last executing test programs: 2m51.169306535s ago: executing program 32 (id=51): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000840)={[{@norecovery}, {@nodiscard}, {@noblock_validity}, {@noquota}, {@resuid}, {@mblk_io_submit}, {@abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@noload}, {@grpjquota}]}, 0x64, 0x51c, &(0x7f0000000200)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020) 2m50.289468922s ago: executing program 0 (id=102): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x3665, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 2m49.422157359s ago: executing program 0 (id=104): syz_open_dev$vim2m(0x0, 0xf, 0x2) ioctl$FITRIM(0xffffffffffffffff, 0x40106e8c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0xfffffffffffffffc, {0x0, 0x1, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 2m47.707206683s ago: executing program 0 (id=112): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m46.066664935s ago: executing program 0 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x0) shutdown(r3, 0x1) 2m44.449275838s ago: executing program 0 (id=118): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x17, 0x0, 0x0, @str='\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0xf8, r4, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, r4}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000300)={@random="578b5d19cae2", @broadcast, @void, {@llc_tr={0x11, {@llc={0xaa, 0x80, "a3", "24e913b337537235184864d0f70b"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000090603000000000000", @ANYRES32=0x0, @ANYBLOB="adffa888f00306001c0012800e0001006970366772657461700000000800028004001200940daf333b2c58e7888aca09269ee4d2792e6025bbebc885ba29609da61a1dcc27fbe9c620d73f6a66"], 0x3c}}, 0x40050) 2m44.087523961s ago: executing program 0 (id=122): rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x3, 0x6e0, &(0x7f0000000c00)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sync() prlimit64(0x0, 0xe, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_INIT(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m36.762184828s ago: executing program 1 (id=152): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r3, &(0x7f00000001c0)=@profile={'permprofile ', ':\':\x02'}, 0x10) 2m35.762012936s ago: executing program 1 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r3, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000140)={0x0, "6105d8f4f3dae70308fd6cf501ed735b"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x14, 0x1, 0x8, 0x11019a31a4915277, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10c4}, 0x20000040) syz_genetlink_get_family_id$tipc2(&(0x7f0000002440), r5) 2m34.656124165s ago: executing program 1 (id=158): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) 2m31.629281109s ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)="f669184087b8c6242cbef8573fd18712277769d7ba74a0ed685e031d2d83134b5e67a7257d7d0231ef52c076678e416d4649d44c8d67fd8a495b119a3be74c4b35bf22d3c21c5822ffb202943be0b3a2b808861a3eaf5cb8ab16d5db09fefd8b2930e8a0c1880920825f6e2716cb3b359fdb451beebe860cd49fa5a38786d7fd172bd1aff2e30734d993d22eeb31836c71ce38d8d8124e5e255e0338eb5c2e43a95a38e0b9d4586bd2e891f324d81d4a1454bb5760b092721aead07070f01aba25e22ef7bb4ad9d4fc60445909fb2892", 0xd0, 0x3) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) mount$9p_xen(&(0x7f0000000780), &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800), 0x401, &(0x7f0000000980)={'trans=xen,', {[{@ignoreqv}, {@noextend}, {@fscache}, {@posixacl}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sysfs\x00'}}, {@uid_gt={'uid>', r1}}]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000880)={0x5, &(0x7f0000000840)=[{0xfff7, 0x6, 0x7, 0x9}, {0x3, 0x1, 0xf8, 0x3d5}, {0x81, 0x10, 0x6, 0x400}, {0xfff9, 0x9, 0xfc, 0x7f}, {0x4, 0xd, 0x7a, 0x9}]}) 2m29.024350019s ago: executing program 33 (id=122): rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x3, 0x6e0, &(0x7f0000000c00)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sync() prlimit64(0x0, 0xe, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_INIT(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m28.864749881s ago: executing program 1 (id=175): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x109343) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) 2m28.191821556s ago: executing program 1 (id=181): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) recvfrom(r2, 0x0, 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 2m28.122396336s ago: executing program 34 (id=181): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) recvfrom(r2, 0x0, 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 2m9.333986373s ago: executing program 4 (id=233): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f0000000280)="$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") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x8, 0xe79, 0x7, 0x1ff4, 0xfff, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x2, 0x7, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x8, 0xfffffffd, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x9, 0x7, 0x6, 0x2, 0x81, 0x2, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x46, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x40009, 0x80000001, 0x2, 0xc, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x3, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0x5d}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) 2m7.793263685s ago: executing program 4 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m5.580781261s ago: executing program 4 (id=244): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x242, &(0x7f0000000540)="$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") open(&(0x7f0000000280)='./file1\x00', 0x4c37e, 0xb2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0000140000001400e0ff0100000002000000010000060400001d01000000000000000000"], 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x181000, 0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) dup3(r2, r1, 0x80000) 2m5.366576133s ago: executing program 4 (id=247): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@check_normal}, {@utf8no}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@utf8}]}, 0x0, 0x27c, &(0x7f0000000800)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2m4.085955152s ago: executing program 4 (id=250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'wg2\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 2m3.437573048s ago: executing program 4 (id=255): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x200, 0x1d8, 0x1d8, 0x200, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)}}], 0x2, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x3) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 2m3.100074271s ago: executing program 35 (id=255): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x200, 0x1d8, 0x1d8, 0x200, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)}}], 0x2, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x3) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 2m0.258499882s ago: executing program 2 (id=269): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1010040, &(0x7f0000000500)=ANY=[@ANYBLOB="696f636861727365743d63703837342c757466383d312c756e695f786c6174653d312c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e39352c636f6465706167653d3835372c64656275672c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c726f64a22c7869722c756e695f786c6174653d312c73686f72746e616d653d6d697865642c00"], 0x3, 0x351, &(0x7f0000000900)="$eJzs3U9oY1UXAPCTvjTpDMzXLj4YFISnO0HLTMWFrlqGDgxmoxL8sxCD01Fp6kCDwc6imboRl4JLXblzoQsXsxZBEXcu3DqCjIoLnd2Ag0+SvCQvTdpphSjF328RDueek3tfGpLX1+bm5dXYvDwfV27fvhULC6Uor15YjTulWIokBq7HpMqUHABwMtzJsvg96ztiS2nGSwIAZqz3/v/qmULm7S8Pq8+8+wPAiZf//n/qsJqFgwauzmRJAMCMTVz/f2hsuDL+p/5y4b8CAICT6tkXXnxqrRbxTJouRGy906636/HkaHztSrwezdiIc7EYdyP6Jwrdm1Lv9uKl2vq5NE078dNS1Lsd7XrEVqdd758prCW9/mqcj8VYyvvzs40sy5KLn9XWz6c9EXG905s/tkrt+nyczuf//nRsxEqk8f+J/ohLtfWVNL+D+tagvxOxN7pu0V3/cizGt6/E1WjG5ej2Dk5rauu759P0QlYb62/Xq726vgOvgAAAAAAAAAAAAAAAAAAAAAAAwN+ynA4tDfe/yUb79ywvTxnv7Y/T78/3B9rr7w+UVbPIst/eerT+bhJj+wPt35+nXS/HnO8SAAAAAAAAAAAAAAAAAAAAgJ7WTiUazebGdmvn2mYx6Gy3duYiopt54+tPvjgVkzX3CMr5HIWhNE9d22xkyaA4S8Zq8iDpTj7IfHxjuOJiTXV4FFOXUT14qNk88+CPH4wyDySDe/5zVJPE9ANM9i2jGGz9r7+k4zxQw2DlHjU3syw7qH33pcmuKEWUj/+DOzzIusFXt16777HW2cd7mc+zvocfWXzu5vsf/bLZaEa+t0OzWdlu3c02G4O9Ho45aTJ6/swNHtVS8ZlQPqx9bzzTSL779fn73/vmaLNnxcybEzURSf9wPt0/VOkH3WXuGzo1ba75KU/+GQRnP1xt3Nj94eejdhVeJOZm+AIEAAAAAAAAAAAAAAAAAAAMFT4rnss/7Dt/WNcTT89+ZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzxl9/38h2JvIHCX4oxOTQ9WN7VZE5d8+TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/uP+CgAA///Jq2y4") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil) munmap(&(0x7f0000308000/0x4000)=nil, 0x4000) mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil) munmap(&(0x7f0000866000/0x3000)=nil, 0x3000) mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) madvise(&(0x7f0000678000/0x14000)=nil, 0x14000, 0x12) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1m59.2025317s ago: executing program 2 (id=273): sched_setscheduler(0x0, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r0, &(0x7f00000001c0)=ANY=[], 0x1a8, 0x0) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x375, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe}) 1m58.988990792s ago: executing program 2 (id=274): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x490, 0x2c, 0xd27, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x21f, 0x9, 0x3, 0xede, 0x5c, 0x5, 0x5, 0xac, 0x180000, 0x80, 0x1, 0x6, 0x7, 0x5, 0x5e93, 0x200, 0xe0, 0x1, 0x0, 0x2, 0x7fff, 0x8, 0x0, 0x849, 0x8, 0x7, 0x8, 0x2, 0x3, 0xd, 0x6, 0x3, 0xea, 0x5, 0x5, 0x4800, 0x401, 0x5a, 0x9, 0x3, 0x1000, 0x4, 0x80, 0x9d0, 0x1, 0x5, 0x5044, 0x0, 0x5, 0xc, 0x5, 0x4, 0x6, 0xc, 0x1, 0x2, 0x8a58, 0xfff, 0xd, 0xb, 0x549bccfa, 0x7fff, 0x81, 0x80000001, 0x8, 0x4, 0x5, 0xffffffff, 0x3, 0x7, 0x0, 0x5, 0x3, 0x3, 0x0, 0xfff, 0xfeffffff, 0x5, 0x7, 0x81, 0x3, 0x6, 0x6, 0x8b, 0xf5f, 0x10, 0x0, 0x2, 0x6, 0xda2, 0x9, 0xc00000, 0x1000, 0x8001, 0x1800000, 0x8, 0x3, 0x7, 0x8, 0x101, 0x1, 0x1, 0x9, 0x0, 0xff, 0x3, 0x9, 0x8, 0x3, 0x4, 0x1ff, 0x8, 0x1, 0x3, 0x104, 0x2, 0xffffffff, 0x1, 0x40, 0x9, 0xf, 0x0, 0x10000, 0xd8000000, 0xb0a, 0x8, 0xfffffff9, 0x6b, 0x81, 0x7fff, 0xffff, 0x3, 0x6716ec5, 0x8, 0x10000, 0x8, 0x32, 0x0, 0x492, 0x7, 0xf7c, 0x6, 0x8000, 0xb5, 0x7, 0x967, 0xff, 0x7fffffff, 0x3ff, 0x0, 0x7, 0x9, 0x2, 0xe5, 0x6, 0x6, 0x2, 0x3, 0x0, 0x200, 0x9, 0x1, 0x9, 0x6, 0x8000, 0x3, 0x80000002, 0x8, 0x1, 0x7, 0x9, 0x9, 0x7, 0x6, 0xfffffffd, 0x7, 0x2, 0x80, 0x79a, 0x10, 0x8, 0x9, 0xfffff800, 0x80, 0x3, 0xd0, 0x6, 0x6e, 0xe, 0x8040, 0x6, 0xa, 0x6, 0x5, 0x1ff, 0x7, 0xde4, 0x7, 0x8, 0x8, 0xff, 0xcc5, 0x8000, 0x8f8e, 0x1, 0x8, 0x7, 0xfff, 0x0, 0x9, 0x6, 0x4000000, 0x6, 0x0, 0xd, 0x0, 0x95ef, 0x7, 0x40, 0x10, 0x3, 0x1000, 0xff, 0x5, 0x80000000, 0x5c40, 0x3, 0x6, 0x401, 0x6, 0x7ff, 0x0, 0x6, 0x9, 0x18ed4545, 0xbf, 0xd8000000, 0x1000, 0x1ff, 0x7ff, 0x5, 0x6, 0x3, 0x80000001, 0x113800, 0x0, 0x1, 0x8, 0x9e, 0x80000001, 0x400, 0x5a, 0x1, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x5, 0x7, 0x1, {0x9, 0x0, 0x3, 0x4, 0xa, 0xc}, {0x7f, 0x0, 0x10, 0xf3f, 0xfffe}, 0x5, 0x4, 0x9}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x490}}, 0x20000000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1m58.291757197s ago: executing program 2 (id=277): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x5d}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1m51.741223588s ago: executing program 2 (id=295): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x7, 0x7fff, 0x7, 0x4000, 0xb, r4, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m51.600965179s ago: executing program 2 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 1m45.788628222s ago: executing program 5 (id=317): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000003c0), 0x9, 0x82e81) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) memfd_create(0x0, 0xc) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m44.018331867s ago: executing program 5 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m42.921449426s ago: executing program 5 (id=323): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xc8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@private1, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x3, 0x7, 0x8, 0x0, 0x2, 0xfffffffffffffffc}, {}, 0x0, 0x4, 0x1}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd29, 0x7}}]}, 0xc8}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@rand_addr=' \x01\x00', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x20220}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000000780)) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000002c0)="fb149d84f90000000000000086dd704bc6813d6cdc57faeaacb9262e14961cddd515dc3a3a152ac8878adf52255bff6092c27c0ec9c9", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}]}]}, 0x28}}, 0x0) 1m42.589740059s ago: executing program 5 (id=327): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@check_normal}, {@utf8no}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@utf8}]}, 0x0, 0x27c, &(0x7f0000000800)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m41.565934358s ago: executing program 5 (id=332): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 1m38.561269481s ago: executing program 5 (id=340): add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000340)={0x0, 0x3}, 0x2) close_range(r1, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m38.389957762s ago: executing program 36 (id=340): add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000340)={0x0, 0x3}, 0x2) close_range(r1, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m35.916962792s ago: executing program 37 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 13.068504857s ago: executing program 6 (id=571): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@bsdgroups}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 11.133786322s ago: executing program 6 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x1ba, &(0x7f00000000c0)={0x0, 0x52c1, 0x0, 0x0, 0xfffffffe}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x800}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) write$binfmt_script(r2, &(0x7f0000000100), 0x61) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc67d0794e26f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000c80)=""/167, 0xa7}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 10.717705236s ago: executing program 7 (id=583): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x8500, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.658285766s ago: executing program 6 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, 0x0, &(0x7f0000000140)) 9.080548788s ago: executing program 3 (id=585): socket$packet(0x11, 0x2, 0x300) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x4000) 9.078505548s ago: executing program 6 (id=587): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_simple={0x30, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 8.89373562s ago: executing program 9 (id=589): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 8.89342292s ago: executing program 7 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0xfff2, 0x4}, {0x0, 0xfff1}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 8.743918071s ago: executing program 3 (id=591): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kexec_load(0x9, 0x0, 0x0, 0x30000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x1, 0x1}, &(0x7f0000000340)=[{}]) 8.640812831s ago: executing program 3 (id=592): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) 7.789651838s ago: executing program 9 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) 7.656884939s ago: executing program 7 (id=595): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000080, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.656673949s ago: executing program 3 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x1ba, &(0x7f00000000c0)={0x0, 0x52c1, 0x0, 0x0, 0xfffffffe}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x800}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) write$binfmt_script(r2, &(0x7f0000000100), 0x61) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc67d0794e26f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000c80)=""/167, 0xa7}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 5.725912165s ago: executing program 8 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x6) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 5.440989797s ago: executing program 7 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) 5.440472217s ago: executing program 8 (id=599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) 5.415967497s ago: executing program 3 (id=600): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000580), 0x24, 0x0) 5.415792117s ago: executing program 9 (id=601): r0 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) 4.573670254s ago: executing program 6 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 4.364755655s ago: executing program 8 (id=603): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, 0x0, &(0x7f0000000180)) 3.582602531s ago: executing program 7 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3.385698053s ago: executing program 9 (id=605): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000000)=""/4096, 0x1000) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@gettaction={0x18, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.078091823s ago: executing program 8 (id=606): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001200)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x0, 0x398, 0x1d8, 0x1d8, 0x398, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r2 = epoll_create1(0x80000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)={0x80002002}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 1.912884335s ago: executing program 3 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300), 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.721719056s ago: executing program 8 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0xfebe}}, 0x200040d1) 1.570251327s ago: executing program 9 (id=609): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.549268748s ago: executing program 7 (id=610): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86f2c6", 0xb}], 0x1}, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r4, {0xfff3}, {0xffe0}, {0x2, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.543983827s ago: executing program 6 (id=611): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 100.799099ms ago: executing program 8 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 0s ago: executing program 9 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) kernel console output (not intermixed with test programs): im netdevsim6 netdevsim3: renamed from eth3 [ 111.174518][ T4771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.217684][ T4771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.985234][ T4872] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.210: Allocating blocks 497-513 which overlap fs metadata [ 112.027471][ T4872] EXT4-fs (loop4): pa 00000000c6462b74: logic 7808, phys. 129, len 24 [ 112.029627][ T4872] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 23, pa_free 24 [ 112.148236][ T4771] team0: Port device team_slave_0 added [ 112.189681][ T4771] team0: Port device team_slave_1 added [ 112.240919][ T4771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.249094][ T4771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.282550][ T4771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.441330][ T4901] udc-core: couldn't find an available UDC or it's busy [ 112.450461][ T4901] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.455608][ T4771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.457496][ T4771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.469346][ T4771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.351361][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.369894][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.405419][ T4735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.407994][ T4735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.426616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.429299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.431885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.466990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.479540][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.481957][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.491111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.497930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.505113][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.506918][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.513786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.519698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.533532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.544783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.557009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.575685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.589520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.607619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.627846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.660661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.667107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.669639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.692913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.849342][ T26] audit: type=1400 audit(113.800:117): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=4908 comm="syz.2.216" [ 114.552351][ T4922] loop2: detected capacity change from 0 to 47 [ 114.805488][ T4771] device hsr_slave_0 entered promiscuous mode [ 114.833059][ T4771] device hsr_slave_1 entered promiscuous mode [ 115.575557][ T4771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.579289][ T4771] Cannot create hsr debugfs directory [ 115.946714][ T4944] loop5: detected capacity change from 0 to 128 [ 116.088362][ T4944] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 116.092297][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.855570][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.857802][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.057143][ T4408] sysv_free_block: flc_count > flc_size [ 117.059105][ T4408] sysv_free_block: flc_count > flc_size [ 117.060465][ T4408] sysv_free_block: flc_count > flc_size [ 117.065340][ T4408] sysv_free_block: flc_count > flc_size [ 117.067432][ T4408] sysv_free_block: flc_count > flc_size [ 117.068768][ T4408] sysv_free_block: flc_count > flc_size [ 117.070114][ T4408] sysv_free_block: flc_count > flc_size [ 117.071426][ T4408] sysv_free_block: flc_count > flc_size [ 117.082727][ T4408] sysv_free_block: flc_count > flc_size [ 117.084174][ T4408] sysv_free_block: flc_count > flc_size [ 117.086320][ T4408] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 117.117144][ T4963] loop2: detected capacity change from 0 to 128 [ 117.161489][ T4963] gfs2: gfs2 mount does not exist [ 117.176713][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.226'. [ 117.224707][ T4114] device hsr_slave_0 left promiscuous mode [ 117.283509][ T4114] device hsr_slave_1 left promiscuous mode [ 117.413814][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.415964][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.420821][ T4974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.424880][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.447016][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.449655][ T4114] device bridge_slave_1 left promiscuous mode [ 117.452395][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.504734][ T4114] device bridge_slave_0 left promiscuous mode [ 117.506838][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.283499][ T4114] device veth1_macvtap left promiscuous mode [ 118.285657][ T4114] device veth0_macvtap left promiscuous mode [ 118.287220][ T4114] device veth1_vlan left promiscuous mode [ 118.288897][ T4114] device veth0_vlan left promiscuous mode [ 118.552163][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 118.569797][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 118.579578][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.630536][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.791613][ T4114] bond0 (unregistering): Released all slaves [ 118.992101][ T4978] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.001773][ T4771] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 119.089900][ T4771] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 119.146792][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.149391][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.159423][ T4771] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 119.205327][ T4771] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 119.270741][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.274750][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.278295][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.296623][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.311982][ T4735] device veth0_vlan entered promiscuous mode [ 119.336413][ T4735] device veth1_vlan entered promiscuous mode [ 119.378410][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.381375][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.384121][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.389123][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.398601][ T4735] device veth0_macvtap entered promiscuous mode [ 119.407819][ T5002] loop4: detected capacity change from 0 to 4096 [ 119.413826][ T4735] device veth1_macvtap entered promiscuous mode [ 119.436187][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.438756][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.441233][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.459839][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.468630][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.482374][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.497175][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.502702][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.504642][ T5002] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.514340][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.518843][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.521449][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.532111][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.538502][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.540939][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.560844][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.569112][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.571967][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.584275][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.700880][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.703572][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.705956][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.708314][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.710861][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.715225][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.720982][ T4735] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.724275][ T4735] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.729822][ T4735] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.736752][ T4735] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.772005][ T5014] loop2: detected capacity change from 0 to 8 [ 120.805104][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.807387][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.853936][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.858838][ T5014] Filesystem uses "unknown" compression. This is not supported [ 120.881486][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.886794][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.890648][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.183284][ T4771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.228652][ T4771] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.232974][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.235409][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.263834][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.266907][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.269326][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.271146][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.313677][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.316359][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.332246][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.335904][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.399019][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.425024][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.241'. [ 121.477359][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.497843][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.241'. [ 121.532035][ T5039] loop2: detected capacity change from 0 to 8192 [ 121.730565][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.751566][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.764409][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.800421][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.836606][ T5034] loop6: detected capacity change from 0 to 1024 [ 121.871400][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.874621][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.878122][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.887694][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.937073][ T5034] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 121.943816][ T4771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.946927][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.949231][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.951635][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.098107][ T5068] loop4: detected capacity change from 0 to 128 [ 123.130963][ T5068] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 123.193050][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.195146][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.229582][ T4771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.491811][ T5082] loop4: detected capacity change from 0 to 128 [ 124.537339][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.539132][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.595500][ T5094] xt_nat: multiple ranges no longer supported [ 124.693091][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.695808][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.792867][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.795491][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.798433][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.803635][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.821473][ T4771] device veth0_vlan entered promiscuous mode [ 124.846203][ T4771] device veth1_vlan entered promiscuous mode [ 124.925410][ T5103] netlink: 104 bytes leftover after parsing attributes in process `syz.6.251'. [ 124.994162][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.996719][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.003950][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.021759][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.035312][ T4771] device veth0_macvtap entered promiscuous mode [ 125.040194][ T4771] device veth1_macvtap entered promiscuous mode [ 125.077820][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.084166][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.088909][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.094915][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.099579][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.107562][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.133321][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.135869][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.138261][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.140810][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.146477][ T4771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.148819][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.151590][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.161719][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.175146][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.211351][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.238595][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.268098][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.270623][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.283097][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.296148][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.298699][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.301163][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.311759][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.318125][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.329943][ T4771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.343228][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.346064][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.364804][ T4771] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.369406][ T4771] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.380828][ T4771] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.413759][ T4771] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.549859][ T26] audit: type=1326 audit(125.520:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94cb5d28 code=0x7fc00000 [ 125.665025][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.667181][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.692707][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.827038][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.829441][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.835219][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.720192][ T5143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.261'. [ 126.890696][ T5154] loop2: detected capacity change from 0 to 764 [ 127.545654][ T4070] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 127.550122][ T4070] Bluetooth: hci3: Injecting HCI hardware error event [ 127.585714][ T4024] Bluetooth: hci3: hardware error 0x00 [ 127.835830][ T4114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.888492][ T4114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.931063][ T5161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'. [ 128.011628][ T4114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.133930][ T4114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.360798][ T5183] loop5: detected capacity change from 0 to 164 [ 128.390871][ T5187] loop2: detected capacity change from 0 to 256 [ 129.075739][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 129.122028][ T5187] FAT-fs (loop2): Unrecognized mount option "rod¢" or missing value [ 129.355978][ T5141] chnl_net:caif_netlink_parms(): no params data found [ 129.564153][ T5211] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 129.566869][ T5211] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 129.600594][ T5211] nullb0: p2 start 1840217545 is beyond EOD, truncated [ 129.627409][ T5211] nullb0: p3 start 2781609279 is beyond EOD, truncated [ 129.629185][ T5211] nullb0: p4 start 2763479866 is beyond EOD, truncated [ 129.644756][ T5211] nullb0: p5 size 1576935424 extends beyond EOD, truncated [ 129.658845][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.665505][ T5211] nullb0: p6 start 4255409061 is beyond EOD, truncated [ 129.673032][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.692380][ T5141] device bridge_slave_0 entered promiscuous mode [ 129.694316][ T5211] nullb0: p7 start 1354594978 is beyond EOD, truncated [ 129.696203][ T5211] nullb0: p8 start 2203294751 is beyond EOD, truncated [ 129.741684][ T5211] nullb0: p9 size 3667873493 extends beyond EOD, truncated [ 129.744054][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.760807][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.768581][ T5211] nullb0: p10 start 2534445966 is beyond EOD, truncated [ 129.770384][ T5211] nullb0: p11 start 1318227915 is beyond EOD, truncated [ 129.783938][ T5141] device bridge_slave_1 entered promiscuous mode [ 129.802978][ T5211] nullb0: p12 size 3013114410 extends beyond EOD, truncated [ 129.819980][ T5218] loop6: detected capacity change from 0 to 47 [ 129.984103][ T5141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.030520][ T5141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.274712][ T5141] team0: Port device team_slave_0 added [ 130.341248][ T5141] team0: Port device team_slave_1 added [ 130.648030][ T5141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.649998][ T5141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.674435][ T5141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.705807][ T5141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.707453][ T5141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.732760][ T5141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.895234][ T5141] device hsr_slave_0 entered promiscuous mode [ 130.954638][ T5141] device hsr_slave_1 entered promiscuous mode [ 131.074606][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.076136][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.096152][ T5141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.098959][ T5141] Cannot create hsr debugfs directory [ 131.782084][ T4072] Bluetooth: hci4: command 0x041b tx timeout [ 132.145445][ T4114] device wlan1 left promiscuous mode [ 132.149835][ T4114] bond0: (slave macvlan3): Releasing backup interface [ 133.872520][ T4069] Bluetooth: hci4: command 0x040f tx timeout [ 133.943387][ T5141] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 135.895655][ T5282] udc-core: couldn't find an available UDC or it's busy [ 135.897387][ T5282] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 135.904119][ T5282] syz.5.288 (5282): attempted to duplicate a private mapping with mremap. This is not supported. [ 135.909061][ T5282] loop5: detected capacity change from 0 to 8 [ 135.942642][ T4069] Bluetooth: hci4: command 0x0419 tx timeout [ 135.961937][ T5282] SQUASHFS error: Unable to read inode 0xe3 [ 136.203075][ T5141] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 136.264557][ T5141] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 136.374330][ T5141] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 136.456803][ T4114] device hsr_slave_0 left promiscuous mode [ 136.519425][ T4114] device hsr_slave_1 left promiscuous mode [ 136.605627][ T4114] batman_adv: batadv0: Removing interface: macvlan2 [ 136.629234][ T4114] bridge0: port 1(vlan2) entered disabled state [ 136.675958][ T4114] device macsec0 left promiscuous mode [ 136.792890][ T4114] device veth1_macvtap left promiscuous mode [ 136.794370][ T4114] device veth0_macvtap left promiscuous mode [ 136.795960][ T4114] device veth1_vlan left promiscuous mode [ 136.798168][ T4114] device veth0_vlan left promiscuous mode [ 137.167930][ T4114] bond1 (unregistering): Released all slaves [ 138.405930][ T4114] bond0 (unregistering): Released all slaves [ 138.791998][ T5327] loop6: detected capacity change from 0 to 512 [ 138.805982][ T5141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.820063][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.822997][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.830518][ T5141] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.860417][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.865483][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.867997][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.869727][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.878183][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.882156][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.889678][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.891452][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.899318][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.947559][ T5327] EXT4-fs (loop6): Test dummy encryption mode enabled [ 138.949450][ T5327] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 138.986632][ T5141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.988855][ T5141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.015047][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.017629][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.020275][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.052906][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.059145][ T5327] EXT4-fs (loop6): 1 truncate cleaned up [ 139.060637][ T5327] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 139.068198][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.071979][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.076228][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.078806][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.090652][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.095925][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.101179][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.104717][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.550377][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.553480][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.578354][ T5141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.822701][ T5327] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 139.906416][ T5370] siw: device registration error -23 [ 140.643266][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.646230][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.704386][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.707091][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.709913][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.723570][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.753092][ T5327] fscrypt (loop6): Error allocating 'xts(aes)' transform: -4 [ 140.770431][ T5141] device veth0_vlan entered promiscuous mode [ 140.797243][ T5141] device veth1_vlan entered promiscuous mode [ 140.918565][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.921253][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.924254][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.946859][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.967427][ T5141] device veth0_macvtap entered promiscuous mode [ 140.997075][ T5384] netlink: 68 bytes leftover after parsing attributes in process `syz.6.306'. [ 141.003433][ T5141] device veth1_macvtap entered promiscuous mode [ 141.017962][ T5381] tipc: Started in network mode [ 141.019333][ T5381] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 141.021973][ T5381] tipc: Enabled bearer , priority 10 [ 141.039270][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.041884][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.056627][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.059176][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.061480][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.070627][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.078230][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.080822][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.088716][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.091333][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.112304][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.118327][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.120347][ T5387] loop6: detected capacity change from 0 to 256 [ 141.141542][ T5141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.160662][ T5387] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 141.166778][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.169505][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.171971][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.185707][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.190310][ T5387] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 141.195734][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.196503][ T5387] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 141.198216][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.198254][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.216004][ T5387] UDF-fs: Scanning with blocksize 512 failed [ 141.217413][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.219948][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.232061][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.236560][ T5387] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 141.236834][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.246590][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.249073][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.251650][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.259475][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.262065][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.272246][ T5141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.280271][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.283473][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.305896][ T5387] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.327841][ T5141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.340387][ T5141] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.351577][ T5141] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.362598][ T5141] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.166348][ T7] tipc: Node number set to 15444650 [ 142.281215][ T566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.297390][ T1813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.299504][ T1813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.304392][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.319404][ T566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.346824][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.455860][ T5403] loop6: detected capacity change from 0 to 128 [ 142.593866][ T5403] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 142.705694][ T5423] netlink: 'syz.7.316': attribute type 1 has an invalid length. [ 144.628656][ T5454] netlink: 'syz.7.330': attribute type 33 has an invalid length. [ 144.632604][ T5454] netlink: 120 bytes leftover after parsing attributes in process `syz.7.330'. [ 145.842231][ T5477] tipc: Started in network mode [ 145.855907][ T5479] loop8: detected capacity change from 0 to 512 [ 145.862840][ T5477] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 145.865988][ T5477] tipc: Enabled bearer , priority 10 [ 146.071623][ T5479] EXT4-fs (loop8): Test dummy encryption mode enabled [ 146.073434][ T5479] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 146.105545][ T5479] EXT4-fs (loop8): 1 truncate cleaned up [ 146.107124][ T5479] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 146.814757][ T5497] loop5: detected capacity change from 0 to 128 [ 146.851680][ T5479] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 146.923706][ T21] tipc: Node number set to 15444650 [ 147.092164][ T5506] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.093977][ T5506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.102407][ T5506] xt_nat: multiple ranges no longer supported [ 150.460961][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.343'. [ 150.465003][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 150.466641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.468604][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.470610][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.472623][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.474555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.476459][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.478416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.480322][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.482203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.484185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.486022][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.487954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.489815][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.491750][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.493865][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.495796][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.497674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.499734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.501756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.503733][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.505697][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.507624][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.509692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.511622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.513608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.515503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.517399][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.519325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.521031][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.523079][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.524944][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.526776][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.528716][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.530602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.532571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.534494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.536452][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.538417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.540393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.542307][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.544264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.546179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.548053][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.550000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.551915][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.554005][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.555783][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.557757][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.559675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.561513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.563491][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.565385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.567241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.569244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.571171][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.573251][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.575258][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.577139][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.579013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.580780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.582702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.584643][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.586540][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.588500][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.590395][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.592314][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.594242][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.596169][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.597956][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.600036][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.601862][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.603866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.605838][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.607812][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.609637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.611586][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.613543][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.615483][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.617201][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.619139][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.621030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.623206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.625102][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.627046][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.628901][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.630734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.632862][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.635402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.637512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.639462][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.641373][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.643329][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.645204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.647302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.649204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.651143][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.653106][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.656474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.658348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.660322][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.662273][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.664365][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.666167][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.667903][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.669590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.671527][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.673572][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.675532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.677374][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.679258][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.681203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.683234][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.685122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.687071][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.688818][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.690773][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.692787][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.694748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.696717][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.698617][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.700457][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.702311][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.704378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.706329][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.708168][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.710097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.712030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.714035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.715964][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.717948][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.719943][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.721893][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.723947][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.725797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.727708][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.729764][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.731624][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.733620][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.735557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.737481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.739379][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.741238][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.743121][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.745084][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.746989][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.748923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.750870][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.752881][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.754828][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.756952][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.758905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.760968][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.762929][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.764859][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.766829][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.768804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.770662][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.772703][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.774589][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.776527][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.778447][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.780356][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.782352][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.784335][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.786132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.788097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.789952][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.791864][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.793798][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.795707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.797596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.799547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.801470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.803439][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.805289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.807210][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.809154][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.811053][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.812977][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.814891][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.816743][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.818609][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.820565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.822532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.824360][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.826453][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.828352][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.830413][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.832261][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.834354][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.836307][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.838280][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.840205][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.842498][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.844422][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.846397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.848331][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.850294][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.852221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.854242][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.856198][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.858076][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.860030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.861997][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.864010][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.865948][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.867775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.869699][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.871557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.873804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.875845][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.877822][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.879722][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.881686][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.884008][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.885847][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.887659][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.889588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.891510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.893512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.895410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.897385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.899257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.725931][ T4114] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.781395][ T4114] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.903319][ T4114] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.912197][ T5586] loop8: detected capacity change from 0 to 8192 [ 152.912791][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 152.971461][ T5586] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 152.980585][ T5586] REISERFS (device loop8): using ordered data mode [ 152.980657][ T4114] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.982227][ T5586] reiserfs: using flush barriers [ 153.020532][ T5586] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.049241][ T5586] REISERFS (device loop8): checking transaction log (loop8) [ 153.087919][ T5586] REISERFS (device loop8): Using rupasov hash to sort names [ 153.098151][ T5586] REISERFS (device loop8): using 3.5.x disk format [ 153.113613][ T5586] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.121089][ T5586] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.128663][ T5586] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.131561][ T5586] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 153.139194][ T5586] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 153.616017][ T5610] ODEBUG: Out of memory. ODEBUG disabled [ 154.303152][ T5611] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.306178][ T5611] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.309185][ T5611] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.331016][ T5609] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.333874][ T5609] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.336554][ T5609] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.339280][ T5609] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 154.617269][ T5587] chnl_net:caif_netlink_parms(): no params data found [ 154.654742][ T4114] tipc: Disabling bearer [ 154.656844][ T4114] tipc: Left network mode [ 154.695227][ T5616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.352'. [ 154.716950][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.793689][ T5616] device bridge_slave_1 left promiscuous mode [ 154.809064][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.873212][ T5566] chnl_net:caif_netlink_parms(): no params data found [ 155.626073][ T4100] Bluetooth: hci6: command 0x0409 tx timeout [ 155.630681][ T4100] Bluetooth: hci5: command 0x041b tx timeout [ 157.705819][ T4100] Bluetooth: hci5: command 0x040f tx timeout [ 157.707379][ T4100] Bluetooth: hci6: command 0x041b tx timeout [ 157.858709][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.860508][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.868874][ T5587] device bridge_slave_0 entered promiscuous mode [ 157.902885][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.904899][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.911405][ T5587] device bridge_slave_1 entered promiscuous mode [ 157.952288][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.602331][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.605230][ T5566] device bridge_slave_0 entered promiscuous mode [ 158.610422][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.619242][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.621880][ T5566] device bridge_slave_1 entered promiscuous mode [ 158.717637][ T5566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.843488][ T5566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.849124][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.914491][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.004437][ T5566] team0: Port device team_slave_0 added [ 159.033597][ T5587] team0: Port device team_slave_0 added [ 159.037056][ T5587] team0: Port device team_slave_1 added [ 159.041847][ T5566] team0: Port device team_slave_1 added [ 159.776680][ T5566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.778532][ T5566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.839104][ T4100] Bluetooth: hci6: command 0x040f tx timeout [ 159.844517][ T4100] Bluetooth: hci5: command 0x0419 tx timeout [ 159.846780][ T5566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.851116][ T5566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.853000][ T5566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.859500][ T5566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.868674][ T5665] loop7: detected capacity change from 0 to 8192 [ 159.935265][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.363'. [ 159.984082][ T5665] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 159.986485][ T5665] REISERFS (device loop7): using ordered data mode [ 159.988103][ T5665] reiserfs: using flush barriers [ 159.991908][ T5665] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.014502][ T5665] REISERFS (device loop7): checking transaction log (loop7) [ 160.018171][ T5665] REISERFS (device loop7): Using rupasov hash to sort names [ 160.020107][ T5665] REISERFS (device loop7): using 3.5.x disk format [ 160.022027][ T5665] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.027009][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.028687][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.033434][ T5665] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.039590][ T5665] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.043351][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.050995][ T5665] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 160.057366][ T5665] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 160.059972][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.061745][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.085138][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.274046][ T5566] device hsr_slave_0 entered promiscuous mode [ 160.392487][ T5692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.395943][ T5692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.399906][ T5692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.415156][ T5692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.418556][ T5692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.422612][ T5692] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.425817][ T5692] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 160.568388][ T5566] device hsr_slave_1 entered promiscuous mode [ 160.612518][ T5566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.614457][ T5566] Cannot create hsr debugfs directory [ 160.629784][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.365'. [ 160.639001][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.683652][ T5690] device bridge_slave_1 left promiscuous mode [ 160.685397][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.935961][ T5587] device hsr_slave_0 entered promiscuous mode [ 160.983231][ T5587] device hsr_slave_1 entered promiscuous mode [ 161.012709][ T5587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.014607][ T5587] Cannot create hsr debugfs directory [ 161.534753][ T5587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.158238][ T4070] Bluetooth: hci6: command 0x0419 tx timeout [ 163.208318][ T5566] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 163.244608][ T5566] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.266773][ T5566] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.787695][ T5587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.077343][ T5566] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 164.214565][ T5587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.311167][ T5587] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.379657][ T4114] device hsr_slave_0 left promiscuous mode [ 164.403433][ T4114] device hsr_slave_1 left promiscuous mode [ 164.482917][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.484701][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.487211][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.489077][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.492672][ T4114] device bridge_slave_1 left promiscuous mode [ 164.494271][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.533586][ T4114] device bridge_slave_0 left promiscuous mode [ 164.535257][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.655368][ T5746] loop8: detected capacity change from 0 to 512 [ 164.822825][ T4114] device veth1_macvtap left promiscuous mode [ 164.824485][ T4114] device veth0_macvtap left promiscuous mode [ 164.826065][ T4114] device veth1_vlan left promiscuous mode [ 164.827504][ T4114] device veth0_vlan left promiscuous mode [ 166.465918][ T5746] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 167.531839][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 167.540919][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 167.560792][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.608742][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.768113][ T4114] bond0 (unregistering): Released all slaves [ 167.874934][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.376'. [ 167.879954][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.905487][ T5762] device bridge_slave_1 left promiscuous mode [ 167.907148][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.978871][ T5566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.123757][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.127669][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.212052][ T5566] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.007302][ T5773] loop6: detected capacity change from 0 to 8192 [ 169.022902][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.025562][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.028256][ T1631] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.030063][ T1631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.036991][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.049378][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.059515][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.061325][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.063596][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.066435][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.070962][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.074225][ T5587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.107670][ T5773] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 169.109930][ T5773] REISERFS (device loop6): using ordered data mode [ 169.111560][ T5773] reiserfs: using flush barriers [ 169.121485][ T5587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.144181][ T5773] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.148376][ T5773] REISERFS (device loop6): checking transaction log (loop6) [ 169.164960][ T5773] REISERFS (device loop6): Using rupasov hash to sort names [ 169.166687][ T5773] REISERFS (device loop6): using 3.5.x disk format [ 169.168745][ T5773] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.198043][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.200889][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.201326][ T5773] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.205568][ T5773] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.208965][ T5773] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 169.221024][ T5773] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 169.221183][ T5587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.245510][ T5587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.265423][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.267917][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.270874][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.274177][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.276719][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.283409][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.285998][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.338471][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.349418][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.388452][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.458373][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.460749][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.465670][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.468311][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.470660][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.472381][ T5580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.475039][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.477647][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.480024][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.481812][ T5580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.484276][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.486999][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.489682][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.492423][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.497369][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.500158][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.542569][ T25] Bluetooth: hci2: command 0x0406 tx timeout [ 169.559433][ T5797] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.562919][ T5797] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.567894][ T5797] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.583535][ T5797] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.587009][ T5797] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.590549][ T5797] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.593772][ T5797] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 169.670784][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.739741][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.743641][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.746225][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.750707][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.860750][ T5566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.078244][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.080757][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.090423][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.092374][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.132794][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.135359][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.137836][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.151722][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.155634][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.163278][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.167901][ T5566] device veth0_vlan entered promiscuous mode [ 170.195903][ T5566] device veth1_vlan entered promiscuous mode [ 170.227884][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.230299][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.234184][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.262216][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.285630][ T5566] device veth0_macvtap entered promiscuous mode [ 170.290721][ T5566] device veth1_macvtap entered promiscuous mode [ 170.368044][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.370573][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.377635][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.380209][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.385503][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.388086][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.390545][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.395719][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.403678][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.406147][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.408525][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.410986][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.438403][ T5566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.441762][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.446064][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.448496][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.450499][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.452426][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.461556][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.481621][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.511879][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.520750][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.532024][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.535774][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.538077][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.540590][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.552553][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.555017][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.557304][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.559745][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.562156][ T5566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.574187][ T5566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.577848][ T5566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.593172][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.596216][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.617049][ T5566] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.619170][ T5566] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.622157][ T5566] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.634883][ T5566] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.638328][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.641068][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.679406][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.681987][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.694225][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.697178][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.703733][ T5587] device veth0_vlan entered promiscuous mode [ 170.754955][ T5587] device veth1_vlan entered promiscuous mode [ 170.830499][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.833332][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.836490][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.852699][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.854843][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.859350][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.887057][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.892040][ T5587] device veth0_macvtap entered promiscuous mode [ 170.919405][ T5587] device veth1_macvtap entered promiscuous mode [ 170.962395][ T296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.964626][ T296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.969060][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.972179][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.975624][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.003221][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.005834][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.008152][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.010454][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.032037][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.038437][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.041112][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.052589][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.055056][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.057772][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.060313][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.072763][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.075329][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.077953][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.095467][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.104006][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.136058][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.159718][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.162366][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.174052][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.176561][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.365177][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.367690][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.370058][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.415702][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.340429][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.346928][ T5845] loop9: detected capacity change from 0 to 512 [ 172.380765][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.395179][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.398879][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.405292][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.419848][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.430525][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.484147][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.486693][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.495336][ T5587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.497474][ T5587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.504697][ T5587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.514584][ T5587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.624035][ T5845] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 172.626602][ T5845] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.694678][ T5845] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 172.703224][ T5845] EXT4-fs (loop9): 1 truncate cleaned up [ 172.704723][ T5845] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier=0x000000000000f90d,jqfmt=vfsold,journal_ioprio=0x0000000000000000,usrquota,barrier,,errors=continue. Quota mode: writeback. [ 172.757171][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.759335][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.763170][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.781618][ T4173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.784803][ T4173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.789609][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.879834][ T5860] loop7: detected capacity change from 0 to 4096 [ 175.759783][ T5860] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 177.171788][ T5898] device wlan0 entered promiscuous mode [ 177.173547][ T5898] device macsec1 entered promiscuous mode [ 177.235652][ T5898] device wlan0 left promiscuous mode [ 177.454067][ T5916] netlink: 28 bytes leftover after parsing attributes in process `syz.7.394'. [ 177.492096][ T5916] netlink: 28 bytes leftover after parsing attributes in process `syz.7.394'. [ 178.327670][ T5916] device netdevsim0 entered promiscuous mode [ 178.435083][ T5927] loop3: detected capacity change from 0 to 512 [ 178.460099][ T5925] loop8: detected capacity change from 0 to 512 [ 178.483170][ T5916] device syz_tun entered promiscuous mode [ 178.495957][ T5927] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 178.498704][ T5927] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.554173][ T5916] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 178.556153][ T5916] Cannot create hsr debugfs directory [ 179.664110][ T5925] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 179.664110][ T5925] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 179.664110][ T5925] [ 179.668683][ T5925] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.696984][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 179.745806][ T5925] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 179.797093][ T5925] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 179.800219][ T5927] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 179.801250][ T5925] EXT4-fs (loop8): 1 truncate cleaned up [ 179.810551][ T5927] EXT4-fs (loop3): 1 truncate cleaned up [ 179.812032][ T5927] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x000000000000f90d,jqfmt=vfsold,journal_ioprio=0x0000000000000000,usrquota,barrier,,errors=continue. Quota mode: writeback. [ 179.873570][ T5925] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 179.985322][ T5953] loop7: detected capacity change from 0 to 512 [ 180.037659][ T5955] loop6: detected capacity change from 0 to 128 [ 181.265140][ T5953] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 181.297697][ T5971] device wlan0 entered promiscuous mode [ 181.299242][ T5971] device macsec1 entered promiscuous mode [ 181.322862][ T5971] device wlan0 left promiscuous mode [ 181.517998][ T5982] loop6: detected capacity change from 0 to 512 [ 182.249822][ T5982] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 182.252198][ T5982] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.288566][ T5984] netlink: 'syz.8.410': attribute type 5 has an invalid length. [ 182.315374][ T5982] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 182.319655][ T5982] EXT4-fs (loop6): 1 truncate cleaned up [ 182.321100][ T5982] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x000000000000f90d,jqfmt=vfsold,journal_ioprio=0x0000000000000000,usrquota,barrier,,errors=continue. Quota mode: writeback. [ 183.634643][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.8.417'. [ 184.596078][ T6008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.601603][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.416'. [ 184.621604][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.416'. [ 184.805027][ T6011] device netdevsim0 entered promiscuous mode [ 184.853218][ T6011] device syz_tun entered promiscuous mode [ 184.882959][ T6011] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 184.884768][ T6011] Cannot create hsr debugfs directory [ 184.894377][ T6012] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 184.913190][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 184.916031][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 184.937517][ T5993] loop7: detected capacity change from 0 to 32768 [ 184.941008][ T6014] bond1: (slave macvlan2): Error -95 calling set_mac_address [ 185.143514][ T5993] XFS (loop7): Mounting V5 Filesystem [ 186.245042][ T6056] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.247830][ T6056] F2FS-fs (loop13): Unable to read 1th superblock [ 186.249835][ T6056] blk_update_request: I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.252761][ T6056] F2FS-fs (loop13): Unable to read 2th superblock [ 187.044266][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 187.241505][ T6057] device team1 entered promiscuous mode [ 187.252288][ T6057] 8021q: adding VLAN 0 to HW filter on device team1 [ 188.110528][ T6067] netlink: 47 bytes leftover after parsing attributes in process `syz.9.427'. [ 188.112816][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.9.427'. [ 188.916756][ T5993] XFS (loop7): Ending clean mount [ 188.924940][ T5993] XFS (loop7): Quotacheck needed: Please wait. [ 188.968764][ T6078] loop6: detected capacity change from 0 to 256 [ 189.010347][ T5993] XFS (loop7): Quotacheck: Done. [ 189.024921][ T6078] FAT-fs (loop6): Unrecognized mount option "shortname=" or missing value [ 189.109631][ T4771] XFS (loop7): Unmounting Filesystem [ 191.457267][ T6108] loop8: detected capacity change from 0 to 8 [ 191.733811][ T6085] SQUASHFS error: Failed to read block 0x6e6: -5 [ 191.735516][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 191.737411][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 191.739787][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 191.747817][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 191.749683][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 191.751521][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 191.772836][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 191.786008][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 191.787955][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 192.543193][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 192.546522][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 192.548232][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 192.549938][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 192.551715][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 192.593024][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.638118][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 192.639809][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 192.641410][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 192.651980][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 192.654800][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 192.656641][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 192.658316][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 192.660119][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 192.661783][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 192.681550][ T6117] loop3: detected capacity change from 0 to 512 [ 193.209778][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.468498][ T6117] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 193.475057][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.477083][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.479478][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.481480][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.485176][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.487270][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.489064][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.491009][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.519451][ T6117] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 193.539798][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.541606][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.566194][ T6108] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.568071][ T6108] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.569878][ T6108] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.588843][ T6117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 193.591513][ T6117] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.612922][ T6117] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.441: attempt to clear invalid blocks 1024 len 1 [ 193.640775][ T6117] EXT4-fs (loop3): Remounting filesystem read-only [ 193.659893][ T6117] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.441: bg 0: block 361: padding at end of block bitmap is not set [ 193.674214][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.676153][ T6108] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.693527][ T6117] EXT4-fs (loop3): Remounting filesystem read-only [ 193.695152][ T6117] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 193.703719][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.705656][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.723056][ T6117] EXT4-fs (loop3): Remounting filesystem read-only [ 193.724940][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.726700][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.734299][ T6117] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.441: invalid indirect mapped block 1811939328 (level 0) [ 193.753966][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.756270][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.758039][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.759770][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.761539][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.764296][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.766053][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.766168][ T6117] EXT4-fs (loop3): Remounting filesystem read-only [ 193.767732][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.771075][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.772816][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.774623][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.776194][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.777967][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.779604][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.781329][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.784345][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.786273][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.788009][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.789790][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.789835][ T6117] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.441: invalid indirect mapped block 2185560079 (level 1) [ 193.791350][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.796420][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.798058][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.799719][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.801250][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.803108][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.804775][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.806669][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 193.810811][ T6085] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 193.812738][ T6085] SQUASHFS error: read_indexes: reading block [6e4:0] [ 194.547010][ T6117] EXT4-fs (loop3): Remounting filesystem read-only [ 194.548847][ T6117] EXT4-fs (loop3): 1 truncate cleaned up [ 194.550211][ T6117] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 194.626382][ T6130] loop9: detected capacity change from 0 to 4096 [ 194.667988][ T6130] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 194.689338][ T6140] loop7: detected capacity change from 0 to 2048 [ 194.722775][ T26] audit: type=1326 audit(194.690:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.441" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0f0d28 code=0x0 [ 194.805702][ T6140] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.832013][ T6130] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 194.875287][ T6140] fs-verity: sha512 using implementation "sha512-arm64" [ 195.085614][ T6071] ntfs3: loop9: ino=1b, Internal error [ 195.087236][ T6071] ntfs3: loop9: ntfs3_write_inode r=1b failed, -22. [ 196.948259][ T6175] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.950948][ T6175] F2FS-fs (loop15): Unable to read 1th superblock [ 196.952696][ T6175] blk_update_request: I/O error, dev loop15, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.955367][ T6175] F2FS-fs (loop15): Unable to read 2th superblock [ 200.993457][ T4036] Bluetooth: hci6: link tx timeout [ 200.995036][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.998681][ T4036] Bluetooth: hci6: link tx timeout [ 200.999937][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.001782][ T4036] Bluetooth: hci6: link tx timeout [ 201.003168][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.005136][ T4036] Bluetooth: hci6: link tx timeout [ 201.006254][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.008178][ T4036] Bluetooth: hci6: link tx timeout [ 201.009412][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.011467][ T4036] Bluetooth: hci6: link tx timeout [ 201.012806][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.015012][ T4036] Bluetooth: hci6: link tx timeout [ 201.016313][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.018348][ T4036] Bluetooth: hci6: link tx timeout [ 201.019577][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.021551][ T4036] Bluetooth: hci6: link tx timeout [ 201.022826][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.024736][ T4036] Bluetooth: hci6: link tx timeout [ 201.026000][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.028083][ T4036] Bluetooth: hci6: link tx timeout [ 201.029391][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.031438][ T4036] Bluetooth: hci6: link tx timeout [ 201.032779][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.035762][ T4036] Bluetooth: hci6: link tx timeout [ 201.036991][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.038931][ T4036] Bluetooth: hci6: link tx timeout [ 201.040113][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.042218][ T4036] Bluetooth: hci6: link tx timeout [ 201.043549][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.046194][ T4036] Bluetooth: hci6: link tx timeout [ 201.047391][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.049231][ T4036] Bluetooth: hci6: link tx timeout [ 201.050445][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.052495][ T4036] Bluetooth: hci6: link tx timeout [ 201.053764][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.055805][ T4036] Bluetooth: hci6: link tx timeout [ 201.057093][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.058995][ T4036] Bluetooth: hci6: link tx timeout [ 201.060186][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.062163][ T4036] Bluetooth: hci6: link tx timeout [ 201.063623][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.092810][ T4036] Bluetooth: hci6: link tx timeout [ 201.094045][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.095967][ T4036] Bluetooth: hci6: link tx timeout [ 201.097231][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.099815][ T4036] Bluetooth: hci6: link tx timeout [ 201.101092][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.108733][ T6223] netlink: 'syz.9.461': attribute type 1 has an invalid length. [ 201.110520][ T4036] Bluetooth: hci6: link tx timeout [ 201.111892][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.114004][ T4036] Bluetooth: hci6: link tx timeout [ 201.115232][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.117291][ T4036] Bluetooth: hci6: link tx timeout [ 201.118573][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.120542][ T4036] Bluetooth: hci6: link tx timeout [ 201.121749][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.123828][ T4036] Bluetooth: hci6: link tx timeout [ 201.125120][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.127181][ T4036] Bluetooth: hci6: link tx timeout [ 201.128458][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.130446][ T4036] Bluetooth: hci6: link tx timeout [ 201.131724][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.138113][ T4036] Bluetooth: hci6: link tx timeout [ 201.139541][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.141359][ T4036] Bluetooth: hci6: link tx timeout [ 201.142680][ T4036] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.288804][ T6225] loop8: detected capacity change from 0 to 512 [ 201.333682][ T6223] device bridge1 entered promiscuous mode [ 201.380708][ T6225] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 201.383089][ T6225] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 201.404718][ T6225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 201.408061][ T6225] EXT4-fs (loop8): orphan cleanup on readonly fs [ 201.423009][ T6225] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.460: attempt to clear invalid blocks 1024 len 1 [ 201.440927][ T6225] EXT4-fs (loop8): Remounting filesystem read-only [ 201.468063][ T6225] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.460: bg 0: block 361: padding at end of block bitmap is not set [ 201.488082][ T6225] EXT4-fs (loop8): Remounting filesystem read-only [ 201.503608][ T6225] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 201.511999][ T6225] EXT4-fs (loop8): Remounting filesystem read-only [ 201.522727][ T6225] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.460: invalid indirect mapped block 1811939328 (level 0) [ 201.532215][ T6225] EXT4-fs (loop8): Remounting filesystem read-only [ 201.534694][ T6225] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.460: invalid indirect mapped block 2185560079 (level 1) [ 201.542629][ T6225] EXT4-fs (loop8): Remounting filesystem read-only [ 201.544448][ T6225] EXT4-fs (loop8): 1 truncate cleaned up [ 201.548020][ T6225] EXT4-fs (loop8): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 201.661091][ T26] audit: type=1326 audit(201.630:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.8.460" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaa08d28 code=0x0 [ 201.689087][ T6237] netlink: 'syz.9.463': attribute type 10 has an invalid length. [ 201.817946][ T6237] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 203.167211][ T4068] Bluetooth: hci6: command 0x0406 tx timeout [ 203.206343][ T6261] loop8: detected capacity change from 0 to 2048 [ 204.116604][ T6261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.417670][ T6279] binder: 6276:6279 tried to acquire reference to desc 0, got 1 instead [ 204.433263][ T6279] binder: 6276:6279 got transaction with invalid offsets ptr [ 204.447461][ T6279] binder: 6276:6279 transaction failed 29201/-22, size 120-24 line 3417 [ 204.479180][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.659042][ T6298] loop9: detected capacity change from 0 to 512 [ 205.666925][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.8.478'. [ 205.750352][ T6298] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 205.752425][ T6298] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 206.568209][ T6298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 206.580220][ T6298] EXT4-fs (loop9): orphan cleanup on readonly fs [ 206.783952][ T6298] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.477: attempt to clear invalid blocks 1024 len 1 [ 206.801071][ T6298] EXT4-fs (loop9): Remounting filesystem read-only [ 206.813687][ T6298] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.477: bg 0: block 361: padding at end of block bitmap is not set [ 208.002247][ T6298] EXT4-fs (loop9): Remounting filesystem read-only [ 208.020646][ T6298] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 208.453984][ T6298] EXT4-fs (loop9): Remounting filesystem read-only [ 208.469254][ T6298] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.477: invalid indirect mapped block 1811939328 (level 0) [ 208.487419][ T6298] EXT4-fs (loop9): Remounting filesystem read-only [ 208.489279][ T6298] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.477: invalid indirect mapped block 2185560079 (level 1) [ 208.499267][ T6298] EXT4-fs (loop9): Remounting filesystem read-only [ 208.505266][ T6298] EXT4-fs (loop9): 1 truncate cleaned up [ 208.506811][ T6298] EXT4-fs (loop9): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 208.622172][ T26] audit: type=1326 audit(208.590:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.9.477" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f4ad28 code=0x0 [ 208.724163][ T6339] loop6: detected capacity change from 0 to 256 [ 208.836426][ T6339] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 209.950160][ T6356] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 209.977440][ T6339] exFAT-fs (loop6): hint_cluster is invalid (17) [ 211.475625][ T6369] loop3: detected capacity change from 0 to 256 [ 211.563213][ T6369] exfat: Deprecated parameter 'namecase' [ 211.573532][ T6374] loop7: detected capacity change from 0 to 512 [ 211.663974][ T6369] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 213.228792][ T6374] EXT4-fs (loop7): Ignoring removed nobh option [ 213.230486][ T6374] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 213.235878][ T6374] EXT4-fs (loop7): can't mount with commit=14, fs mounted w/o journal [ 215.275996][ T6418] loop9: detected capacity change from 0 to 1024 [ 215.284447][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.510'. [ 216.899536][ T6432] loop7: detected capacity change from 0 to 512 [ 216.976269][ T6432] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 216.978498][ T6432] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 216.988938][ T6432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 216.999367][ T6432] EXT4-fs (loop7): orphan cleanup on readonly fs [ 217.009807][ T6432] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.502: attempt to clear invalid blocks 1024 len 1 [ 217.022823][ T6432] EXT4-fs (loop7): Remounting filesystem read-only [ 217.177194][ T6432] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.502: bg 0: block 361: padding at end of block bitmap is not set [ 217.192539][ T6432] EXT4-fs (loop7): Remounting filesystem read-only [ 217.194136][ T6432] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 217.198726][ T6432] EXT4-fs (loop7): Remounting filesystem read-only [ 217.201475][ T6432] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.502: invalid indirect mapped block 1811939328 (level 0) [ 218.771337][ T6432] EXT4-fs (loop7): Remounting filesystem read-only [ 218.830398][ T6432] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.502: invalid indirect mapped block 2185560079 (level 1) [ 218.965920][ T6432] EXT4-fs (loop7): Remounting filesystem read-only [ 218.982945][ T6432] EXT4-fs (loop7): 1 truncate cleaned up [ 218.984436][ T6432] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 218.989145][ T6456] binder: 6455:6456 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 219.000762][ T6456] binder: 6455:6456 got transaction to invalid handle, 1 [ 219.022594][ T6456] binder: 6455:6456 transaction failed 29201/-22, size 0-0 line 2917 [ 219.036339][ T6456] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.051829][ T6456] binder: 6455:6456 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 219.080468][ T6456] binder: 6456 RLIMIT_NICE not set [ 219.130944][ T6464] bond0: (slave macvlan2): Error -16 calling set_mac_address [ 219.409318][ T6472] loop9: detected capacity change from 0 to 256 [ 219.432337][ T6472] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.543593][ T6493] tipc: Started in network mode [ 220.544990][ T6493] tipc: Node identity ca25b28ab087, cluster identity 4711 [ 220.546849][ T6493] tipc: Enabled bearer , priority 0 [ 220.549304][ T6493] device syzkaller0 entered promiscuous mode [ 220.560600][ T6493] tipc: Resetting bearer [ 220.571627][ T6487] tipc: Resetting bearer [ 220.584508][ T6487] tipc: Disabling bearer [ 220.708815][ T6497] loop8: detected capacity change from 0 to 256 [ 221.627811][ T6497] FAT-fs (loop8): Directory bread(block 64) failed [ 221.629494][ T6497] FAT-fs (loop8): Directory bread(block 65) failed [ 221.631119][ T6497] FAT-fs (loop8): Directory bread(block 66) failed [ 221.648399][ T6497] FAT-fs (loop8): Directory bread(block 67) failed [ 221.650234][ T6497] FAT-fs (loop8): Directory bread(block 68) failed [ 221.651863][ T6497] FAT-fs (loop8): Directory bread(block 69) failed [ 221.662668][ T6497] FAT-fs (loop8): Directory bread(block 70) failed [ 221.664391][ T6497] FAT-fs (loop8): Directory bread(block 71) failed [ 221.666084][ T6497] FAT-fs (loop8): Directory bread(block 72) failed [ 221.670276][ T6506] tipc: Cannot configure node identity twice [ 221.689673][ T6506] netlink: 'syz.6.522': attribute type 9 has an invalid length. [ 221.691557][ T6506] netlink: 'syz.6.522': attribute type 7 has an invalid length. [ 221.697886][ T6497] FAT-fs (loop8): Directory bread(block 73) failed [ 221.729215][ T6506] netlink: 'syz.6.522': attribute type 8 has an invalid length. [ 221.812339][ T6512] loop7: detected capacity change from 0 to 1024 [ 223.138066][ T6512] EXT4-fs (loop7): Ignoring removed orlov option [ 223.937178][ T6512] EXT4-fs (loop7): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 223.946399][ T6528] udc-core: couldn't find an available UDC or it's busy [ 223.948184][ T6528] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 226.176307][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 226.177833][ T4067] Bluetooth: hci1: command 0x0406 tx timeout [ 226.425406][ T6556] loop6: detected capacity change from 0 to 512 [ 226.571360][ T6556] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 227.685603][ T6578] siw: device registration error -23 [ 229.380991][ T6594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.382788][ T6594] IPv6: NLM_F_CREATE should be set when creating new route [ 229.466201][ T6597] netlink: 156 bytes leftover after parsing attributes in process `syz.3.547'. [ 231.644498][ T6694] loop9: detected capacity change from 0 to 164 [ 231.786868][ T6694] ISOFS: unable to read i-node block [ 231.788574][ T6694] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 232.675299][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 235.476393][ T6753] netlink: 104 bytes leftover after parsing attributes in process `syz.6.570'. [ 235.534988][ T6756] loop6: detected capacity change from 0 to 128 [ 236.310371][ T6750] bond0: (slave macvlan2): Error -16 calling set_mac_address [ 236.389637][ T6756] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,bsdgroups,,errors=continue. Quota mode: none. [ 236.810331][ T6767] fscrypt: Error allocating hmac(sha512): -2 [ 237.762891][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 237.905632][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.908096][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.911561][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 238.881225][ T4071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.196213][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.491220][ T6813] binder: 6812:6813 tried to acquire reference to desc 0, got 1 instead [ 239.551984][ T6814] binder: 6812:6814 got transaction with invalid offsets ptr [ 239.570787][ T6814] binder: 6812:6814 transaction failed 29201/-14, size 0-768 line 3124 [ 239.668986][ T6810] bond0: (slave macvlan2): Error -16 calling set_mac_address [ 239.682195][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.6.587'. [ 239.700514][ T6816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.745124][ T6816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.757487][ T6816] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 239.761301][ T6816] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 239.823304][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.590'. [ 239.949362][ T4067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.972844][ T26] audit: type=1326 audit(239.950:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 239.980188][ T26] audit: type=1326 audit(239.950:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 239.997142][ T26] audit: type=1326 audit(239.950:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 240.775753][ T5887] binder: release 6812:6813 transaction 28 out, still active [ 240.778027][ T5887] binder: undelivered TRANSACTION_COMPLETE [ 240.779419][ T5887] binder: undelivered TRANSACTION_ERROR: 29201 [ 240.811249][ T6842] binder: 6841:6842 tried to acquire reference to desc 0, got 1 instead [ 240.814223][ T6842] binder: release 6841:6842 transaction 34 out, still active [ 240.816409][ T6842] binder: undelivered TRANSACTION_COMPLETE [ 240.818165][ T6842] binder: 6841:6842 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 240.821316][ T6842] binder: 6842 RLIMIT_NICE not set [ 240.822792][ T6842] binder: 6842 RLIMIT_NICE not set [ 240.824348][ T26] audit: type=1326 audit(239.950:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 240.829580][ T26] audit: type=1326 audit(239.950:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffab1f887c code=0x7ffc0000 [ 240.837166][ T4070] binder: send failed reply for transaction 28, target dead [ 240.935457][ T26] audit: type=1326 audit(239.950:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 240.940515][ T26] audit: type=1326 audit(239.950:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=138 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 240.957239][ T4070] binder: release 6841:6842 transaction 34 in, still active [ 240.959132][ T4070] binder: send failed reply for transaction 34, target dead [ 241.002035][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.005416][ T26] audit: type=1326 audit(239.950:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 241.010926][ T26] audit: type=1326 audit(239.950:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 241.036127][ T26] audit: type=1326 audit(239.950:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab0f0d28 code=0x7ffc0000 [ 242.781396][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.831607][ T6857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.833574][ T6857] IPv6: NLM_F_CREATE should be set when creating new route [ 243.175566][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.182830][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.186187][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.189379][ T3605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.284776][ T6872] loop3: detected capacity change from 0 to 8192 [ 245.052633][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.152739][ T6872] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 245.156455][ T6872] REISERFS (device loop3): using ordered data mode [ 245.158078][ T6872] reiserfs: using flush barriers [ 245.171191][ T6872] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.186635][ T6872] REISERFS (device loop3): checking transaction log (loop3) [ 245.228483][ T6872] REISERFS (device loop3): Using r5 hash to sort names [ 245.230423][ T6872] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 245.263463][ T6872] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 246.134599][ T6900] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 246.140409][ T6900] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 246.144562][ T6900] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 246.537992][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.588869][ T6892] loop7: detected capacity change from 0 to 512 [ 246.644037][ T6903] Cannot find map_set index 0 as target [ 246.721961][ T3605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.815965][ T6892] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 246.859802][ T6895] tc_dump_action: action bad kind [ 248.622989][ T4067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.449669][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.610'. [ 249.463280][ T27] INFO: task syz.0.122:4481 blocked for more than 144 seconds. [ 249.465048][ T27] Not tainted 5.15.178-syzkaller #0 [ 249.466580][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.468760][ T27] task:syz.0.122 state:D stack: 0 pid: 4481 ppid: 4023 flags:0x00000009 [ 249.475928][ T27] Call trace: [ 249.476700][ T27] __switch_to+0x308/0x588 [ 249.479318][ T27] __schedule+0xf10/0x1e48 [ 249.515043][ T27] schedule+0x11c/0x1c8 [ 249.519606][ T27] schedule_preempt_disabled+0x18/0x2c [ 249.526340][ T27] rwsem_down_read_slowpath+0x5b0/0x988 [ 249.534804][ T27] down_read+0x10c/0x398 [ 249.543058][ T27] iterate_supers+0xb0/0x1dc [ 249.549883][ T27] ksys_sync+0xb4/0x1cc [ 249.557789][ T27] __arm64_sys_sync+0x14/0x24 [ 249.565505][ T27] invoke_syscall+0x98/0x2b8 [ 249.569559][ T6927] loop6: detected capacity change from 0 to 8192 [ 249.574404][ T27] el0_svc_common+0x138/0x258 [ 249.580124][ T27] do_el0_svc+0x58/0x14c [ 249.587114][ T27] el0_svc+0x7c/0x1f0 [ 249.591638][ T27] el0t_64_sync_handler+0x84/0xe4 [ 249.597864][ T27] el0t_64_sync+0x1a0/0x1a4 [ 249.611157][ T27] [ 249.611157][ T27] Showing all locks held in the system: [ 249.630529][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.643843][ T27] 1 lock held by khungtaskd/27: [ 249.645078][ T27] #0: ffff800014d42360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 249.647366][ T27] 1 lock held by udevd/3643: [ 249.648469][ T27] 2 locks held by getty/3786: [ 249.649568][ T27] #0: ffff0000d44d2098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 250.241381][ T27] #1: ffff80001bfd02e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1204 [ 250.252046][ T27] 1 lock held by syz-executor/4026: [ 250.264149][ T27] #0: ffff0000d32400e0 (&type->s_umount_key#57){++++}-{3:3}, at: deactivate_super+0x100/0x128 [ 250.274935][ T27] 3 locks held by kworker/1:6/4071: [ 250.280757][ T27] 1 lock held by syz.0.122/4481: [ 250.286639][ T27] #0: ffff0000d32400e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xb0/0x1dc [ 250.301210][ T27] 3 locks held by syz.2.296/5313: [ 250.307214][ T27] #0: ffff0000dc17a5f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x128/0x170 [ 250.320887][ T27] #1: ffff0000d6ee0460 (sb_writers#4){.+.+}-{0:0}, at: do_writev+0x20c/0x3ec [ 250.331261][ T27] #2: ffff0000d32400e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xb0/0x1dc [ 250.343025][ T27] 2 locks held by kworker/u4:17/5920: [ 250.350075][ T27] 1 lock held by syz.8.612/6924: [ 250.355934][ T27] #0: ffff800016cb4be8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 250.366258][ T27] 2 locks held by syz.8.612/6932: [ 250.371646][ T27] #0: ffff800016cb4be8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 250.380832][ T27] #1: ffff0000cba7b530 (&idev->mc_lock){+.+.}-{3:3}, at: __ipv6_dev_mc_dec+0x7c/0x324 [ 250.394042][ T4071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.398227][ T27] 1 lock held by syz.7.610/6935: [ 250.403063][ T27] #0: ffff800014d46870 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x54/0x4b0 [ 250.409692][ T27] 2 locks held by sed/6952: [ 250.432612][ T27] [ 250.433256][ T27] ============================================= [ 250.433256][ T27] [ 250.435288][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 250.436931][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.178-syzkaller #0 [ 250.438832][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.441258][ T27] Call trace: [ 250.442057][ T27] dump_backtrace+0x0/0x530 [ 250.443081][ T27] show_stack+0x2c/0x3c [ 250.444069][ T27] dump_stack_lvl+0x108/0x170 [ 250.445211][ T27] dump_stack+0x1c/0x58 [ 250.446252][ T27] panic+0x304/0x8bc [ 250.447205][ T27] hung_task_panic+0x0/0x2c [ 250.448304][ T27] kthread+0x37c/0x45c [ 250.449345][ T27] ret_from_fork+0x10/0x20 [ 250.450481][ T27] SMP: stopping secondary CPUs [ 250.451715][ T27] Kernel Offset: disabled [ 250.452763][ T27] CPU features: 0x8,000081c1,21302e40 [ 250.454065][ T27] Memory Limit: none [ 250.911325][ T27] Rebooting in 86400 seconds..