 73) failed [ 370.543889][ T5675] block nbd2: Attempted send on invalid socket [ 370.550714][ T5675] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.569860][ T6869] vxfs: unable to read disk superblock at 1 [ 370.582471][ T5675] block nbd2: Attempted send on invalid socket [ 370.590010][ T5675] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.672179][ T6869] vxfs: unable to read disk superblock at 8 [ 370.722466][ T6864] loop5: detected capacity change from 0 to 1024 [ 370.726896][ T6871] loop6: detected capacity change from 0 to 256 [ 370.861547][ T6869] vxfs: can't find superblock. [ 370.945340][ T6871] FAT-fs (loop6): Directory bread(block 64) failed [ 370.958037][ T6871] FAT-fs (loop6): Directory bread(block 65) failed [ 370.966570][ T6871] FAT-fs (loop6): Directory bread(block 66) failed [ 370.981096][ T6871] FAT-fs (loop6): Directory bread(block 67) failed [ 371.008263][ T6871] FAT-fs (loop6): Directory bread(block 68) failed [ 371.179284][ T6871] FAT-fs (loop6): Directory bread(block 69) failed [ 371.188798][ T6871] FAT-fs (loop6): Directory bread(block 70) failed [ 371.419793][ T6871] FAT-fs (loop6): Directory bread(block 71) failed [ 371.601101][ T6871] FAT-fs (loop6): Directory bread(block 72) failed [ 371.749274][ T6871] FAT-fs (loop6): Directory bread(block 73) failed [ 373.483495][ T146] Bluetooth: hci0: unknown advertising packet type: 0x63 [ 373.483653][ T146] Bluetooth: hci0: Dropping invalid advertising data [ 373.497607][ T146] Bluetooth: hci0: Malicious advertising data. [ 373.648430][ T6902] device veth1_macvtap left promiscuous mode [ 373.655638][ T6902] device macsec0 entered promiscuous mode [ 376.222703][ T9] hfsplus: b-tree write err: -5, ino 4 [ 377.357344][ T6919] delete_channel: no stack [ 377.680614][ T5675] block nbd4: Attempted send on invalid socket [ 377.690234][ T5675] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.716859][ T6937] vxfs: unable to read disk superblock at 1 [ 377.775095][ T5675] block nbd4: Attempted send on invalid socket [ 377.798462][ T5675] blk_update_request: I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 377.858763][ T6937] vxfs: unable to read disk superblock at 8 [ 377.873451][ T6937] vxfs: can't find superblock. [ 378.085415][ T6939] loop2: detected capacity change from 0 to 128 [ 378.123262][ T6939] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 378.305210][ T6940] loop6: detected capacity change from 0 to 40427 [ 378.336527][ T6940] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 378.343599][ T6940] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 378.354204][ T6940] F2FS-fs (loop6): invalid crc value [ 378.432485][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.438808][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.445929][ T6940] F2FS-fs (loop6): Found nat_bits in checkpoint [ 378.452794][ T6939] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 378.646247][ T6940] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 378.654370][ T6940] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 379.504372][ T5973] attempt to access beyond end of device [ 379.504372][ T5973] loop6: rw=2049, want=45120, limit=40427 [ 379.577554][ T5886] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 380.521468][ T6972] loop5: detected capacity change from 0 to 1024 [ 381.431001][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 382.827924][ T6988] loop2: detected capacity change from 0 to 512 [ 383.092192][ T6988] EXT4-fs (loop2): bad block size 8192 [ 385.680189][ T5885] hfsplus: b-tree write err: -5, ino 4 [ 388.852419][ T7039] loop3: detected capacity change from 0 to 512 [ 389.051199][ T7036] loop5: detected capacity change from 0 to 40427 [ 389.088612][ T7039] EXT4-fs (loop3): Test dummy encryption mode enabled [ 389.111339][ T7036] F2FS-fs (loop5): invalid crc value [ 389.113843][ T7039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 389.175950][ T7036] F2FS-fs (loop5): Found nat_bits in checkpoint [ 389.235364][ T7041] loop2: detected capacity change from 0 to 1024 [ 389.250465][ T7039] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.645: bad orphan inode 131083 [ 389.261023][ T7036] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 389.288383][ T7039] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,minixdf,,errors=continue. Quota mode: none. [ 389.328616][ T7048] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 389.337526][ T7048] team0: Device hsr_slave_0 failed to register rx_handler [ 390.306818][ T7057] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 390.433889][ T4752] attempt to access beyond end of device [ 390.433889][ T4752] loop5: rw=2049, want=45104, limit=40427 [ 397.048562][ T7105] loop3: detected capacity change from 0 to 40427 [ 397.227232][ T7105] F2FS-fs (loop3): invalid crc value [ 397.445662][ T7105] F2FS-fs (loop3): Found nat_bits in checkpoint [ 397.649209][ T7111] loop6: detected capacity change from 0 to 4096 [ 397.661371][ T7105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 397.857386][ T7113] device veth1_macvtap left promiscuous mode [ 397.873143][ T7111] ntfs3: Unknown parameter 'nocase' [ 398.201572][ T7113] device macsec0 entered promiscuous mode [ 398.817183][ T4173] attempt to access beyond end of device [ 398.817183][ T4173] loop3: rw=2049, want=45104, limit=40427 [ 398.837509][ T7114] device veth1_macvtap entered promiscuous mode [ 398.890477][ T7114] device macsec0 left promiscuous mode [ 399.238198][ T5889] hfsplus: b-tree write err: -5, ino 4 [ 401.023494][ T7129] loop2: detected capacity change from 0 to 256 [ 401.456150][ T7129] FAT-fs (loop2): Directory bread(block 64) failed [ 401.469038][ T7129] FAT-fs (loop2): Directory bread(block 65) failed [ 401.478055][ T7129] FAT-fs (loop2): Directory bread(block 66) failed [ 401.491099][ T7129] FAT-fs (loop2): Directory bread(block 67) failed [ 401.499683][ T7129] FAT-fs (loop2): Directory bread(block 68) failed [ 401.712891][ T7129] FAT-fs (loop2): Directory bread(block 69) failed [ 401.719560][ T7129] FAT-fs (loop2): Directory bread(block 70) failed [ 401.726207][ T7129] FAT-fs (loop2): Directory bread(block 71) failed [ 401.735287][ T7129] FAT-fs (loop2): Directory bread(block 72) failed [ 401.749330][ T7129] FAT-fs (loop2): Directory bread(block 73) failed [ 403.518690][ T5675] block nbd3: Attempted send on invalid socket [ 403.528883][ T5675] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 403.683416][ T7143] vxfs: unable to read disk superblock at 1 [ 403.834127][ T5675] block nbd3: Attempted send on invalid socket [ 403.847302][ T5675] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 403.887530][ T7143] vxfs: unable to read disk superblock at 8 [ 403.893564][ T7143] vxfs: can't find superblock. [ 404.285766][ T7129] FAT-fs (loop2): Filesystem has been set read-only [ 405.229273][ T7153] loop6: detected capacity change from 0 to 40427 [ 405.967384][ T7153] F2FS-fs (loop6): invalid crc value [ 406.013970][ T7153] F2FS-fs (loop6): Found nat_bits in checkpoint [ 406.187104][ T7153] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 407.184845][ T5973] attempt to access beyond end of device [ 407.184845][ T5973] loop6: rw=2049, want=45104, limit=40427 [ 407.236372][ T7172] loop2: detected capacity change from 0 to 2048 [ 407.249226][ T7170] smc: removing ib device syz1 [ 407.453088][ T7172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.684362][ T26] audit: type=1804 audit(1744784116.189:27): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.676" name="/newroot/153/bus/bus/file1" dev="loop2" ino=1368 res=1 errno=0 [ 413.333408][ T7199] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 413.340553][ T7199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 413.351325][ T7199] vhci_hcd vhci_hcd.0: Device attached [ 413.632294][ T6574] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 413.862311][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 414.082344][ T7208] loop2: detected capacity change from 0 to 40427 [ 414.800250][ T7208] F2FS-fs (loop2): invalid crc value [ 414.879770][ T7208] F2FS-fs (loop2): Found nat_bits in checkpoint [ 414.939904][ T7208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 415.277566][ T7224] attempt to access beyond end of device [ 415.277566][ T7224] loop2: rw=2049, want=53504, limit=40427 [ 415.322616][ T7223] loop6: detected capacity change from 0 to 2048 [ 415.943058][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 416.385086][ T7223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.425826][ T4338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.530623][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 417.123574][ T4338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.266995][ T26] audit: type=1804 audit(1744784124.779:28): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.690" name="/newroot/51/bus/bus/file1" dev="loop6" ino=1368 res=1 errno=0 [ 417.589967][ T4338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.022134][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 418.543798][ T4338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.605992][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.667884][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.829790][ T7193] device bridge_slave_0 entered promiscuous mode [ 419.965786][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.983590][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.016477][ T7193] device bridge_slave_1 entered promiscuous mode [ 420.140406][ T4212] Bluetooth: hci3: command 0x0419 tx timeout [ 420.174892][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.744207][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.980190][ T7193] team0: Port device team_slave_0 added [ 421.070220][ T7193] team0: Port device team_slave_1 added [ 421.215903][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.231121][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.975091][ T7269] loop3: detected capacity change from 0 to 40427 [ 422.016198][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.066834][ T7269] F2FS-fs (loop3): invalid crc value [ 422.075448][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.121142][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.148161][ T7269] F2FS-fs (loop3): Found nat_bits in checkpoint [ 422.195612][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.304898][ T7269] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 422.437785][ T7193] device hsr_slave_0 entered promiscuous mode [ 422.540281][ T7280] loop6: detected capacity change from 0 to 2048 [ 422.563367][ T7193] device hsr_slave_1 entered promiscuous mode [ 422.600247][ T7280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.616255][ T7282] attempt to access beyond end of device [ 422.616255][ T7282] loop3: rw=2049, want=53504, limit=40427 [ 422.665831][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.653478][ T7193] Cannot create hsr debugfs directory [ 424.169043][ T26] audit: type=1804 audit(1744784131.679:29): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.703" name="/newroot/55/bus/bus/file1" dev="loop6" ino=1368 res=1 errno=0 [ 426.417883][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.710'. [ 427.399955][ T7193] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 427.474397][ T7193] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 427.502733][ T7193] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 427.528166][ T7193] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 427.852535][ T4338] device hsr_slave_0 left promiscuous mode [ 427.867447][ T4338] device hsr_slave_1 left promiscuous mode [ 427.889351][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.996187][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.107771][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.368880][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.567607][ T4338] device bridge_slave_1 left promiscuous mode [ 428.594568][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.660871][ T4338] device bridge_slave_0 left promiscuous mode [ 428.720046][ T7315] loop2: detected capacity change from 0 to 32768 [ 428.812168][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.134275][ T7326] loop5: detected capacity change from 0 to 40427 [ 429.194563][ T7315] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.712 (7315) [ 429.560726][ T4338] device veth1_macvtap left promiscuous mode [ 429.588118][ T7326] F2FS-fs (loop5): invalid crc value [ 429.599206][ T7315] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 429.606695][ T4338] device veth0_macvtap left promiscuous mode [ 429.612039][ T7326] F2FS-fs (loop5): Found nat_bits in checkpoint [ 429.623783][ T4338] device veth1_vlan left promiscuous mode [ 429.629741][ T4338] device veth0_vlan left promiscuous mode [ 429.676187][ T7315] BTRFS info (device loop2): force clearing of disk cache [ 429.680104][ T7326] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 429.864782][ T7315] BTRFS info (device loop2): force zlib compression, level 3 [ 429.881514][ T7336] loop3: detected capacity change from 0 to 128 [ 429.889448][ T7315] BTRFS info (device loop2): enabling auto defrag [ 429.909929][ T7315] BTRFS info (device loop2): max_inline at 0 [ 429.917186][ T7315] BTRFS info (device loop2): using free space tree [ 429.932216][ T7336] qnx6: superblock #1 checksum error [ 429.946099][ T7338] attempt to access beyond end of device [ 429.946099][ T7338] loop5: rw=2049, want=53504, limit=40427 [ 429.975467][ T7315] BTRFS info (device loop2): has skinny extents [ 431.053133][ T7315] BTRFS error (device loop2): open_ctree failed: -12 [ 433.977601][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 434.061890][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 434.122712][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.182816][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.964302][ T4338] bond0 (unregistering): Released all slaves [ 435.276438][ T7390] loop3: detected capacity change from 0 to 4096 [ 435.427420][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.725'. [ 435.570187][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.603499][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 435.615369][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.665803][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.710493][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 435.734568][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.810240][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.817427][ T7397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.903104][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 435.951599][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.983795][ T7400] loop6: detected capacity change from 0 to 40427 [ 436.023229][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.042689][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.049843][ T7397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.102825][ T7400] F2FS-fs (loop6): invalid crc value [ 436.112904][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 436.148484][ T7400] F2FS-fs (loop6): Found nat_bits in checkpoint [ 436.197130][ T7400] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 436.208397][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 436.247966][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 436.269719][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 436.589680][ T7409] attempt to access beyond end of device [ 436.589680][ T7409] loop6: rw=2049, want=53504, limit=40427 [ 437.112414][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.139980][ T7408] loop3: detected capacity change from 0 to 128 [ 437.159503][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.174939][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.189120][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.218086][ T7408] qnx6: superblock #1 checksum error [ 437.274071][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.334495][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.383174][ T7397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.551522][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 438.934148][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.941715][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.990100][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.159622][ T7430] netlink: 'syz.6.731': attribute type 10 has an invalid length. [ 439.178446][ T7430] team0: Device hsr_slave_0 failed to register rx_handler [ 439.876301][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.884804][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.633503][ T7448] loop2: detected capacity change from 0 to 4096 [ 440.640845][ T7448] ntfs3: Unknown parameter 'nocase' [ 441.331497][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.369518][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.404823][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.428690][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.473088][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.529566][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.425588][ T7193] device veth0_vlan entered promiscuous mode [ 442.572816][ T7193] device veth1_vlan entered promiscuous mode [ 442.784980][ T7193] device veth0_macvtap entered promiscuous mode [ 442.832729][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.867881][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.931269][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.943204][ T7193] device veth1_macvtap entered promiscuous mode [ 442.979046][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 443.841904][ T7475] loop6: detected capacity change from 0 to 2048 [ 443.852904][ T7473] loop3: detected capacity change from 0 to 2048 [ 443.910619][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.943984][ T7475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.960087][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.005623][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.036866][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.086920][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.127854][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.160139][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.212357][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.225478][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.280323][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.321024][ T7473] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 444.399829][ T7473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.416759][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.489648][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.903095][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.918895][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.940103][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.971186][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.989635][ T7473] sg_write: data in/out 156/14 bytes for SCSI command 0x0-- guessing data in; [ 444.989635][ T7473] program syz.3.745 not setting count and/or reply_len properly [ 445.002068][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.073781][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.196227][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.220125][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 445.250799][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 445.303266][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.356016][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.398567][ T7193] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.438353][ T7193] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.458532][ T7193] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.532237][ T7193] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.007626][ T7491] loop5: detected capacity change from 0 to 4096 [ 446.392816][ T7491] ntfs3: Unknown parameter 'nocase' [ 447.072626][ T7477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.080995][ T7477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.183399][ T7311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.192099][ T7311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.205159][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 448.072057][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 448.236334][ T7503] loop3: detected capacity change from 0 to 164 [ 449.401279][ T7514] loop6: detected capacity change from 0 to 2048 [ 449.460936][ T7514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.286406][ T26] audit: type=1804 audit(1744784157.789:30): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.757" name="/newroot/72/bus/bus/file1" dev="loop6" ino=1368 res=1 errno=0 [ 450.534091][ T7529] loop3: detected capacity change from 0 to 4096 [ 451.053215][ T7529] ntfs3: Unknown parameter 'nocase' [ 453.041804][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.6.763'. [ 453.935664][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.769'. [ 455.216730][ T7572] loop3: detected capacity change from 0 to 2048 [ 455.311687][ T7572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.242764][ T26] audit: type=1804 audit(1744784163.759:31): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.773" name="/newroot/161/bus/bus/file1" dev="loop3" ino=1368 res=1 errno=0 [ 461.436800][ T7605] loop3: detected capacity change from 0 to 256 [ 461.619530][ T7605] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 462.276880][ T7625] netlink: 60 bytes leftover after parsing attributes in process `syz.6.785'. [ 464.802378][ T7632] loop6: detected capacity change from 0 to 8 [ 465.855460][ T4213] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 465.985555][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.790'. [ 467.203707][ T4213] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 467.315151][ T7657] loop5: detected capacity change from 0 to 128 [ 467.338789][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.357141][ T7657] qnx6: superblock #1 checksum error [ 467.375143][ T4213] usb 4-1: config 0 descriptor?? [ 467.547423][ T6562] Bluetooth: hci5: command 0x0406 tx timeout [ 467.572296][ T7665] netlink: 60 bytes leftover after parsing attributes in process `syz.5.799'. [ 467.703055][ T4213] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 470.719357][ T4213] asix: probe of 4-1:0.0 failed with error -32 [ 471.729593][ T6562] usb 4-1: USB disconnect, device number 6 [ 472.900693][ T7678] netlink: 'syz.7.804': attribute type 10 has an invalid length. [ 473.034067][ T7678] team0: Device hsr_slave_0 failed to register rx_handler [ 474.619767][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 474.707959][ T7696] loop7: detected capacity change from 0 to 128 [ 474.738865][ T7696] qnx6: superblock #1 checksum error [ 476.519038][ T7712] loop3: detected capacity change from 0 to 512 [ 476.598467][ T7712] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 476.612167][ T7712] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 476.656846][ T7712] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 476.725894][ T7712] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 476.742448][ T7712] System zones: 0-2, 18-18, 34-35 [ 476.753212][ T7712] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 476.960819][ T7712] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 477.810384][ T7720] netlink: 60 bytes leftover after parsing attributes in process `syz.5.815'. [ 478.422658][ T7714] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 478.772793][ T7202] vhci_hcd: connection reset by peer [ 479.053809][ T5891] vhci_hcd: stop threads [ 479.059867][ T5891] vhci_hcd: release socket [ 479.365790][ T5891] vhci_hcd: disconnect device [ 479.442770][ T6574] vhci_hcd: vhci_device speed not set [ 480.438287][ T1092] block nbd5: Attempted send on invalid socket [ 480.445036][ T1092] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.457600][ T7738] vxfs: unable to read disk superblock at 1 [ 480.469676][ T1092] block nbd5: Attempted send on invalid socket [ 480.476571][ T1092] blk_update_request: I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.488042][ T7738] vxfs: unable to read disk superblock at 8 [ 480.493991][ T7738] vxfs: can't find superblock. [ 480.864738][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 481.692375][ T6562] Bluetooth: hci1: command 0x0409 tx timeout [ 482.573933][ T7769] netlink: 60 bytes leftover after parsing attributes in process `syz.6.828'. [ 483.702111][ T6562] Bluetooth: hci1: command 0x041b tx timeout [ 484.999394][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.022169][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.041837][ T7732] device bridge_slave_0 entered promiscuous mode [ 485.094498][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.106052][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.115165][ T7732] device bridge_slave_1 entered promiscuous mode [ 485.329242][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.854328][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.524330][ T6562] Bluetooth: hci1: command 0x040f tx timeout [ 486.599462][ T7732] team0: Port device team_slave_0 added [ 486.609024][ T7732] team0: Port device team_slave_1 added [ 486.751303][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.758359][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.784310][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.815430][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.130712][ T1092] block nbd6: Attempted send on invalid socket [ 487.143432][ T1092] blk_update_request: I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 487.158498][ T7790] vxfs: unable to read disk superblock at 1 [ 487.169100][ T1092] block nbd6: Attempted send on invalid socket [ 487.177635][ T1092] blk_update_request: I/O error, dev nbd6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 487.191571][ T7790] vxfs: unable to read disk superblock at 8 [ 487.197635][ T7790] vxfs: can't find superblock. [ 487.242298][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.249278][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.302755][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.530066][ T7732] device hsr_slave_0 entered promiscuous mode [ 487.595918][ T7732] device hsr_slave_1 entered promiscuous mode [ 487.635919][ T7732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.660450][ T7732] Cannot create hsr debugfs directory [ 487.701309][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.6.840'. [ 488.582193][ T6562] Bluetooth: hci1: command 0x0419 tx timeout [ 488.740467][ T7732] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 488.785314][ T7732] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 488.818207][ T7732] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 488.862257][ T7732] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 488.991879][ T7813] loop6: detected capacity change from 0 to 128 [ 489.029728][ T7813] qnx6: superblock #1 checksum error [ 489.260069][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.383463][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 489.439382][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.479991][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.517481][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 489.852750][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.933739][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.940907][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.072664][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.112539][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.211010][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.382630][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.389828][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.636396][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.882724][ T1092] block nbd5: Attempted send on invalid socket [ 490.889372][ T1092] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.900755][ T7836] vxfs: unable to read disk superblock at 1 [ 490.916338][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 490.965368][ T5675] block nbd5: Attempted send on invalid socket [ 490.968063][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.972491][ T5675] blk_update_request: I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.986520][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.024164][ T7836] vxfs: unable to read disk superblock at 8 [ 491.038314][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 491.054413][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 491.063968][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.072547][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.081012][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 491.162690][ T7732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.222881][ T7836] vxfs: can't find superblock. [ 491.332472][ T7841] netlink: 60 bytes leftover after parsing attributes in process `syz.6.850'. [ 493.075414][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 493.114938][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.198447][ T6631] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.222364][ T7366] Bluetooth: hci3: command 0x0409 tx timeout [ 493.780290][ T7849] device veth1_macvtap left promiscuous mode [ 493.788862][ T7849] device macsec0 entered promiscuous mode [ 493.994882][ T6631] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.096247][ T7624] syz.2.786 (7624) used greatest stack depth: 18416 bytes left [ 494.186070][ T6631] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.243389][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.251030][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.298200][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.332253][ T6631] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.302069][ T7365] Bluetooth: hci3: command 0x041b tx timeout [ 495.444250][ T7837] chnl_net:caif_netlink_parms(): no params data found [ 495.555512][ T7883] netlink: 60 bytes leftover after parsing attributes in process `syz.6.860'. [ 496.462993][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 496.512597][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.667902][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.694197][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.727752][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.774483][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.795326][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.808027][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.823938][ T7837] device bridge_slave_0 entered promiscuous mode [ 496.843537][ T7732] device veth0_vlan entered promiscuous mode [ 496.861244][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.877873][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.896999][ T7837] device bridge_slave_1 entered promiscuous mode [ 496.919644][ T7732] device veth1_vlan entered promiscuous mode [ 497.025485][ T7837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.049129][ T7837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.074126][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 497.103057][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 497.123379][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.164355][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.227796][ T7732] device veth0_macvtap entered promiscuous mode [ 497.268294][ T7837] team0: Port device team_slave_0 added [ 497.345361][ T7732] device veth1_macvtap entered promiscuous mode [ 497.383145][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.427679][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.460210][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.484419][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.490832][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 497.532815][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.900898][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.934394][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.970154][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.031183][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.062623][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.122590][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.133721][ T7837] team0: Port device team_slave_1 added [ 498.360177][ T7613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.415621][ T7613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.594108][ T7613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.684042][ T7613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.791543][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.863'. [ 499.000885][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.031246][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.058453][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.141336][ T7837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.154772][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.202331][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.252554][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.301047][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.331107][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.386244][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.413730][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.424941][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.509214][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.5.870'. [ 499.518814][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.542574][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 499.616649][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.738967][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.106829][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.130859][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.331274][ T7837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.343241][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.383090][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 500.396988][ T7732] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.415907][ T7732] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.442637][ T7732] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.463214][ T7732] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.304401][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.311087][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.594356][ T7837] device hsr_slave_0 entered promiscuous mode [ 501.626651][ T7837] device hsr_slave_1 entered promiscuous mode [ 501.652921][ T7837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.676336][ T7837] Cannot create hsr debugfs directory [ 502.211500][ T6631] device hsr_slave_0 left promiscuous mode [ 502.218432][ T6631] device hsr_slave_1 left promiscuous mode [ 502.225222][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.232940][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.241032][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.248622][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.256586][ T6631] device bridge_slave_1 left promiscuous mode [ 502.290207][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.301752][ T6631] device bridge_slave_0 left promiscuous mode [ 502.341838][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.414105][ T6631] device veth1_macvtap left promiscuous mode [ 502.990109][ T6631] device veth0_macvtap left promiscuous mode [ 503.044883][ T6631] device veth1_vlan left promiscuous mode [ 503.128739][ T6631] device veth0_vlan left promiscuous mode [ 503.468451][ T7948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.879'. [ 504.298577][ T6631] team0 (unregistering): Port device team_slave_1 removed [ 504.324506][ T6631] team0 (unregistering): Port device team_slave_0 removed [ 504.340261][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.360289][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.481530][ T6631] bond0 (unregistering): Released all slaves [ 505.580811][ T7956] netlink: 'syz.5.882': attribute type 10 has an invalid length. [ 505.642701][ T7956] team0: Device hsr_slave_0 failed to register rx_handler [ 505.721969][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.737393][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.775655][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 505.818395][ T7960] tun0: tun_chr_ioctl cmd 1074025677 [ 505.825584][ T7960] tun0: linktype set to 804 [ 505.933606][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.953828][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.004719][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.244899][ T7837] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 506.313228][ T7837] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 507.086200][ T7837] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 507.137978][ T7837] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 507.657680][ T7985] loop3: detected capacity change from 0 to 64 [ 508.563732][ T7837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.472154][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 509.502954][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.594183][ T7837] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.627218][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.692356][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.700917][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.709081][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.760267][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.787522][ T7996] netlink: 'syz.6.893': attribute type 10 has an invalid length. [ 509.817558][ T7996] team0: Device hsr_slave_0 failed to register rx_handler [ 509.863084][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.912841][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.946836][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.954025][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.006275][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.243166][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.603153][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.667155][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.713291][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 510.902325][ T4213] syzkaller0: tun_net_xmit 76 [ 510.918175][ T4213] syzkaller0: tun_net_xmit 48 [ 510.949041][ T7367] syzkaller0: tun_net_xmit 76 [ 511.005666][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.019745][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.038182][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.056413][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.077687][ T7837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.128658][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.160545][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.183742][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.440667][ T8020] loop8: detected capacity change from 0 to 1024 [ 512.183192][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.190861][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.257605][ T7837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.899623][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 513.943036][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 514.801582][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 514.839317][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 514.875937][ T7837] device veth0_vlan entered promiscuous mode [ 514.922842][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 514.951356][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.040071][ T7837] device veth1_vlan entered promiscuous mode [ 515.189918][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.232843][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.272170][ T7837] device veth0_macvtap entered promiscuous mode [ 515.286559][ T8062] tap0: tun_chr_ioctl cmd 1074025677 [ 515.305567][ T8062] tap0: linktype set to 778 [ 515.320780][ T7837] device veth1_macvtap entered promiscuous mode [ 515.792230][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.958833][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.114283][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.125956][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.136089][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.148091][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.163393][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.181771][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.193134][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.205869][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.220759][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.229922][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.277610][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.295207][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.332831][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.362730][ T5890] hfsplus: b-tree write err: -5, ino 4 [ 516.383380][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.406775][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.552529][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.611162][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.652107][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.679160][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.052969][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.372052][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.445006][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.464893][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.481158][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.602051][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.611465][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.065172][ T7837] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.230688][ T7837] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.240432][ T7837] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.250433][ T7837] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.470903][ T4194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.653741][ T4194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.758906][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 521.842962][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.923487][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.471104][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 629.451909][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 629.459019][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4260/1:b..l [ 629.467601][ C0] (detected by 0, t=10502 jiffies, g=33257, q=37) [ 629.474125][ C0] task:kworker/u4:6 state:R running task stack:20920 pid: 4260 ppid: 2 flags:0x00004000 [ 629.486457][ C0] Workqueue: bat_events batadv_nc_worker [ 629.492159][ C0] Call Trace: [ 629.495455][ C0] [ 629.498398][ C0] __schedule+0x12c4/0x45b0 [ 629.502931][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 629.508841][ C0] ? mark_lock+0x98/0x340 [ 629.513192][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 629.519188][ C0] ? release_firmware_map_entry+0x190/0x190 [ 629.525102][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 629.530150][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 629.535489][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 629.540619][ C0] ? __cond_resched+0xf0/0xf0 [ 629.545336][ C0] irqentry_exit+0x53/0x80 [ 629.549812][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 629.555288][ C0] RIP: 0010:__rcu_read_unlock+0x2f/0x100 [ 629.560946][ C0] Code: 41 55 41 54 53 49 bc 00 00 00 00 00 fc ff df 65 4c 8b 35 c4 6e 96 7e 4d 8d ae 3c 04 00 00 4c 89 eb 48 c1 eb 03 42 0f b6 04 23 <84> c0 75 61 41 8b 6d 00 ff cd 42 0f b6 04 23 84 c0 75 69 41 89 6d [ 629.580599][ C0] RSP: 0018:ffffc900032cfbc0 EFLAGS: 00000a07 [ 629.586695][ C0] RAX: 0000000000000000 RBX: 1ffff11004244087 RCX: ffff888021220000 [ 629.594694][ C0] RDX: 0000000000000000 RSI: ffffffff8af9fc60 RDI: ffffffff8af9fc20 [ 629.602695][ C0] RBP: 0000000000000001 R08: ffffffff8a1ce955 R09: fffffbfff2132219 [ 629.610694][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 629.618691][ C0] R13: ffff88802122043c R14: ffff888021220000 R15: ffff888021b62a40 [ 629.626700][ C0] ? batadv_nc_worker+0x1c5/0x5b0 [ 629.631763][ C0] batadv_nc_worker+0x234/0x5b0 [ 629.636862][ C0] process_one_work+0x8a1/0x10c0 [ 629.641923][ C0] ? worker_detach_from_pool+0x260/0x260 [ 629.647578][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 629.653147][ C0] ? kthread_data+0x4e/0xc0 [ 629.657673][ C0] ? wq_worker_running+0x97/0x170 [ 629.662730][ C0] worker_thread+0xaca/0x1280 [ 629.667457][ C0] kthread+0x3f6/0x4f0 [ 629.671545][ C0] ? rcu_lock_release+0x20/0x20 [ 629.676519][ C0] ? kthread_blkcg+0xd0/0xd0 [ 629.681142][ C0] ret_from_fork+0x1f/0x30 [ 629.685597][ C0] [ 629.688633][ C0] rcu: rcu_preempt kthread starved for 10522 jiffies! g33257 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 629.700005][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 629.710003][ C0] rcu: RCU grace-period kthread stack dump: [ 629.715922][ C0] task:rcu_preempt state:R running task stack:27000 pid: 15 ppid: 2 flags:0x00004000 [ 629.726740][ C0] Call Trace: [ 629.730036][ C0] [ 629.732982][ C0] __schedule+0x12c4/0x45b0 [ 629.737523][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 629.743534][ C0] ? print_irqtrace_events+0x210/0x210 [ 629.749023][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 629.755029][ C0] ? release_firmware_map_entry+0x190/0x190 [ 629.760956][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 629.766298][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 629.771543][ C0] ? __cond_resched+0xf0/0xf0 [ 629.776338][ C0] ? debug_object_free+0x2c1/0x460 [ 629.781529][ C0] ? rcu_is_watching+0x11/0xa0 [ 629.786336][ C0] irqentry_exit+0x53/0x80 [ 629.790772][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 629.796246][ C0] RIP: 0010:prepare_to_swait_event+0x1/0x340 [ 629.802248][ C0] Code: 48 8b 74 24 20 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e1 a3 e9 08 0f 0b eb 9c 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 28 89 d3 49 89 f5 49 89 fc 49 [ 629.821972][ C0] RSP: 0018:ffffc90000d47c90 EFLAGS: 00000246 [ 629.828069][ C0] RAX: 0000000000000000 RBX: ffffc90000d47d68 RCX: ffff88813ff23b80 [ 629.836061][ C0] RDX: 0000000000000402 RSI: ffffc90000d47d60 RDI: ffffffff8cb23960 [ 629.844050][ C0] RBP: ffffc90000d47df0 R08: ffffffff8a497222 R09: ffffc90000d47a40 [ 629.852040][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 629.860031][ C0] R13: ffffc90000d47d60 R14: 0000000000000000 R15: 0000000000000000 [ 629.868165][ C0] ? schedule_timeout+0x202/0x300 [ 629.873320][ C0] rcu_gp_fqs_loop+0x28a/0x1080 [ 629.878334][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 629.884001][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 629.889265][ C0] ? rcu_gp_init+0xdae/0x1140 [ 629.893967][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 629.899888][ C0] ? rcu_gp_init+0x1140/0x1140 [ 629.904681][ C0] ? finish_swait+0xc5/0x1d0 [ 629.909291][ C0] rcu_gp_kthread+0xa4/0x360 [ 629.913901][ C0] ? _raw_spin_unlock+0x40/0x40 [ 629.918770][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 629.923901][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 629.929817][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 629.934866][ C0] kthread+0x3f6/0x4f0 [ 629.938952][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 629.944083][ C0] ? kthread_blkcg+0xd0/0xd0 [ 629.948696][ C0] ret_from_fork+0x1f/0x30 [ 629.953153][ C0] [ 629.956180][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 629.962511][ C0] NMI backtrace for cpu 0 [ 629.966852][ C0] CPU: 0 PID: 8139 Comm: syz.3.932 Not tainted 5.15.180-syzkaller #0 [ 629.975025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 629.985276][ C0] Call Trace: [ 629.988564][ C0] [ 629.991429][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 629.996131][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 630.001781][ C0] ? panic+0x860/0x860 [ 630.005970][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 630.010926][ C0] ? __wake_up_klogd+0xd5/0x100 [ 630.015808][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 630.021977][ C0] ? _printk+0xd1/0x120 [ 630.026161][ C0] ? cpu_online+0x1f/0x40 [ 630.030508][ C0] ? panic+0x860/0x860 [ 630.034601][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 630.040683][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 630.046689][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 630.052870][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 630.058363][ C0] ? print_cpu_stall+0x600/0x600 [ 630.063457][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 630.068613][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 630.073850][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 630.079073][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 630.083945][ C0] ? hrtimer_run_queues+0x163/0x450 [ 630.089158][ C0] ? account_process_tick+0x232/0x3a0 [ 630.094554][ C0] update_process_times+0x196/0x200 [ 630.099788][ C0] tick_sched_timer+0x386/0x550 [ 630.104664][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 630.110229][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 630.115462][ C0] ? hrtimer_interrupt+0x980/0x980 [ 630.120592][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 630.126681][ C0] hrtimer_interrupt+0x392/0x980 [ 630.131657][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 630.137670][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 630.143336][ C0] [ 630.146310][ C0] [ 630.149263][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.155267][ C0] RIP: 0010:raw_spin_rq_unlock_irq+0x19/0x80 [ 630.161277][ C0] Code: 38 c1 7c cb 4c 89 f7 e8 75 c4 70 00 eb c1 0f 1f 00 41 57 41 56 53 48 89 fb eb 14 48 89 df e8 9e f0 ef 08 e8 59 4f 2d 00 fb 5b <41> 5e 41 5f c3 49 bf 00 00 00 00 00 fc ff df 4c 8d b3 58 0d 00 00 [ 630.174544][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.180903][ C0] RSP: 0018:ffffc900038ff708 EFLAGS: 00000286 [ 630.180930][ C0] RAX: 3a63a23ffc56ec00 RBX: ffff8880b8e3a300 RCX: ffffffff96a97f03 [ 630.180948][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab2b60 RDI: ffffffff8af9fc80 [ 630.180966][ C0] RBP: ffffc900038ff900 R08: ffffffff81871c90 R09: ffffed10171c7461 [ 630.180982][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880202e1dc0 [ 630.180998][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b058 R15: dffffc0000000000 [ 630.191930][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.193297][ C0] ? trace_hardirqs_on+0x30/0x80 [ 630.193339][ C0] __schedule+0x1462/0x45b0 [ 630.249185][ C0] ? release_firmware_map_entry+0x190/0x190 [ 630.255203][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 630.260439][ C0] schedule+0x11b/0x1f0 [ 630.264619][ C0] futex_wait_queue_me+0x25b/0x480 [ 630.269759][ C0] futex_wait+0x2f8/0x740 [ 630.274138][ C0] ? do_futex+0x1810/0x1810 [ 630.278716][ C0] ? reacquire_held_locks+0x660/0x660 [ 630.284128][ C0] ? print_irqtrace_events+0x210/0x210 [ 630.289762][ C0] do_futex+0x1414/0x1810 [ 630.294119][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 630.299442][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 630.304671][ C0] ? rcu_lock_release+0x5/0x20 [ 630.309456][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 630.314589][ C0] ? __context_tracking_exit+0x4c/0x80 [ 630.320079][ C0] __se_sys_futex+0x407/0x490 [ 630.324792][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 630.329966][ C0] ? rcu_is_watching+0x11/0xa0 [ 630.334759][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 630.339564][ C0] do_syscall_64+0x3b/0xb0 [ 630.344009][ C0] ? clear_bhb_loop+0x15/0x70 [ 630.348702][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 630.354620][ C0] RIP: 0033:0x7f59cf713169 [ 630.359054][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.378902][ C0] RSP: 002b:00007f59cd55a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 630.387357][ C0] RAX: ffffffffffffffda RBX: 00007f59cf93b088 RCX: 00007f59cf713169 [ 630.395358][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f59cf93b088 [ 630.403353][ C0] RBP: 00007f59cf93b080 R08: 0000000000000000 R09: 0000000000000000 [ 630.411344][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f59cf93b08c [ 630.419373][ C0] R13: 0000000000000000 R14: 00007ffc9f455920 R15: 00007ffc9f455a08 [ 630.427396][ C0]