last executing test programs: 13m52.482403306s ago: executing program 1 (id=248): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) semctl$IPC_RMID(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040), 0x8) 13m51.040138237s ago: executing program 1 (id=254): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key(&(0x7f0000000600)='big_key\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="adfd78", 0x3, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/13, 0xd) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 13m50.319629797s ago: executing program 1 (id=257): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13m46.274689744s ago: executing program 1 (id=265): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x7fff) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0x16, 0x4, "90b7a71b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "92f0c228", {0x1, 0xfff8, 0x0, 0xfa, 0x1}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x200980, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, 0x0, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 13m43.784034658s ago: executing program 1 (id=270): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x5885, 0x400, 0x2, 0x217}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 13m42.529864326s ago: executing program 1 (id=275): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13m27.069424602s ago: executing program 32 (id=275): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 12m53.569124271s ago: executing program 4 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) io_setup(0x202, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES64=r0], 0xe) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x80045439, 0xffffffffffffffff) 12m52.012497673s ago: executing program 4 (id=388): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000ff7f00000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000140a03000000000000000000000000001400000011000100"/117], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x6, 0x0) 12m50.857833419s ago: executing program 4 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) writev(r3, &(0x7f0000002b40)=[{&(0x7f00000007c0)="a1ab", 0x2}], 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)="682488bdfd3ad87752824f58fea08a8281d9ab6b0ae2397d43590e7bcf5917326c1250b0e13fafbdd8ba65a363e1d3f6b5e4df6cf08a1dd52b20c134bcd7b637b35d4ec0fa2d9c0e9ffc59da566ac04a13398f96a1300d9410c0698bd9d843feb602780e991621af63ff32f598d840c983b349f4cc362df8acc38486072e09590dd616b27cb8b9968b1e8bc535d7fc1ffb65fcb465704d8a9d0938c84b", 0x9d}, {&(0x7f0000000040)="e2d0a467547b8ec6a4924bda425634ebfbb2fab47f15dd0bdcb37521743baf903f1663660f1e", 0x26}], 0x2) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40) 12m49.628202516s ago: executing program 4 (id=394): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key(&(0x7f0000000600)='big_key\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="adfd78", 0x3, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/13, 0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 12m49.38834263s ago: executing program 4 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000013000500020000000000000007000000bb63ceb1b333bcb716de06093df0fc57f79e1d8173404bfa20b5b3805cffdf41dae9d3e10cebab544ea60f", @ANYRES32=0x0, @ANYBLOB="0040020000000000"], 0x20}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 12m46.54479209s ago: executing program 4 (id=398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdc) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12m31.325330982s ago: executing program 33 (id=398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdc) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m44.750879414s ago: executing program 3 (id=617): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150a01020000c20000000000000000000800034000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 10m43.341910104s ago: executing program 3 (id=620): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000400) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_wakeup_irq', 0x109a02, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x7, 0x700) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d00, &(0x7f0000000040)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0) sendto$packet(r5, 0x0, 0x0, 0x800, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x44, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x4, 0x4003}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x256b3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x8001) 10m42.162789881s ago: executing program 3 (id=622): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 10m40.77996362s ago: executing program 3 (id=626): mknod$loop(0x0, 0x6000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) 10m38.149399816s ago: executing program 3 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 10m35.226985417s ago: executing program 3 (id=635): clock_gettime(0x6, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000002c00)={r0, r1+10000000}) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) unshare(0x6a040000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x4}]}) syz_io_uring_setup(0xfb, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 10m18.918773025s ago: executing program 34 (id=635): clock_gettime(0x6, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000002c00)={r0, r1+10000000}) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) unshare(0x6a040000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x4}]}) syz_io_uring_setup(0xfb, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 7m32.131083027s ago: executing program 0 (id=965): ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000003c0)={'batadv0\x00', {0x2, 0x4e20, @local}}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f00000001c0)=[r1, r1], 0x2, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x804, {0x1ff, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0xb, 0x6, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00f7ffffff00"}}) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000b24400000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="5300330050000000ffffffffffff0802110000005050505050500000000000000000000064000000000601010101010101011b060201002d1a00"/84], 0x70}}, 0x80) 7m31.076054252s ago: executing program 0 (id=968): socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r2, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 7m29.08542855s ago: executing program 0 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x8090) shutdown(r3, 0x1) 7m27.863622707s ago: executing program 0 (id=976): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) memfd_secret(0x80000) r5 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) 7m25.51245324s ago: executing program 0 (id=981): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x0, 0xffff}, {0xfffe, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7m24.376520275s ago: executing program 0 (id=983): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 7m9.05835516s ago: executing program 35 (id=983): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 11.669776876s ago: executing program 7 (id=2001): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e81621209600", 0xe4}, {&(0x7f0000001600)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000500)="c83e2bd7f125f4a6a218f22da67e5a1d01c265386e882d477c2869af6f9092221cd278c734b3cd254fe08f708730f47775dd330f02714b3c221d0ca14be1b8b12c699935caa14628b7", 0x49}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000700)="3dbe33faf3597dcad38c7f07509139be4aa82b139060", 0x16}, {&(0x7f0000000d40)="13fe0d0ebaa8f8e6945eda37626722a991bb043a3f0055b3077bbb48090fc9ec5ce2b21e4a08fe7ade767d68a0429b24ae1af46fd6bc808750074e324dfb9a870aa3ff152df224c74bf6d1141d7a13b29b4a73fcd81b23", 0x57}, {&(0x7f0000000dc0)="e17bfe9237363ae57066d5a4de6375e1f265c2111c04735b06a042b9e2da67139b00f3796bc91dc512b02f85c9eaf50143c80de360b7164b4f5b0a80424213098a1afc1c7f03d6d9813244a7a1e2ca2c", 0x50}, {&(0x7f0000000f00)="066e681f2ee7dcf707f860c23a27c2514c988ed127d3881aa3b5bad1e16068a95142f1b6cfb4f6b326aa7f5fc466358debdf24638d5d109ba2006e0881aa9517f96937b7e5fc5da0938563c576cd955bf390e6167d2abe8b0c2b0206ad3f4f06629e7b54d8a663e7c36704cdc9c66e9f682d361bf9a74826048ea7e0e5b6bc6444d97d2ef6d0b1294387576d59ace09741cebb30c411ce9f3dd19c022fdc6a6b", 0xa0}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 9.392394878s ago: executing program 7 (id=2006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000400)={0xd137, "9646dda5cc590d225ade259c2996e19bdeec00002500"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xa, "df7ffc82686a3a5c7a8c0200e19d59285deaffff5ede00000000000000000020"}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000003c0)={{&(0x7f0000138000/0x13000)=nil, 0x13000}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000ed00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="8e98000000000000000000c01c2069d78a20000000000008f944f3fe56", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000300)=0x1000, 0x0, 0x4) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r8, 0x7010) 7.84797096s ago: executing program 7 (id=2008): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000400) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_wakeup_irq', 0x109a02, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x700) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d00, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x800, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 7.83135112s ago: executing program 2 (id=2009): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpriority(0x1, 0x0, 0x2201) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x7) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x5) dup(r4) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) mq_open(0x0, 0x40, 0x103, &(0x7f0000000180)={0x6, 0x7, 0x4, 0xffffffff}) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x25, 0x10, @val=@netfilter={0x2, 0x1, 0x5228}}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 7.422526926s ago: executing program 6 (id=2013): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r6, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) pidfd_getfd(r5, r3, 0x0) socket$inet(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) 6.635696917s ago: executing program 8 (id=2015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.488047199s ago: executing program 6 (id=2016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x100, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.200124807s ago: executing program 8 (id=2018): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x10, 0x200, 0x200, 0x25dfdbfb, {0x16}, [@nested={0x4, 0x16}, @nested={0x38, 0x50, 0x0, 0x1, [@generic="474aa47c8e0bf405fd98b1b1285e09987d21235c460bcb3f945f6b0c1f8b40fcf3dc8fb53df4e3ba2d32d2779d7739b9c0cf51e4"]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20044850) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pB \x00'}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x2180, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4011) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000001c0), &(0x7f00000003c0)}, 0x20) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/244, 0xf4}], 0x1, 0x2000401, 0x9) 5.159540778s ago: executing program 7 (id=2019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) writev(r3, &(0x7f0000002b40)=[{&(0x7f00000007c0)="a1ab", 0x2}], 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)}, {&(0x7f0000000040)="e2d0a467547b8ec6a4924bda425634ebfbb2fab47f15dd0bdcb37521743baf903f16", 0x22}], 0x2) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40) 4.25998308s ago: executing program 7 (id=2020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000400)={0xd137, "9646dda5cc590d225ade259c2996e19bdeec00002500"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xa, "df7ffc82686a3a5c7a8c0200e19d59285deaffff5ede00000000000000000020"}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000003c0)={{&(0x7f0000138000/0x13000)=nil, 0x13000}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000ed00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="8e98000000000000000000c01c2069d78a20000000000008f944f3fe56", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000300)=0x1000, 0x0, 0x4) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r8, 0x7010) 4.035404733s ago: executing program 8 (id=2022): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 3.924178174s ago: executing program 5 (id=2023): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @loopback, 0xffffffff}, 0x1c) close(0x3) 3.923932905s ago: executing program 8 (id=2024): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r6, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) pidfd_getfd(r5, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) 3.923692714s ago: executing program 2 (id=2025): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.895971655s ago: executing program 6 (id=2026): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r6, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) pidfd_getfd(r5, r3, 0x0) socket$inet(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) 3.664761988s ago: executing program 5 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b26, 0x0) fsopen(0x0, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 3.664608298s ago: executing program 2 (id=2028): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.444755351s ago: executing program 2 (id=2029): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000400) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_wakeup_irq', 0x109a02, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x700) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d00, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x800, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3.057770507s ago: executing program 8 (id=2030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) writev(r3, &(0x7f0000002b40)=[{&(0x7f00000007c0)="a1ab", 0x2}], 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)="682488bdfd3ad87752824f58fea08a8281d9ab6b0ae2397d43590e7bcf5917326c1250b0e13fafbdd8ba65a363e1d3f6b5e4df6cf08a1dd52b20c134bcd7b637b35d4ec0fa2d9c0e9ffc59da566ac0", 0x4f}, {&(0x7f0000000040)="e2d0a467547b8ec6a4924bda425634ebfbb2fab47f15dd0bdcb37521743baf903f16", 0x22}], 0x2) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40) 2.926803349s ago: executing program 7 (id=2031): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.88397169s ago: executing program 6 (id=2032): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x3}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x11) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.335542207s ago: executing program 5 (id=2033): syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80040) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x10}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x1000000, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB], 0xb, 0x1) sendmsg$IPSET_CMD_DEL(r3, 0x0, 0x80044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 1.734621905s ago: executing program 6 (id=2034): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x10, 0x200, 0x200, 0x25dfdbfb, {0x16}, [@nested={0x4, 0x16}, @nested={0x38, 0x50, 0x0, 0x1, [@generic="474aa47c8e0bf405fd98b1b1285e09987d21235c460bcb3f945f6b0c1f8b40fcf3dc8fb53df4e3ba2d32d2779d7739b9c0cf51e4"]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20044850) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pB \x00'}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x2180, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4011) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='io\x00') preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/244, 0xf4}], 0x1, 0x2000401, 0x9) 1.728876525s ago: executing program 8 (id=2035): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x10a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200032f"], 0x0) 773.598219ms ago: executing program 5 (id=2036): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="3a3f5d2129ffc724bcebbf31c6bdac74", 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 604.158461ms ago: executing program 2 (id=2037): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b39ff, 0x0) 529.335362ms ago: executing program 5 (id=2038): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = add_key(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386deb", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x40) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xfb, 0x2}, {0x8}}}}, 0xf) 528.586912ms ago: executing program 6 (id=2039): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) read$nci(r0, &(0x7f00000001c0)=""/69, 0x45) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="000323cd7000fbdbdf"], 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r5) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027bd7008000000250f0034ad080001"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xe0) 380.093834ms ago: executing program 5 (id=2040): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') pidfd_getfd(r5, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) 0s ago: executing program 2 (id=2041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, 0x0, 0x4000000) kernel console output (not intermixed with test programs): utes in process `syz.3.515'. [ 326.573643][ T9] team0 (unregistering): Port device team_slave_1 removed [ 326.602269][ T9] team0 (unregistering): Port device team_slave_0 removed [ 326.624461][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.652934][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.749960][ T9] bond0 (unregistering): Released all slaves [ 327.126354][ T9] team0 (unregistering): Port device team_slave_1 removed [ 327.375962][ T9] team0 (unregistering): Port device team_slave_0 removed [ 327.590555][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.727330][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.997666][ T9] bond0 (unregistering): Released all slaves [ 328.086899][ T5864] device veth0_vlan entered promiscuous mode [ 328.118940][ T6299] device batadv1 entered promiscuous mode [ 328.155312][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.174502][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.196020][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.204138][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.426404][ T5864] device veth1_vlan entered promiscuous mode [ 328.984148][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.151104][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.184595][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.246246][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.514309][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.764386][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.930000][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.008332][ T5923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.023714][ T5923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.336605][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.370981][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.460497][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.477082][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.541350][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.595727][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.722622][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.223943][ T6387] xt_connbytes: Forcing CT accounting to be enabled [ 333.235663][ T6387] --map-set only usable from mangle table [ 334.479138][ T5761] Bluetooth: hci1: command 0x0405 tx timeout [ 335.184452][ T4218] Bluetooth: hci3: command 0x0409 tx timeout [ 336.009819][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.034829][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.112079][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.471109][ T6425] NILFS (nullb0): couldn't find nilfs on the device [ 337.498241][ T6383] chnl_net:caif_netlink_parms(): no params data found [ 338.526523][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 338.868096][ T6453] Cannot find add_set index 0 as target [ 338.993430][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.000609][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.070740][ T6383] device bridge_slave_0 entered promiscuous mode [ 339.111326][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.133619][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.150783][ T6383] device bridge_slave_1 entered promiscuous mode [ 340.177908][ T6469] loop3: detected capacity change from 0 to 1024 [ 340.289405][ T6469] EXT4-fs (loop3): Ignoring removed nobh option [ 340.333710][ T6469] EXT4-fs (loop3): Ignoring removed bh option [ 340.374566][ T6469] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 340.459797][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.633548][ T6469] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 340.671592][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 340.713285][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.772562][ T4213] Bluetooth: hci5: command 0x0409 tx timeout [ 341.631011][ T6483] tipc: New replicast peer: 0.0.0.0 [ 341.638798][ T6483] tipc: Enabled bearer , priority 10 [ 341.903576][ T6490] NILFS (nullb0): couldn't find nilfs on the device [ 341.923216][ T6383] team0: Port device team_slave_0 added [ 342.049283][ T6383] team0: Port device team_slave_1 added [ 342.832751][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 342.852681][ T4213] Bluetooth: hci5: command 0x041b tx timeout [ 343.068482][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.079977][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.124433][ T6513] Cannot find add_set index 0 as target [ 343.551487][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.007679][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.026598][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.175167][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.913556][ T6535] tipc: Enabling of bearer rejected, already enabled [ 345.228660][ T5761] Bluetooth: hci5: command 0x040f tx timeout [ 345.930501][ T6383] device hsr_slave_0 entered promiscuous mode [ 345.959655][ T6547] loop3: detected capacity change from 0 to 1024 [ 345.986379][ T6548] NILFS (nullb0): couldn't find nilfs on the device [ 346.003535][ T6383] device hsr_slave_1 entered promiscuous mode [ 346.027195][ T6383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.052798][ T6547] EXT4-fs (loop3): Ignoring removed nobh option [ 346.067046][ T6383] Cannot create hsr debugfs directory [ 346.113127][ T6547] EXT4-fs (loop3): Ignoring removed bh option [ 346.122909][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 346.139954][ T6547] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.403487][ T6547] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 346.988877][ T6565] overlayfs: conflicting lowerdir path [ 347.382603][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.389938][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.407897][ T6451] device bridge_slave_0 entered promiscuous mode [ 347.489557][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.541865][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.567224][ T5761] Bluetooth: hci5: command 0x0419 tx timeout [ 347.590469][ T6451] device bridge_slave_1 entered promiscuous mode [ 347.617261][ T6569] --map-set only usable from mangle table [ 347.834880][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 347.845826][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 347.932041][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.975708][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.097305][ T6451] team0: Port device team_slave_0 added [ 348.152684][ T6451] team0: Port device team_slave_1 added [ 350.098068][ T6588] tipc: Started in network mode [ 350.103956][ T6588] tipc: Node identity ac141425, cluster identity 4711 [ 350.111904][ T6588] tipc: New replicast peer: 0.0.0.0 [ 350.118546][ T6588] tipc: Enabled bearer , priority 10 [ 350.472186][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.484018][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.283085][ T1108] tipc: Node number set to 2886997029 [ 352.293128][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.293575][ T6595] NILFS (nullb0): couldn't find nilfs on the device [ 352.429917][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.453326][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.484153][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 352.496587][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 352.588859][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.725646][ T6451] device hsr_slave_0 entered promiscuous mode [ 352.748826][ T6451] device hsr_slave_1 entered promiscuous mode [ 352.760334][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.776298][ T6451] Cannot create hsr debugfs directory [ 353.830378][ T6637] Cannot find add_set index 0 as target [ 354.650634][ T6383] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 356.488086][ T6383] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 356.844815][ T6660] tipc: Enabling of bearer rejected, already enabled [ 356.870859][ T6383] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.177455][ T6383] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.127532][ T6676] x_tables: duplicate underflow at hook 1 [ 359.775075][ T6676] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 360.287295][ T6684] Cannot find add_set index 0 as target [ 361.827472][ T9] device hsr_slave_0 left promiscuous mode [ 361.941951][ T9] device hsr_slave_1 left promiscuous mode [ 362.073170][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.378846][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.700333][ T9] device bridge_slave_1 left promiscuous mode [ 362.749965][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.806971][ T9] device bridge_slave_0 left promiscuous mode [ 362.935805][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.035106][ T9] device hsr_slave_0 left promiscuous mode [ 363.066908][ T9] device hsr_slave_1 left promiscuous mode [ 363.117149][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.132605][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.141050][ T9] device bridge_slave_1 left promiscuous mode [ 363.173240][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.223120][ T9] device bridge_slave_0 left promiscuous mode [ 363.229978][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.364873][ T9] device veth1_vlan left promiscuous mode [ 363.371213][ T9] device veth0_vlan left promiscuous mode [ 364.050728][ T6719] x_tables: duplicate underflow at hook 1 [ 367.333675][ T9] team0 (unregistering): Port device team_slave_1 removed [ 367.356323][ T9] team0 (unregistering): Port device team_slave_0 removed [ 367.372101][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.393254][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.481402][ T9] bond0 (unregistering): Released all slaves [ 367.625546][ T9] team0 (unregistering): Port device team_slave_1 removed [ 367.648643][ T9] team0 (unregistering): Port device team_slave_0 removed [ 367.670317][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.703013][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.825615][ T9] bond0 (unregistering): Released all slaves [ 367.907591][ T6719] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 368.039266][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.148647][ T6451] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.193174][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.225423][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.262993][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.272146][ T6451] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.563442][ T6451] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.611436][ T6739] --map-set only usable from mangle table [ 368.692333][ T6451] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.798087][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.832260][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.916900][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.927640][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.940358][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.950817][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.960969][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.969283][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.486628][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.631303][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.904435][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.154892][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.266750][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.276015][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.155861][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.210189][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.239580][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.259050][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.610189][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.740958][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.858398][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.443445][ T6793] Cannot find add_set index 0 as target [ 374.035764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.084939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.131451][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.171247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.184932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.230615][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.058148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.070560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.084019][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.093316][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.359171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.453142][ T1325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 375.496109][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.543039][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.563902][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.572912][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.599837][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 375.627124][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.666786][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.688536][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 375.702649][ T1325] usb 3-1: Using ep0 maxpacket: 16 [ 375.704601][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.726920][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.761278][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.777261][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.794961][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.805101][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.816291][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.823136][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.837198][ T6451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.837847][ T1325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.859436][ T1325] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 375.884463][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.900626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.919251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.935000][ T1325] usb 3-1: config 0 descriptor?? [ 375.986912][ T1325] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 376.008075][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.045354][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.097553][ T6383] device veth0_vlan entered promiscuous mode [ 376.113679][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.138044][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.176184][ T6383] device veth1_vlan entered promiscuous mode [ 376.420449][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.488010][ T6844] x_tables: duplicate underflow at hook 1 [ 376.536100][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.350708][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.366646][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.390833][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.902090][ T6383] device veth0_macvtap entered promiscuous mode [ 378.069023][ T6383] device veth1_macvtap entered promiscuous mode [ 378.108883][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.132181][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.205723][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.344369][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.368611][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.455907][ T6867] Cannot find add_set index 0 as target [ 378.677500][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.821929][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.838457][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.888519][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.949209][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.011447][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.073827][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.126023][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.179213][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.205165][ T4274] usb 3-1: USB disconnect, device number 5 [ 379.402554][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.420479][ T6383] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.430489][ T6383] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.442162][ T6383] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.454300][ T6383] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.798972][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.848140][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.879649][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.890651][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.901027][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.696428][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.752980][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.826836][ T3109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.844950][ T6890] loop3: detected capacity change from 0 to 1024 [ 380.876724][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.932079][ T6890] EXT4-fs (loop3): Ignoring removed nobh option [ 380.947819][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.959662][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.011208][ T6890] EXT4-fs (loop3): Ignoring removed bh option [ 381.023290][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.062735][ T6890] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 381.083777][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 381.190201][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.223895][ T6890] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 381.340104][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.569786][ T6451] device veth0_vlan entered promiscuous mode [ 381.772016][ T6905] overlayfs: conflicting lowerdir path [ 381.897624][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.083617][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.213215][ T6451] device veth1_vlan entered promiscuous mode [ 384.521031][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.744265][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.904828][ T6451] device veth0_macvtap entered promiscuous mode [ 384.947803][ T6451] device veth1_macvtap entered promiscuous mode [ 385.015402][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.034847][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.048970][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.088601][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.101064][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.113664][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.125554][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.141039][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.339625][ T6920] xt_connbytes: Forcing CT accounting to be enabled [ 385.346730][ T6920] Cannot find add_set index 0 as target [ 385.410208][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.035755][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.048821][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.122409][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.169157][ T6926] lo speed is unknown, defaulting to 1000 [ 387.175895][ T6926] lo speed is unknown, defaulting to 1000 [ 387.185265][ T6926] lo speed is unknown, defaulting to 1000 [ 387.196705][ T6926] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 387.212172][ T6926] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 387.250224][ T6926] lo speed is unknown, defaulting to 1000 [ 387.259269][ T6926] lo speed is unknown, defaulting to 1000 [ 387.266243][ T6926] lo speed is unknown, defaulting to 1000 [ 387.274402][ T6926] lo speed is unknown, defaulting to 1000 [ 387.281729][ T6926] lo speed is unknown, defaulting to 1000 [ 387.343734][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.562757][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.636835][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.731885][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.842649][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.882619][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.912871][ T26] audit: type=1326 audit(1747098303.935:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6943 comm="syz.3.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cd7d9a969 code=0x0 [ 387.979161][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.992448][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.007174][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.026399][ T6451] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.062807][ T6451] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.116608][ T6451] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.162503][ T6451] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.202327][ T6945] lo speed is unknown, defaulting to 1000 [ 388.217438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.261276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.621460][ T6960] overlayfs: failed to resolve './file1': -2 [ 388.701579][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.717460][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.836793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.955842][ T6964] Cannot find add_set index 0 as target [ 389.904656][ T6976] netlink: 292 bytes leftover after parsing attributes in process `syz.2.643'. [ 389.921321][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.933870][ T6976] device macvlan0 entered promiscuous mode [ 389.963332][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.993119][ T6976] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 390.183853][ T6976] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 390.204470][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.021787][ T6989] Cannot find set identified by id 0 to match [ 392.463860][ T4215] Bluetooth: hci5: command 0x0405 tx timeout [ 393.305453][ T7006] xt_connbytes: Forcing CT accounting to be enabled [ 393.313702][ T7006] Cannot find add_set index 0 as target [ 394.137528][ T7019] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 403.213461][ T7077] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 404.532904][ T4215] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 404.982984][ T4215] usb 7-1: Using ep0 maxpacket: 8 [ 405.103421][ T4215] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 405.103544][ T4215] usb 7-1: config 0 has no interface number 0 [ 405.103820][ T4215] usb 7-1: config 0 interface 126 has no altsetting 0 [ 405.263066][ T4215] usb 7-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=fa.3e [ 405.263234][ T4215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.263348][ T4215] usb 7-1: Product: syz [ 405.263463][ T4215] usb 7-1: Manufacturer: syz [ 405.263578][ T4215] usb 7-1: SerialNumber: syz [ 405.282970][ T4215] usb 7-1: config 0 descriptor?? [ 405.532335][ T4215] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 406.151451][ T4215] usb 7-1: USB disconnect, device number 2 [ 406.563959][ T4248] udevd[4248]: setting mode of /dev/bus/usb/007/002 to 020664 failed: No such file or directory [ 406.571814][ T4248] udevd[4248]: setting owner of /dev/bus/usb/007/002 to uid=0, gid=0 failed: No such file or directory [ 409.328288][ T7104] lo speed is unknown, defaulting to 1000 [ 410.141590][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 411.048230][ T7120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.676'. [ 411.857184][ T7134] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 412.495629][ T6155] Bluetooth: hci1: command 0x041b tx timeout [ 412.944574][ T7104] chnl_net:caif_netlink_parms(): no params data found [ 414.526809][ T7143] NILFS (nullb0): couldn't find nilfs on the device [ 414.687476][ T6155] Bluetooth: hci1: command 0x040f tx timeout [ 415.253831][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.261044][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.346676][ T7104] device bridge_slave_0 entered promiscuous mode [ 416.503589][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.627253][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.772662][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 416.844651][ T7104] device bridge_slave_1 entered promiscuous mode [ 418.325586][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.689'. [ 418.335612][ T7192] netlink: 'syz.5.689': attribute type 5 has an invalid length. [ 418.343893][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.689'. [ 418.357187][ T7192] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 418.366396][ T7192] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 418.375513][ T7192] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 418.385020][ T7192] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 418.394127][ T7192] device geneve2 entered promiscuous mode [ 418.685990][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.041240][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.121128][ T7104] team0: Port device team_slave_0 added [ 420.421853][ T7104] team0: Port device team_slave_1 added [ 420.540298][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.572759][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.669004][ T7104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.743345][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.750936][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.797928][ T7104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.922696][ T7104] device hsr_slave_0 entered promiscuous mode [ 420.955039][ T7104] device hsr_slave_1 entered promiscuous mode [ 420.979746][ T7104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.011467][ T7104] Cannot create hsr debugfs directory [ 423.792655][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.873981][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.699'. [ 423.883661][ T7234] netlink: 'syz.6.699': attribute type 5 has an invalid length. [ 423.891694][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.6.699'. [ 423.920015][ T7234] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 423.956688][ T7234] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 423.965398][ T7234] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 423.974423][ T7234] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 423.983330][ T7234] device geneve2 entered promiscuous mode [ 424.490510][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.187719][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.791092][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.649806][ T154] tipc: Left network mode [ 430.956459][ T7104] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.628612][ T7104] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.724216][ T7104] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.786352][ T7104] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 432.248177][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.279119][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.317202][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.361173][ T7104] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.406434][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.428313][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.472698][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.480448][ T4450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.539116][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.651066][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.352496][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.383116][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.391324][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.443745][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.527799][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 436.216534][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 436.277019][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 436.292788][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 436.309419][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 436.325306][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.340144][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.409076][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.461222][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 438.959290][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 438.968049][ T4221] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 439.555250][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 440.068652][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.059655][ T7393] NILFS (nullb0): couldn't find nilfs on the device [ 442.105884][ T154] device hsr_slave_0 left promiscuous mode [ 442.121644][ T154] device hsr_slave_1 left promiscuous mode [ 442.171884][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.898529][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.928854][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.957401][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.013612][ T154] device bridge_slave_1 left promiscuous mode [ 443.021970][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.032911][ T154] device bridge_slave_0 left promiscuous mode [ 443.042754][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.074788][ T154] device veth1_macvtap left promiscuous mode [ 443.100324][ T154] device veth0_macvtap left promiscuous mode [ 443.175165][ T154] device veth1_vlan left promiscuous mode [ 443.199402][ T154] device veth0_vlan left promiscuous mode [ 446.801339][ T154] team0 (unregistering): Port device team_slave_1 removed [ 447.023932][ T154] team0 (unregistering): Port device team_slave_0 removed [ 447.284291][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.320947][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.465642][ T7453] NILFS (nullb0): couldn't find nilfs on the device [ 448.183557][ T154] bond0 (unregistering): Released all slaves [ 448.497472][ T5036] lo speed is unknown, defaulting to 1000 [ 450.071234][ T7467] loop5: detected capacity change from 0 to 1024 [ 450.199258][ T7467] EXT4-fs (loop5): Ignoring removed nobh option [ 450.427385][ T7467] EXT4-fs (loop5): Ignoring removed bh option [ 450.459619][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.486851][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.212570][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.747'. [ 451.892267][ T7467] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 451.925336][ T7104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.968616][ T7467] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 452.443481][ T7500] overlayfs: conflicting lowerdir path [ 455.088900][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.754'. [ 455.098369][ T7526] netlink: 'syz.6.754': attribute type 5 has an invalid length. [ 455.106755][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.6.754'. [ 457.836834][ T7547] bridge0: port 3(batadv0) entered blocking state [ 457.843826][ T7547] bridge0: port 3(batadv0) entered disabled state [ 457.853110][ T7547] device batadv0 entered promiscuous mode [ 457.859670][ T7547] bridge0: port 3(batadv0) entered blocking state [ 457.866706][ T7547] bridge0: port 3(batadv0) entered forwarding state [ 457.880911][ T7547] overlayfs: missing 'lowerdir' [ 458.600255][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 458.616929][ T4268] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 458.627426][ T4268] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 459.811953][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.952735][ T4213] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 459.966002][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.877201][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 461.034561][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.269286][ T7104] device veth0_vlan entered promiscuous mode [ 461.409357][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.731653][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 463.338749][ T7104] device veth1_vlan entered promiscuous mode [ 463.363929][ T4213] Bluetooth: hci5: command 0x0406 tx timeout [ 463.400253][ T7104] device veth0_macvtap entered promiscuous mode [ 463.411896][ T7104] device veth1_macvtap entered promiscuous mode [ 463.483147][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 463.517557][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.570732][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 463.636443][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.688358][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.731357][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.787665][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.836900][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.857137][ T7604] loop0: detected capacity change from 0 to 1024 [ 463.878105][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.929407][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.971321][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.026860][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.046659][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 464.064615][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 464.089713][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 464.285877][ T7604] EXT4-fs (loop0): Ignoring removed nobh option [ 464.328543][ T7604] EXT4-fs (loop0): Ignoring removed bh option [ 464.406584][ T7604] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.737193][ T7604] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 465.621399][ T7627] dlm: dev_write: no op 0 0 [ 465.747918][ T7628] overlayfs: conflicting lowerdir path [ 468.069595][ T4212] Bluetooth: hci4: command 0x0409 tx timeout [ 470.481640][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.413490][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 471.668959][ T7624] chnl_net:caif_netlink_parms(): no params data found [ 473.058900][ T7675] usb usb8: usbfs: process 7675 (syz.6.786) did not claim interface 0 before use [ 473.580246][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 474.086456][ T7695] x_tables: unsorted underflow at hook 3 [ 474.791911][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.878880][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.901609][ T7624] device bridge_slave_0 entered promiscuous mode [ 474.928296][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.956102][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.989560][ T7624] device bridge_slave_1 entered promiscuous mode [ 475.099674][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.134596][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.725383][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 479.639769][ T7624] team0: Port device team_slave_0 added [ 479.794000][ T7624] team0: Port device team_slave_1 added [ 479.837847][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.845354][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.875697][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.732260][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.761401][ T7733] loop6: detected capacity change from 0 to 1024 [ 480.769405][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.851269][ T7731] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 480.964431][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.006000][ T7733] EXT4-fs (loop6): Ignoring removed nobh option [ 481.022679][ T7733] EXT4-fs (loop6): Ignoring removed bh option [ 481.037177][ T7733] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 481.276362][ T7733] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 481.409913][ T7624] device hsr_slave_0 entered promiscuous mode [ 481.550137][ T7624] device hsr_slave_1 entered promiscuous mode [ 481.761180][ T7756] overlayfs: conflicting lowerdir path [ 483.675861][ T7768] tipc: Enabling of bearer rejected, already enabled [ 488.891197][ T7780] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 489.157287][ T7624] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 489.215514][ T7624] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 489.262209][ T7624] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 489.301182][ T7624] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 491.650779][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.688141][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.702988][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.978341][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.749365][ T7818] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 493.687997][ T7822] bridge0: port 3(batadv0) entered disabled state [ 493.696535][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.705696][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.391397][ T7833] usb usb8: usbfs: process 7833 (syz.2.823) did not claim interface 0 before use [ 494.430736][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.639750][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.755326][ T7822] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.770674][ T7822] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.782618][ T7822] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.793795][ T7822] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.021579][ T7822] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 499.041342][ T7822] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 499.055562][ T7822] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 499.068617][ T7822] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 499.123344][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.162555][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.232180][ T7822] syz.5.821 (7822) used greatest stack depth: 19904 bytes left [ 499.810483][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.818524][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.839972][ T7859] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 499.956661][ T7864] xt_ecn: cannot match TCP bits for non-tcp packets [ 499.989448][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.015062][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.026066][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.034480][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.051001][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.065490][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.114272][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.165202][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.259705][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.476881][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.540894][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.620513][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.861815][ T7872] tipc: Started in network mode [ 500.882675][ T7872] tipc: Node identity 4, cluster identity 4711 [ 500.953062][ T7872] tipc: Node number set to 4 [ 500.983991][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 501.003433][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 501.077676][ T7624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.144211][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.185533][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 501.267447][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.497729][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.012991][ T5267] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 503.293077][ T5267] usb 7-1: Using ep0 maxpacket: 8 [ 503.493834][ T5267] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 503.631653][ T5267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.172693][ T5267] pvrusb2: Hardware description: Terratec Grabster AV400 [ 504.261630][ T5267] pvrusb2: ********** [ 504.270761][ T5267] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 504.286879][ T5267] pvrusb2: Important functionality might not be entirely working. [ 504.300729][ T5267] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 504.316453][ T5267] pvrusb2: ********** [ 504.368522][ T2426] pvrusb2: Invalid write control endpoint [ 505.679015][ T7892] pvrusb2: Invalid write control endpoint [ 505.711517][ T4212] usb 7-1: USB disconnect, device number 3 [ 505.727978][ T154] device hsr_slave_0 left promiscuous mode [ 505.743750][ T154] device hsr_slave_1 left promiscuous mode [ 505.751052][ T2426] pvrusb2: Invalid write control endpoint [ 505.761212][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 505.774681][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.775384][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 505.792501][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.805208][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 505.816965][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.821617][ T2426] pvrusb2: Device being rendered inoperable [ 505.835563][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 505.839519][ T154] device bridge_slave_1 left promiscuous mode [ 505.850516][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 505.879629][ T2426] pvrusb2: Attached sub-driver cx25840 [ 505.880929][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.893515][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 505.913762][ T154] device bridge_slave_0 left promiscuous mode [ 505.914538][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 505.952622][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.049113][ T154] device veth1_macvtap left promiscuous mode [ 506.055955][ T154] device veth0_macvtap left promiscuous mode [ 506.079571][ T154] device veth1_vlan left promiscuous mode [ 506.094874][ T154] device veth0_vlan left promiscuous mode [ 506.649352][ T7934] loop6: detected capacity change from 0 to 512 [ 506.716816][ T7934] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 506.788501][ T7934] EXT4-fs (loop6): 1 truncate cleaned up [ 506.796788][ T7934] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 507.101895][ T154] team0 (unregistering): Port device team_slave_1 removed [ 507.119253][ T154] team0 (unregistering): Port device team_slave_0 removed [ 507.136491][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.153633][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.246260][ T154] bond0 (unregistering): Released all slaves [ 507.439041][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.453576][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.642554][ T7624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.587070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 517.628543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 517.720916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 517.744711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 517.881387][ T7624] device veth0_vlan entered promiscuous mode [ 518.167026][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 518.514916][ T7624] device veth1_vlan entered promiscuous mode [ 518.762036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 518.812628][ T8041] x_tables: unsorted underflow at hook 3 [ 520.870400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.100969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 521.451823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 522.476736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 522.502184][ T8048] loop2: detected capacity change from 0 to 256 [ 522.566325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.741644][ T7624] device veth0_macvtap entered promiscuous mode [ 522.803115][ T7624] device veth1_macvtap entered promiscuous mode [ 523.908562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 524.568376][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.663266][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.812510][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.826922][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.841992][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.080038][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.141369][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.215510][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.258338][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.880210][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 525.996990][ T8083] x_tables: unsorted underflow at hook 3 [ 532.748458][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 533.077719][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.892'. [ 535.045920][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 536.919459][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 537.092704][ T6155] Bluetooth: hci1: command 0x040f tx timeout [ 538.442576][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.456414][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.469359][ T8096] device bridge_slave_0 entered promiscuous mode [ 538.487165][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.520825][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.483350][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 540.218701][ T8096] device bridge_slave_1 entered promiscuous mode [ 541.719388][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.519164][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.863832][ T8096] team0: Port device team_slave_0 added [ 542.886386][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.904'. [ 542.901026][ T8096] team0: Port device team_slave_1 added [ 543.026288][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.184960][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.412377][ T8096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.246763][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.294017][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.310827][ T8203] loop5: detected capacity change from 0 to 256 [ 545.371168][ T8096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.397983][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 545.419269][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.446425][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.509023][ T8205] device bridge_slave_0 left promiscuous mode [ 545.600432][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.651942][ T8205] device bridge_slave_1 left promiscuous mode [ 545.751572][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.807609][ T8205] bond0: (slave bond_slave_0): Releasing backup interface [ 545.874573][ T8205] bond0: (slave bond_slave_1): Releasing backup interface [ 546.041078][ T8205] team0: Port device team_slave_0 removed [ 546.076727][ T8205] team0: Port device team_slave_1 removed [ 546.093906][ T8205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.103476][ T8205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.143593][ T8205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.151425][ T8205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.380313][ T8203] tipc: Started in network mode [ 546.390474][ T8203] tipc: Node identity 4, cluster identity 4711 [ 546.432483][ T8203] tipc: Node number set to 4 [ 546.912450][ T8096] device hsr_slave_0 entered promiscuous mode [ 546.939953][ T8096] device hsr_slave_1 entered promiscuous mode [ 547.510563][ T8096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.552127][ T8096] Cannot create hsr debugfs directory [ 549.280661][ T8255] loop6: detected capacity change from 0 to 256 [ 550.239472][ T8268] loop6: detected capacity change from 0 to 1024 [ 550.462824][ T8268] EXT4-fs (loop6): Ignoring removed nobh option [ 550.469680][ T8268] EXT4-fs (loop6): Ignoring removed bh option [ 550.512620][ T8268] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 550.749063][ T8268] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 551.280521][ T8281] tipc: Enabling of bearer rejected, already enabled [ 553.988434][ T154] device hsr_slave_0 left promiscuous mode [ 554.042828][ T154] device hsr_slave_1 left promiscuous mode [ 554.075508][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.089652][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.124939][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.153602][ T154] device bridge_slave_1 left promiscuous mode [ 554.180490][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.231757][ T154] device bridge_slave_0 left promiscuous mode [ 554.259607][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.333259][ T154] device veth1_macvtap left promiscuous mode [ 554.339943][ T154] device veth0_macvtap left promiscuous mode [ 554.392674][ T154] device veth1_vlan left promiscuous mode [ 554.412642][ T154] device veth0_vlan left promiscuous mode [ 555.438643][ T154] team0 (unregistering): Port device team_slave_1 removed [ 555.534833][ T154] team0 (unregistering): Port device team_slave_0 removed [ 555.634963][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.744247][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.130150][ T154] bond0 (unregistering): Released all slaves [ 556.990987][ T8096] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 557.864135][ T8348] dlm: dev_write: no op 0 0 [ 558.559845][ T8096] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 558.862652][ T8096] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 559.228712][ T8096] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 560.113774][ T8373] tipc: Enabling of bearer rejected, already enabled [ 560.415554][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.946'. [ 561.062939][ T8096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.109714][ T8385] loop6: detected capacity change from 0 to 512 [ 561.208629][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 561.282591][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.302209][ T8385] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 561.363415][ T8385] EXT4-fs (loop6): 1 truncate cleaned up [ 561.383921][ T8096] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.400903][ T8385] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 561.454664][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 561.500294][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 561.561196][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.569955][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.621544][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 561.652879][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 561.692759][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.700633][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.790711][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 561.849212][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 561.889471][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 561.937535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 561.985651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 562.043392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 562.114101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 562.196464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 562.233268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 562.314707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 562.383313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 562.462905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 562.536143][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 562.940283][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.503749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.538451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 565.718863][ T8096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.396874][ T8439] loop5: detected capacity change from 0 to 512 [ 566.468400][ T8439] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 566.636159][ T8439] EXT4-fs (loop5): 1 truncate cleaned up [ 566.642494][ T8439] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 567.075896][ T8452] 9pnet: Insufficient options for proto=fd [ 567.090539][ T8457] tipc: Enabling of bearer rejected, already enabled [ 571.664690][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.708972][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.838916][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.850884][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 572.020888][ T8096] device veth0_vlan entered promiscuous mode [ 572.248180][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 572.322661][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 572.344750][ T8096] device veth1_vlan entered promiscuous mode [ 572.993098][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 574.617950][ T8096] device veth0_macvtap entered promiscuous mode [ 574.974999][ T8096] device veth1_macvtap entered promiscuous mode [ 575.653431][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 575.684921][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 575.695769][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 576.035931][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 576.133528][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.133582][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.133590][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.133600][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.156368][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.374683][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 576.386428][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 576.462845][ T8555] x_tables: duplicate underflow at hook 1 [ 576.472473][ T8555] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 576.516889][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.529995][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.205177][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.253780][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.422225][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.484650][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'. [ 577.514744][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 577.659080][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 577.730341][ T8096] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.758510][ T8096] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.778286][ T8096] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.267742][ T8096] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.856019][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.055391][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.474533][ T8574] ipt_CLUSTERIP: Please specify destination IP [ 579.514005][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 579.645669][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.667585][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.778058][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 580.624345][ T8597] xt_connbytes: Forcing CT accounting to be enabled [ 580.631165][ T8597] Cannot find add_set index 0 as target [ 580.988603][ T8606] tipc: New replicast peer: 0.0.0.0 [ 580.996634][ T8606] tipc: Enabled bearer , priority 10 [ 582.938220][ T8610] loop5: detected capacity change from 0 to 256 [ 585.462715][ T8620] dlm: dev_write: no op 0 0 [ 591.423571][ T8695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.380310][ T8718] dlm: dev_write: no op 0 0 [ 596.942791][ T8722] infiniband syz1: set down [ 596.998655][ T8722] infiniband syz1: added ipvlan0 [ 597.597045][ T8722] infiniband syz1: Couldn't open port 1 [ 597.794215][ T8722] RDS/IB: syz1: added [ 597.799472][ T8722] smc: adding ib device syz1 with port count 1 [ 598.150520][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 598.201968][ T8722] smc: ib device syz1 port 1 has pnetid [ 600.212538][ T5761] Bluetooth: hci4: command 0x041b tx timeout [ 600.246035][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 600.921563][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.022690][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.031249][ T8733] device bridge_slave_0 entered promiscuous mode [ 601.168000][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.203558][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.293666][ T8733] device bridge_slave_1 entered promiscuous mode [ 601.352961][ T8805] dlm: dev_write: no op 0 0 [ 601.649647][ T4269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.742434][ T4269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 601.805260][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.897286][ T4269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.074134][ T4269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 602.204915][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.292965][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 602.913914][ T4269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.929046][ T4269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 603.002073][ T8733] team0: Port device team_slave_0 added [ 603.054123][ T4269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.111630][ T4269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 603.199530][ T8733] team0: Port device team_slave_1 added [ 603.229935][ T8814] syz.7.1027 (8814) used greatest stack depth: 18440 bytes left [ 603.370965][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.387961][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.466102][ T8733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.507318][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.532358][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.640693][ T8733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.859512][ T8733] device hsr_slave_0 entered promiscuous mode [ 603.887335][ T8733] device hsr_slave_1 entered promiscuous mode [ 604.372443][ T4215] Bluetooth: hci4: command 0x0419 tx timeout [ 604.423635][ T8839] ODEBUG: Out of memory. ODEBUG disabled [ 605.729696][ T4269] tipc: Disabling bearer [ 605.755687][ T4269] tipc: Left network mode [ 606.425199][ T8733] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 606.551259][ T8733] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 606.601134][ T8733] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 607.187522][ T8733] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 608.960710][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.471502][ T8733] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.482769][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 609.502865][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.710669][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.743336][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.929652][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.936971][ T4893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.394379][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.487940][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.608371][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.922318][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.929624][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.053069][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.096479][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.122174][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.164845][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.225441][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.239967][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.265694][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.355829][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.413200][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.465650][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.504359][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.539940][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.805058][ T4269] device hsr_slave_0 left promiscuous mode [ 611.831242][ T4269] device hsr_slave_1 left promiscuous mode [ 611.874960][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.903064][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.950757][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.973664][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.003294][ T4269] device bridge_slave_1 left promiscuous mode [ 612.009535][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.049976][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.090335][ T4269] device veth1_macvtap left promiscuous mode [ 612.118471][ T4269] device veth0_macvtap left promiscuous mode [ 612.180853][ T8947] dlm: dev_write: no op 0 0 [ 612.373153][ T4269] device veth1_vlan left promiscuous mode [ 612.379238][ T4269] device veth0_vlan left promiscuous mode [ 613.280458][ T8955] loop2: detected capacity change from 0 to 1024 [ 613.395325][ T8955] EXT4-fs (loop2): Ignoring removed nobh option [ 613.405408][ T8955] EXT4-fs (loop2): Ignoring removed bh option [ 613.472075][ T8955] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 613.559708][ T8959] x_tables: duplicate underflow at hook 1 [ 613.775514][ T8955] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 615.658043][ T4269] team0 (unregistering): Port device team_slave_1 removed [ 615.699853][ T4269] team0 (unregistering): Port device team_slave_0 removed [ 615.738345][ T4269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.765603][ T4269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.049199][ T4269] bond0 (unregistering): Released all slaves [ 616.388634][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 616.444747][ T8982] loop6: detected capacity change from 0 to 512 [ 616.497745][ T8982] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 616.514537][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.609295][ T8982] EXT4-fs (loop6): 1 truncate cleaned up [ 616.620714][ T8982] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 616.738316][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.960568][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.983707][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 619.018743][ T9033] loop7: detected capacity change from 0 to 1024 [ 619.064189][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 619.103251][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 619.136750][ T8733] device veth0_vlan entered promiscuous mode [ 619.151061][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 619.170095][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 619.211791][ T8733] device veth1_vlan entered promiscuous mode [ 619.225916][ T9033] EXT4-fs (loop7): Ignoring removed nobh option [ 619.262606][ T9033] EXT4-fs (loop7): Ignoring removed bh option [ 619.300553][ T9033] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 619.396311][ T9033] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 619.408155][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 619.519206][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 619.576636][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 619.624100][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.666198][ T8733] device veth0_macvtap entered promiscuous mode [ 619.728978][ T8733] device veth1_macvtap entered promiscuous mode [ 619.898854][ T9049] overlayfs: conflicting lowerdir path [ 620.152340][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 620.185820][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.266269][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.380818][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.479830][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.583467][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.639333][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.705057][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.731799][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.812793][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.852541][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.902545][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.952769][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.031387][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.204823][ T8733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.281912][ T8733] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.294686][ T8733] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.306402][ T8733] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.326777][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 621.340659][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.427831][ T4893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.472492][ T4893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.564485][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.568349][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.617865][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.696841][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.401846][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.976132][ T9138] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.991189][ T9138] FAT-fs (loop13): unable to read boot sector [ 632.347232][ T9170] loop7: detected capacity change from 0 to 256 [ 632.582227][ T9177] tipc: Started in network mode [ 632.612595][ T9177] tipc: Node identity 4, cluster identity 4711 [ 632.633555][ T9177] tipc: Node number set to 4 [ 634.776244][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1094'. [ 634.809476][ T9201] IPVS: Error joining to the multicast group [ 635.855410][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1099'. [ 637.332577][ T9240] usb usb8: usbfs: process 9240 (syz.8.1102) did not claim interface 0 before use [ 638.716169][ T9245] loop8: detected capacity change from 0 to 256 [ 638.916886][ T9251] tipc: Started in network mode [ 638.941146][ T9251] tipc: Node identity 4, cluster identity 4711 [ 639.187971][ T9251] tipc: Node number set to 4 [ 641.466452][ T9285] usb usb8: usbfs: process 9285 (syz.8.1115) did not claim interface 0 before use [ 642.331453][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1116'. [ 643.593328][ T9310] tipc: New replicast peer: 0.0.0.0 [ 643.599179][ T9310] tipc: Enabled bearer , priority 10 [ 643.944723][ T9318] x_tables: duplicate underflow at hook 1 [ 645.831179][ T9338] usb usb8: usbfs: process 9338 (syz.7.1127) did not claim interface 0 before use [ 649.599518][ T9370] tipc: New replicast peer: 0.0.0.0 [ 649.607393][ T9370] tipc: Enabled bearer , priority 10 [ 650.162116][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1135'. [ 650.171445][ T9383] netlink: 'syz.6.1135': attribute type 5 has an invalid length. [ 650.179730][ T9383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1135'. [ 652.339548][ T9395] loop7: detected capacity change from 0 to 1024 [ 652.617815][ T9395] EXT4-fs (loop7): Ignoring removed nobh option [ 653.408057][ T9395] EXT4-fs (loop7): Ignoring removed bh option [ 653.482467][ T9395] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 653.636484][ T9412] NILFS (nullb0): couldn't find nilfs on the device [ 653.783776][ T9395] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 654.204316][ T9431] x_tables: duplicate underflow at hook 1 [ 654.213807][ T9431] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 656.185945][ T9453] NILFS (nullb0): couldn't find nilfs on the device [ 656.378160][ T9460] loop7: detected capacity change from 0 to 1024 [ 656.527297][ T9460] EXT4-fs (loop7): Ignoring removed nobh option [ 656.546483][ T9460] EXT4-fs (loop7): Ignoring removed bh option [ 656.581639][ T9460] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 657.257081][ T5036] Bluetooth: hci1: command 0x0406 tx timeout [ 657.321871][ T9460] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 657.607562][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1159'. [ 659.396343][ T9492] x_tables: duplicate underflow at hook 1 [ 659.406714][ T9492] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 664.841704][ T9518] loop6: detected capacity change from 0 to 1024 [ 666.113662][ T9518] EXT4-fs (loop6): Ignoring removed nobh option [ 666.120043][ T9518] EXT4-fs (loop6): Ignoring removed bh option [ 666.260641][ T9518] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 666.560966][ T9535] x_tables: duplicate underflow at hook 1 [ 666.570125][ T9535] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 667.393294][ T9518] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 670.799594][ T9576] loop8: detected capacity change from 0 to 256 [ 670.865943][ T9574] XFS (nullb0): Invalid superblock magic number [ 672.762385][ T9604] x_tables: duplicate underflow at hook 1 [ 672.862538][ T9604] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 676.768430][ T9638] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 677.511086][ T9646] tipc: Enabling of bearer rejected, already enabled [ 677.658974][ T9652] overlayfs: missing 'workdir' [ 679.160031][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1201'. [ 679.170603][ T9667] netlink: 'syz.7.1201': attribute type 5 has an invalid length. [ 679.180643][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1201'. [ 679.197950][ T9667] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 679.211921][ T9667] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 679.227203][ T9667] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 679.238775][ T9667] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 679.248445][ T9667] device geneve2 entered promiscuous mode [ 679.969728][ T9681] Cannot find add_set index 0 as target [ 681.088917][ T9694] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 682.009363][ T9701] overlayfs: missing 'workdir' [ 682.863275][ T9720] tipc: New replicast peer: 0.0.0.0 [ 682.869303][ T9720] tipc: Enabled bearer , priority 10 [ 685.625462][ T9745] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1216'. [ 686.374723][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.788302][ T9777] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 690.212382][ T9789] x_tables: duplicate underflow at hook 1 [ 694.788570][ T9807] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1228'. [ 695.627363][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1232'. [ 695.637066][ T9819] netlink: 'syz.7.1232': attribute type 5 has an invalid length. [ 695.645728][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1232'. [ 696.566144][ T9838] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 696.780430][ T9840] x_tables: duplicate underflow at hook 1 [ 699.186950][ T9860] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1242'. [ 700.045703][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1245'. [ 700.055076][ T9870] netlink: 'syz.6.1245': attribute type 5 has an invalid length. [ 700.062986][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1245'. [ 701.544593][ T9882] x_tables: duplicate underflow at hook 1 [ 701.555808][ T9887] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 702.176768][ T9895] loop2: detected capacity change from 0 to 1024 [ 702.275676][ T9895] EXT4-fs (loop2): Ignoring removed nobh option [ 702.311811][ T9895] EXT4-fs (loop2): Ignoring removed bh option [ 702.318872][ T9895] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 702.370419][ T9895] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 702.832111][ T9908] overlayfs: missing 'lowerdir' [ 704.858641][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1258'. [ 704.867711][ T9933] netlink: 'syz.6.1258': attribute type 5 has an invalid length. [ 704.875781][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1258'. [ 706.104924][ T9942] loop7: detected capacity change from 0 to 256 [ 707.107001][ T9956] loop7: detected capacity change from 0 to 1024 [ 707.253313][ T9956] EXT4-fs (loop7): Ignoring removed nobh option [ 707.260044][ T9956] EXT4-fs (loop7): Ignoring removed bh option [ 707.272192][ T9956] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 707.693303][ T9956] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 708.185985][ T9974] overlayfs: missing 'lowerdir' [ 708.206685][ T9972] usb usb8: usbfs: process 9972 (syz.2.1268) did not claim interface 0 before use [ 710.396303][T10005] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 711.571254][T10014] loop2: detected capacity change from 0 to 256 [ 712.895259][T10033] usb usb8: usbfs: process 10033 (syz.5.1280) did not claim interface 0 before use [ 712.987359][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1279'. [ 713.877797][T10037] dlm: dev_write: no op 0 0 [ 714.960995][T10053] NILFS (nullb0): couldn't find nilfs on the device [ 716.047615][T10065] loop6: detected capacity change from 0 to 256 [ 717.280787][T10089] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1292'. [ 719.084368][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 719.326224][T10106] usb usb8: usbfs: process 10106 (syz.8.1297) did not claim interface 0 before use [ 719.457804][T10110] NILFS (nullb0): couldn't find nilfs on the device [ 720.533413][T10126] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 721.234686][T10129] loop7: detected capacity change from 0 to 256 [ 722.328281][T10140] loop2: detected capacity change from 0 to 512 [ 722.498435][T10140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 722.706010][T10140] EXT4-fs (loop2): 1 truncate cleaned up [ 722.729079][T10140] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 723.902005][T10174] NILFS (nullb0): couldn't find nilfs on the device [ 725.048385][T10182] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 727.058754][T10203] loop5: detected capacity change from 0 to 512 [ 727.251656][T10203] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 727.263559][T10206] usb usb8: usbfs: process 10206 (syz.6.1320) did not claim interface 0 before use [ 727.363584][T10203] EXT4-fs (loop5): 1 truncate cleaned up [ 727.379063][T10203] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 728.804296][T10235] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 729.419377][T10241] NILFS (nullb0): couldn't find nilfs on the device [ 730.510751][T10266] x_tables: duplicate underflow at hook 1 [ 730.517495][T10266] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 731.668962][T10270] tipc: Enabling of bearer rejected, already enabled [ 732.457060][T10291] loop2: detected capacity change from 0 to 512 [ 732.509052][T10291] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 732.569242][T10291] EXT4-fs (loop2): 1 truncate cleaned up [ 732.585876][T10291] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 733.113087][T10306] x_tables: duplicate underflow at hook 1 [ 734.093474][T10314] loop2: detected capacity change from 0 to 256 [ 736.356379][T10344] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 737.543977][T10360] x_tables: duplicate underflow at hook 1 [ 737.557306][T10360] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 738.162470][T10363] trusted_key: encrypted_key: insufficient parameters specified [ 738.193546][T10363] tipc: Enabling of bearer rejected, already enabled [ 738.781855][T10367] loop8: detected capacity change from 0 to 512 [ 738.949067][T10367] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 739.044269][T10367] EXT4-fs (loop8): 1 truncate cleaned up [ 739.090992][T10367] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 741.814591][T10401] loop8: detected capacity change from 0 to 256 [ 741.915778][T10404] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 742.906218][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1357'. [ 742.916983][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1357'. [ 743.391922][T10427] x_tables: duplicate underflow at hook 1 [ 743.403383][T10427] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 744.267841][T10434] loop6: detected capacity change from 0 to 512 [ 744.430744][T10434] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 745.354851][T10434] EXT4-fs (loop6): 1 truncate cleaned up [ 745.392001][T10434] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 747.192089][T10473] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 747.283687][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.654526][T10475] loop6: detected capacity change from 0 to 256 [ 747.706817][T10477] loop5: detected capacity change from 0 to 1024 [ 747.805237][T10477] EXT4-fs (loop5): Ignoring removed nobh option [ 747.833522][T10477] EXT4-fs (loop5): Ignoring removed bh option [ 747.839847][T10477] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 747.979662][T10477] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 748.369527][T10489] overlayfs: conflicting lowerdir path [ 749.049131][T10495] x_tables: duplicate underflow at hook 1 [ 749.059717][T10495] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 750.938971][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1377'. [ 750.949643][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1377'. [ 751.028572][T10509] loop5: detected capacity change from 0 to 512 [ 751.303294][T10509] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 751.375087][T10509] EXT4-fs (loop5): 1 truncate cleaned up [ 751.385139][T10509] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 753.008800][T10531] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 754.331755][T10547] tipc: Enabling of bearer rejected, already enabled [ 755.387340][T10553] loop6: detected capacity change from 0 to 512 [ 755.508272][T10553] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 755.619364][T10553] EXT4-fs (loop6): 1 truncate cleaned up [ 755.662400][T10553] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 755.686930][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.748215][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1395'. [ 757.759057][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1395'. [ 758.474005][T10575] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 759.248366][T10579] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1398'. [ 760.986144][T10587] tipc: Enabling of bearer rejected, already enabled [ 761.194035][T10596] loop6: detected capacity change from 0 to 512 [ 761.358180][T10596] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 761.541764][T10596] EXT4-fs (loop6): 1 truncate cleaned up [ 761.595325][T10596] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 762.929983][T10606] loop5: detected capacity change from 0 to 1024 [ 763.468406][T10606] EXT4-fs (loop5): Ignoring removed nobh option [ 763.549826][T10606] EXT4-fs (loop5): Ignoring removed bh option [ 763.653719][T10606] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 764.408534][T10606] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 766.063355][T10627] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1412'. [ 766.382484][T10634] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 768.533235][T10653] loop8: detected capacity change from 0 to 512 [ 768.586304][T10653] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 768.674448][T10653] EXT4-fs (loop8): 1 truncate cleaned up [ 768.698392][T10653] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 768.719308][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.637643][T10664] loop8: detected capacity change from 0 to 1024 [ 769.659012][T10664] EXT4-fs (loop8): Ignoring removed nobh option [ 769.675958][T10664] EXT4-fs (loop8): Ignoring removed bh option [ 769.691645][T10664] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 769.777827][T10664] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 770.132275][T10674] overlayfs: missing 'lowerdir' [ 772.530617][T10677] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1424'. [ 774.725163][T10695] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 775.490481][T10707] loop5: detected capacity change from 0 to 512 [ 775.951833][T10707] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 776.118815][T10707] EXT4-fs (loop5): 1 truncate cleaned up [ 776.223203][T10707] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 777.145006][T10726] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1436'. [ 777.216455][T10727] loop6: detected capacity change from 0 to 1024 [ 777.487126][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 777.497260][T10734] netlink: 'syz.2.1432': attribute type 5 has an invalid length. [ 777.506262][T10734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1432'. [ 777.568336][T10727] EXT4-fs (loop6): Ignoring removed nobh option [ 777.588885][T10727] EXT4-fs (loop6): Ignoring removed bh option [ 777.632557][T10732] usb usb8: usbfs: process 10732 (syz.7.1438) did not claim interface 0 before use [ 777.725510][T10727] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 777.850545][T10727] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 779.633891][T10743] overlayfs: missing 'lowerdir' [ 780.851069][T10758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1444'. [ 783.636816][T10769] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1448'. [ 786.415888][T10792] loop5: detected capacity change from 0 to 1024 [ 787.039929][T10792] EXT4-fs (loop5): Ignoring removed nobh option [ 787.072424][T10792] EXT4-fs (loop5): Ignoring removed bh option [ 787.078954][T10792] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 787.241446][T10792] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 787.268950][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.472428][T10809] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1457'. [ 789.926312][T10818] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1461'. [ 790.959153][T10836] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 792.317086][T10849] dlm: dev_write: no op 0 0 [ 793.546592][T10864] loop8: detected capacity change from 0 to 1024 [ 793.606220][T10864] EXT4-fs (loop8): Ignoring removed nobh option [ 793.628538][T10864] EXT4-fs (loop8): Ignoring removed bh option [ 793.682438][T10864] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 793.851671][T10864] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 794.806544][T10877] overlayfs: missing 'workdir' [ 800.620802][T10931] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1490'. [ 800.731667][T10934] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 803.221308][T10958] loop8: detected capacity change from 0 to 256 [ 805.196088][T10975] x_tables: duplicate underflow at hook 1 [ 805.205913][T10975] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 806.283835][T10986] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1503'. [ 806.309192][T10987] fuse: Bad value for 'fd' [ 806.632338][T10364] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 807.299845][T10364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 807.320209][T10364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 807.472634][T10364] usb 6-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice= 0.a2 [ 807.509761][T10364] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 807.539039][T10364] usb 6-1: Product: syz [ 807.559884][T10364] usb 6-1: SerialNumber: syz [ 807.665166][T10364] usb 6-1: config 0 descriptor?? [ 808.819363][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.679084][T11013] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 810.751419][T11029] x_tables: duplicate underflow at hook 1 [ 810.760990][T11029] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 811.408669][ T1108] usb 6-1: USB disconnect, device number 3 [ 811.589276][T11039] loop6: detected capacity change from 0 to 256 [ 811.894622][T11043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1518'. [ 816.690272][T11081] x_tables: duplicate underflow at hook 1 [ 816.699091][T11081] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 817.885044][T11087] loop7: detected capacity change from 0 to 256 [ 818.765219][T11092] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1531'. [ 819.498207][T11106] binder: 11105:11106 unknown command 1077961503 [ 819.511411][T11106] binder: 11105:11106 ioctl c0306201 200000000780 returned -22 [ 821.002633][T11130] loop6: detected capacity change from 0 to 256 [ 821.683770][T11141] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1545'. [ 824.904574][T11176] Cannot find add_set index 0 as target [ 824.983239][T11181] loop5: detected capacity change from 0 to 256 [ 825.728894][T11192] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1559'. [ 828.837041][T11227] loop8: detected capacity change from 0 to 256 [ 834.402442][ T1108] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 835.441791][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 835.812641][ T1108] usb 6-1: config 6 has an invalid interface number: 225 but max is 0 [ 835.881916][ T1108] usb 6-1: config 6 has no interface number 0 [ 836.031243][ T1108] usb 6-1: config 6 interface 225 has no altsetting 0 [ 836.372292][ T1108] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.ac [ 836.690123][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.705294][ T1108] usb 6-1: Product: syz [ 836.709504][ T1108] usb 6-1: Manufacturer: syz [ 837.032270][ T1108] usb 6-1: SerialNumber: syz [ 837.343861][ T1108] usb 6-1: can't set config #6, error -71 [ 837.360302][ T1108] usb 6-1: USB disconnect, device number 4 [ 844.869053][T11371] loop4: detected capacity change from 0 to 524255232 [ 846.733521][T11399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 847.708762][T11409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1619'. [ 847.808878][T11411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 849.012425][T11422] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1623'. [ 850.826028][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1628'. [ 852.182392][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1629'. [ 852.262855][T11444] input: syz0 as /devices/virtual/input/input27 [ 856.057860][T11475] loop7: detected capacity change from 0 to 256 [ 859.993502][T11511] program syz.7.1646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.031551][T11513] program syz.7.1646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.044975][T11513] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 860.360226][T11521] loop7: detected capacity change from 0 to 256 [ 860.750254][T11524] tipc: Enabling of bearer rejected, already enabled [ 862.721014][ T5761] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 862.977502][ T5761] usb 7-1: Using ep0 maxpacket: 8 [ 863.182534][ T5761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.203145][ T5761] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 863.232834][ T5761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.259461][ T5761] usb 7-1: config 0 descriptor?? [ 864.463921][ T5761] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 865.421062][ T2278] usb 7-1: USB disconnect, device number 4 [ 868.456189][T11590] tipc: Enabling of bearer rejected, already enabled [ 870.192762][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.303390][T11605] tmpfs: Unknown parameter 'grpquota' [ 871.887208][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1674'. [ 878.442643][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 878.457954][T11689] Cannot find add_set index 0 as target [ 879.064491][T11693] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14) [ 879.071740][T11693] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 879.089338][T11697] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1692'. [ 879.109433][T11693] vhci_hcd vhci_hcd.0: Device attached [ 879.116707][T11698] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 879.194143][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1686'. [ 879.203462][T11706] netlink: 'syz.6.1686': attribute type 5 has an invalid length. [ 879.211465][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1686'. [ 879.431077][T10860] vhci_hcd: vhci_device speed not set [ 879.541514][T10860] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 879.555817][T11702] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(16) [ 879.562477][T11702] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 879.588480][T11702] vhci_hcd vhci_hcd.0: Device attached [ 879.635540][T11694] vhci_hcd: connection reset by peer [ 879.661228][T11703] vhci_hcd: connection closed [ 879.668722][ T144] vhci_hcd: stop threads [ 879.679620][ T144] vhci_hcd: release socket [ 879.686370][ T144] vhci_hcd: disconnect device [ 879.764559][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 879.776823][ T4289] vhci_hcd: stop threads [ 879.783600][ T4289] vhci_hcd: release socket [ 879.788846][ T4289] vhci_hcd: disconnect device [ 880.142242][ T23] usb 6-1: device descriptor read/64, error -71 [ 881.669702][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 883.907381][T11750] virt_wifi0: mtu greater than device maximum [ 884.616215][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1705'. [ 884.625228][T11761] netlink: 'syz.6.1705': attribute type 5 has an invalid length. [ 884.633636][T11761] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1705'. [ 885.032362][T10860] vhci_hcd: vhci_device speed not set [ 892.007290][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1720'. [ 892.016462][T11811] netlink: 'syz.6.1720': attribute type 5 has an invalid length. [ 892.024914][T11811] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1720'. [ 896.263278][T11858] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1735'. [ 899.640376][T11889] tmpfs: Unknown parameter 'grpquota' [ 901.865128][T11898] lo speed is unknown, defaulting to 1000 [ 901.915970][T11898] lo speed is unknown, defaulting to 1000 [ 901.970113][T11898] lo speed is unknown, defaulting to 1000 [ 901.982835][T11898] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 902.033036][T11898] lo speed is unknown, defaulting to 1000 [ 902.047819][T11898] lo speed is unknown, defaulting to 1000 [ 902.055847][T11898] lo speed is unknown, defaulting to 1000 [ 902.062998][T11898] lo speed is unknown, defaulting to 1000 [ 902.070832][T11898] lo speed is unknown, defaulting to 1000 [ 902.078275][T11898] lo speed is unknown, defaulting to 1000 [ 902.425087][T11909] autofs4:pid:11909:autofs_fill_super: called with bogus options [ 908.412988][T11962] autofs4:pid:11962:autofs_fill_super: called with bogus options [ 910.451273][T11989] tmpfs: Unknown parameter 'grpquota' [ 911.965593][T12011] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1774'. [ 922.515755][T12113] autofs4:pid:12113:autofs_fill_super: called with bogus options [ 922.747306][T12115] binder: 12108:12115 ioctl c0306201 0 returned -14 [ 922.763152][T12115] binder: BINDER_SET_CONTEXT_MGR already set [ 922.770106][T12115] binder: 12108:12115 ioctl 4018620d 200000000040 returned -16 [ 922.779883][T12115] binder: 12108:12115 ioctl c0306201 2000000003c0 returned -22 [ 925.632029][T12138] usb usb8: usbfs: process 12138 (syz.2.1807) did not claim interface 0 before use [ 926.524747][T12147] XFS (nullb0): Invalid superblock magic number [ 929.094242][T12183] autofs4:pid:12183:autofs_fill_super: called with bogus options [ 930.333244][T12185] usb usb8: usbfs: process 12185 (syz.5.1818) did not claim interface 0 before use [ 931.577181][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.404982][T12215] XFS (nullb0): Invalid superblock magic number [ 933.942304][T12228] Device name cannot be null; rc = [-22] [ 935.569066][T12237] usb usb8: usbfs: process 12237 (syz.5.1831) did not claim interface 0 before use [ 938.939630][T12285] autofs4:pid:12285:autofs_fill_super: called with bogus options [ 939.694048][T12270] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 941.095962][T12296] usb usb8: usbfs: process 12296 (syz.6.1845) did not claim interface 0 before use [ 948.270735][T12350] usb usb8: usbfs: process 12350 (syz.2.1859) did not claim interface 0 before use [ 952.070416][T12372] loop7: detected capacity change from 0 to 256 [ 953.733076][T12393] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 954.758513][T12407] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 955.970969][T12412] XFS (nullb0): Invalid superblock magic number [ 956.924981][T12427] x_tables: duplicate underflow at hook 1 [ 956.934197][T12427] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 959.517696][T12439] loop8: detected capacity change from 0 to 256 [ 961.259997][T12474] x_tables: duplicate underflow at hook 1 [ 963.609342][T12487] loop2: detected capacity change from 0 to 256 [ 966.032336][ T2278] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 966.437811][ T2278] usb 3-1: Using ep0 maxpacket: 16 [ 966.797610][T12469] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.813359][T12469] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.827661][T12469] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.839466][T12469] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.065613][T12469] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 967.078711][T12469] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 967.089875][T12469] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 967.099877][T12469] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 967.129206][T12474] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 967.744293][ T2278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.758324][ T2278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.768447][ T2278] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 967.777605][ T2278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.788263][ T2278] usb 3-1: config 0 descriptor?? [ 967.826021][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1905'. [ 970.134423][T12542] loop6: detected capacity change from 0 to 256 [ 970.332368][ T2278] usbhid 3-1:0.0: can't add hid device: -71 [ 970.338753][ T2278] usbhid: probe of 3-1:0.0 failed with error -71 [ 970.387862][ T2278] usb 3-1: USB disconnect, device number 6 [ 974.158060][T12574] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.1920'. [ 975.321940][T12585] autofs4:pid:12585:autofs_fill_super: called with bogus options [ 976.643281][T12594] loop2: detected capacity change from 0 to 256 [ 976.645856][T12595] input: syz0 as /devices/virtual/input/input31 [ 977.386336][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1926'. [ 980.774445][T12619] Device name cannot be null; rc = [-22] [ 982.353340][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1937'. [ 982.462335][ T4221] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 982.732991][ T4221] usb 7-1: Using ep0 maxpacket: 8 [ 982.856848][ T4221] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 982.877111][ T4221] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 983.244329][T12626] input: syz0 as /devices/virtual/input/input32 [ 983.296921][ T4221] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 983.316037][T12643] netlink: 'syz.8.1939': attribute type 5 has an invalid length. [ 983.583349][ T4221] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 983.606506][ T4221] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.631157][ T4221] usb 7-1: Product: syz [ 983.641430][ T4221] usb 7-1: Manufacturer: syz [ 983.668088][ T4221] usb 7-1: SerialNumber: syz [ 983.694689][ T4221] usb 7-1: config 0 descriptor?? [ 985.455808][ T4221] usb 7-1: can't set config #0, error -71 [ 985.534312][ T4221] usb 7-1: USB disconnect, device number 5 [ 987.443390][T12672] Device name cannot be null; rc = [-22] [ 993.337461][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.998591][T12725] Device name cannot be null; rc = [-22] [ 996.573944][T12757] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1000.301709][T12778] Device name cannot be null; rc = [-22] [ 1001.603310][ T26] audit: type=1326 audit(1747098917.635:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.6.1977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e2781969 code=0x0 [ 1002.262131][T12805] input: syz0 as /devices/virtual/input/input33 [ 1004.902243][ T5761] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1005.152854][T12838] Device name cannot be null; rc = [-22] [ 1005.672208][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 1005.685759][T12843] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1988'. [ 1006.381178][ T5761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1006.891801][ T5761] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1006.962327][ T5761] usb 3-1: string descriptor 0 read error: -71 [ 1006.968978][ T5761] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1006.980092][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.431717][ T5761] usb 3-1: config 0 descriptor?? [ 1007.499798][ T5761] usb 3-1: can't set config #0, error -71 [ 1007.593098][ T5761] usb 3-1: USB disconnect, device number 7 [ 1007.691323][T12852] XFS (nullb0): Invalid superblock magic number [ 1007.750280][T12860] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1991'. [ 1008.162346][ T5761] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1008.675277][ T5761] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1008.833535][ T5761] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1008.958392][ T5761] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1009.267581][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1009.572831][ T5761] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1009.582338][ T5761] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1009.996446][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1010.192579][ T5761] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1010.201767][ T5761] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1010.294779][ T4184] Bluetooth: hci4: hardware error 0x05 [ 1010.312171][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1010.863909][ T5761] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1010.864161][ T5761] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1010.864325][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1011.220667][T12899] Device name cannot be null; rc = [-22] [ 1011.981217][ T5761] usb 3-1: unable to read config index 4 descriptor/start: -71 [ 1011.989052][ T5761] usb 3-1: can't read configurations, error -71 [ 1012.001807][T12906] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2003'. [ 1012.040067][T12885] kvm: pic: single mode not supported [ 1012.040294][T12885] kvm: pic: single mode not supported [ 1012.047279][T12885] kvm: pic: level sensitive irq not supported [ 1012.155818][T12885] kvm: pic: single mode not supported [ 1012.162214][T12885] kvm: pic: level sensitive irq not supported [ 1014.962317][T12926] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 4096, id = 0 [ 1016.333034][T12954] Device name cannot be null; rc = [-22] [ 1017.050163][T12956] kvm: pic: non byte read [ 1017.107258][T12956] kvm: pic: level sensitive irq not supported [ 1017.107327][T12956] kvm: pic: non byte read [ 1017.591434][T12956] kvm: pic: level sensitive irq not supported [ 1017.591502][T12956] kvm: pic: non byte read [ 1018.220030][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 1018.229112][T12965] netlink: 'syz.5.2017': attribute type 5 has an invalid length. [ 1018.237500][T12965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2017'. [ 1020.025886][T13002] Device name cannot be null; rc = [-22] [ 1020.981567][T13016] input: syz0 as /devices/virtual/input/input34 [ 1021.096429][T13018] xt_hashlimit: size too large, truncated to 1048576 [ 1021.113809][T13020] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2034'. [ 1022.312949][T12887] Bluetooth: Unexpected continuation frame (len 10) [ 1022.887465][T13042] ------------[ cut here ]------------ [ 1022.894562][T13042] WARNING: CPU: 0 PID: 13042 at kernel/trace/bpf_trace.c:1411 bpf_get_stack_raw_tp+0x196/0x1d0 [ 1022.906073][T13042] Modules linked in: [ 1022.910037][T13042] CPU: 0 PID: 13042 Comm: syz.2.2041 Not tainted 5.15.182-syzkaller #0 [ 1022.918400][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1022.929290][T13042] RIP: 0010:bpf_get_stack_raw_tp+0x196/0x1d0 [ 1022.935506][T13042] Code: c8 45 31 c0 e8 cb cb 13 00 65 ff 0d dc f5 81 7e 4c 63 e0 4c 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 aa 76 f6 ff <0f> 0b 65 ff 0d b9 f5 81 7e 49 c7 c4 f0 ff ff ff eb d7 e8 93 76 f6 [ 1022.956679][T13042] RSP: 0000:ffffc900031febf8 EFLAGS: 00010293 [ 1022.963217][T13042] RAX: ffffffff81814766 RBX: ffff8880b9000000 RCX: ffff888021dd5940 [ 1022.971731][T13042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 1022.979973][T13042] RBP: ffffc900031fec30 R08: dffffc0000000000 R09: fffffbfff1ff3419 [ 1022.989295][T13042] R10: fffffbfff1ff3419 R11: 1ffffffff1ff3418 R12: 0000000000000000 [ 1022.997823][T13042] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 1023.005994][T13042] FS: 000055555c1c4500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1023.015023][T13042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1023.021930][T13042] CR2: 000000110c33e617 CR3: 00000000770df000 CR4: 00000000003506f0 [ 1023.031028][T13042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1023.040725][T13042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1023.049723][T13042] Call Trace: [ 1023.053493][T13042] [ 1023.056632][T13042] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.062292][T13042] bpf_trace_run4+0x188/0x330 [ 1023.067654][T13042] ? bpf_trace_run3+0x320/0x320 [ 1023.073029][T13042] ? get_mm_memcg_path+0x24f/0x330 [ 1023.078280][T13042] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 1023.085408][T13042] ? get_mm_memcg_path+0x330/0x330 [ 1023.090845][T13042] ? mark_lock+0x94/0x320 [ 1023.095590][T13042] ? __init_rwsem+0x160/0x160 [ 1023.100433][T13042] stack_map_get_build_id_offset+0x83d/0x860 [ 1023.106514][T13042] ? get_perf_callchain+0x3b1/0x480 [ 1023.111835][T13042] ? put_callchain_entry+0xb0/0xb0 [ 1023.117237][T13042] ? __bpf_get_stackid+0x920/0x920 [ 1023.122439][T13042] ? verify_lock_unused+0x140/0x140 [ 1023.127959][T13042] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1023.134235][T13042] __bpf_get_stack+0x44a/0x4f0 [ 1023.139558][T13042] ? stack_map_get_build_id_offset+0x860/0x860 [ 1023.146942][T13042] ? read_lock_is_recursive+0x10/0x10 [ 1023.149245][ T21] Bluetooth: hci0: command 0x1003 tx timeout [ 1023.152430][T13042] ? __cant_sleep+0x210/0x210 [ 1023.164017][T13042] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.170259][T13042] bpf_get_stack_raw_tp+0x175/0x1d0 [ 1023.173474][T12887] Bluetooth: hci0: sending frame failed (-49) [ 1023.175766][T13042] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.188002][T13042] bpf_trace_run4+0x188/0x330 [ 1023.192871][T13042] ? bpf_trace_run3+0x320/0x320 [ 1023.198307][T13042] ? get_mm_memcg_path+0x24f/0x330 [ 1023.203610][T13042] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 1023.210602][T13042] ? get_mm_memcg_path+0x330/0x330 [ 1023.216182][T13042] ? mark_lock+0x94/0x320 [ 1023.221016][T13042] ? __init_rwsem+0x160/0x160 [ 1023.226337][T13042] stack_map_get_build_id_offset+0x83d/0x860 [ 1023.232520][T13042] ? get_perf_callchain+0x3b1/0x480 [ 1023.237762][T13042] ? put_callchain_entry+0xb0/0xb0 [ 1023.242922][T13042] ? __bpf_get_stackid+0x920/0x920 [ 1023.248142][T13042] ? verify_lock_unused+0x140/0x140 [ 1023.253822][T13042] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1023.259984][T13042] __bpf_get_stack+0x44a/0x4f0 [ 1023.264932][T13042] ? stack_map_get_build_id_offset+0x860/0x860 [ 1023.271257][T13042] ? read_lock_is_recursive+0x10/0x10 [ 1023.276904][T13042] ? __cant_sleep+0x210/0x210 [ 1023.282209][T13042] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.288183][T13042] bpf_get_stack_raw_tp+0x175/0x1d0 [ 1023.293492][T13042] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.299207][T13042] bpf_trace_run4+0x188/0x330 [ 1023.304325][T13042] ? bpf_trace_run3+0x320/0x320 [ 1023.309749][T13042] ? get_mm_memcg_path+0x24f/0x330 [ 1023.315285][T13042] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 1023.322300][T13042] ? get_mm_memcg_path+0x330/0x330 [ 1023.327623][T13042] ? mark_lock+0x94/0x320 [ 1023.332158][T13042] ? __init_rwsem+0x160/0x160 [ 1023.337056][T13042] stack_map_get_build_id_offset+0x83d/0x860 [ 1023.343357][T13042] ? get_perf_callchain+0x3b1/0x480 [ 1023.349066][T13042] ? put_callchain_entry+0xb0/0xb0 [ 1023.354244][T13042] ? __bpf_get_stackid+0x920/0x920 [ 1023.359539][T13042] ? verify_lock_unused+0x140/0x140 [ 1023.364827][T13042] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1023.370905][T13042] __bpf_get_stack+0x44a/0x4f0 [ 1023.376131][T13042] ? stack_map_get_build_id_offset+0x860/0x860 [ 1023.383614][T13042] ? read_lock_is_recursive+0x10/0x10 [ 1023.389044][T13042] ? __cant_sleep+0x210/0x210 [ 1023.394662][T13042] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.400804][T13042] bpf_get_stack_raw_tp+0x175/0x1d0 [ 1023.406577][T13042] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.412291][T13042] bpf_trace_run4+0x188/0x330 [ 1023.417677][T13042] ? bpf_trace_run3+0x320/0x320 [ 1023.422966][T13042] ? get_mm_memcg_path+0x24f/0x330 [ 1023.428456][T13042] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 1023.435740][T13042] ? get_mm_memcg_path+0x330/0x330 [ 1023.440899][T13042] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 1023.447487][T13042] ? __init_rwsem+0x160/0x160 [ 1023.452351][T13042] ? do_user_addr_fault+0x1a9/0xc80 [ 1023.457596][T13042] do_user_addr_fault+0xbbb/0xc80 [ 1023.463367][T13042] ? vtime_user_exit+0x2dc/0x400 [ 1023.468438][T13042] ? rcu_is_watching+0x11/0xa0 [ 1023.473635][T13042] exc_page_fault+0x60/0x100 [ 1023.478683][T13042] ? clear_bhb_loop+0x15/0x70 [ 1023.483831][T13042] asm_exc_page_fault+0x22/0x30 [ 1023.488908][T13042] RIP: 0033:0x7f178885acad [ 1023.493687][T13042] Code: ff 48 83 e8 01 48 89 ee bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 e9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 11 fd ff ff e9 c0 fd ff ff e8 7b 2b [ 1023.514541][T13042] RSP: 002b:00007ffd88725f50 EFLAGS: 00010202 [ 1023.520766][T13042] RAX: 000000110c33c000 RBX: 00007f17896d1720 RCX: 0000000000000006 [ 1023.528840][T13042] RDX: 0000000000001df2 RSI: 00000000000005f7 RDI: 0000000000000040 [ 1023.537310][T13042] RBP: ffffffff84017df2 R08: 00007f1788ba2038 R09: 00007f1788b8e000 [ 1023.545912][T13042] R10: 00007f1787feb008 R11: 0000000000000003 R12: 0000000000000003 [ 1023.554586][T13042] R13: 0000000000000000 R14: ffffffff840171be R15: 00000000000002cc [ 1023.562925][T13042] ? insn_decode+0x1e/0x490 [ 1023.567501][T13042] ? __copy_user_flushcache+0x22/0x2a0 [ 1023.573371][T13042] [ 1023.576652][T13042] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1023.584327][T13042] CPU: 0 PID: 13042 Comm: syz.2.2041 Not tainted 5.15.182-syzkaller #0 [ 1023.592943][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1023.603537][T13042] Call Trace: [ 1023.606854][T13042] [ 1023.609824][T13042] dump_stack_lvl+0x168/0x230 [ 1023.614756][T13042] ? show_regs_print_info+0x20/0x20 [ 1023.620392][T13042] ? load_image+0x3b0/0x3b0 [ 1023.625262][T13042] panic+0x2c9/0x7f0 [ 1023.630748][T13042] ? bpf_jit_dump+0xd0/0xd0 [ 1023.635747][T13042] ? __copy_user_flushcache+0x22/0x2a0 [ 1023.642194][T13042] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 1023.647712][T13042] __warn+0x248/0x2b0 [ 1023.652006][T13042] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 1023.657984][T13042] report_bug+0x1b7/0x2e0 [ 1023.662451][T13042] handle_bug+0x3a/0x70 [ 1023.666646][T13042] exc_invalid_op+0x16/0x40 [ 1023.672767][T13042] asm_exc_invalid_op+0x16/0x20 [ 1023.677864][T13042] RIP: 0010:bpf_get_stack_raw_tp+0x196/0x1d0 [ 1023.684329][T13042] Code: c8 45 31 c0 e8 cb cb 13 00 65 ff 0d dc f5 81 7e 4c 63 e0 4c 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 aa 76 f6 ff <0f> 0b 65 ff 0d b9 f5 81 7e 49 c7 c4 f0 ff ff ff eb d7 e8 93 76 f6 [ 1023.704763][T13042] RSP: 0000:ffffc900031febf8 EFLAGS: 00010293 [ 1023.711047][T13042] RAX: ffffffff81814766 RBX: ffff8880b9000000 RCX: ffff888021dd5940 [ 1023.719052][T13042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 1023.727594][T13042] RBP: ffffc900031fec30 R08: dffffc0000000000 R09: fffffbfff1ff3419 [ 1023.735684][T13042] R10: fffffbfff1ff3419 R11: 1ffffffff1ff3418 R12: 0000000000000000 [ 1023.743887][T13042] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 1023.752082][T13042] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 1023.757587][T13042] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 1023.762991][T13042] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.768560][T13042] bpf_trace_run4+0x188/0x330 [ 1023.773353][T13042] ? bpf_trace_run3+0x320/0x320 [ 1023.778328][T13042] ? get_mm_memcg_path+0x24f/0x330 [ 1023.783496][T13042] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 1023.790374][T13042] ? get_mm_memcg_path+0x330/0x330 [ 1023.795601][T13042] ? mark_lock+0x94/0x320 [ 1023.800086][T13042] ? __init_rwsem+0x160/0x160 [ 1023.804797][T13042] stack_map_get_build_id_offset+0x83d/0x860 [ 1023.811239][T13042] ? get_perf_callchain+0x3b1/0x480 [ 1023.818164][T13042] ? put_callchain_entry+0xb0/0xb0 [ 1023.824527][T13042] ? __bpf_get_stackid+0x920/0x920 [ 1023.830668][T13042] ? verify_lock_unused+0x140/0x140 [ 1023.836642][T13042] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1023.847800][T13042] __bpf_get_stack+0x44a/0x4f0 [ 1023.853960][T13042] ? stack_map_get_build_id_offset+0x860/0x860 [ 1023.861212][T13042] ? read_lock_is_recursive+0x10/0x10 [ 1023.867229][T13042] ? __cant_sleep+0x210/0x210 [ 1023.872956][T13042] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.879968][T13042] bpf_get_stack_raw_tp+0x175/0x1d0 [ 1023.885891][T13042] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1023.892151][T13042] bpf_trace_run4+0x188/0x330 [ 1023.897307][T13042] ? bpf_trace_run3+0x320/0x320 [ 1023.902707][T13042] ? get_mm_memcg_path+0x24f/0x330 [ 1023.908468][T13042] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 1023.915906][T13042] ? get_mm_memcg_path+0x330/0x330 [ 1023.921634][T13042] ? mark_lock+0x94/0x320 [ 1023.926389][T13042] ? __init_rwsem+0x160/0x160 [ 1023.931547][T13042] stack_map_get_build_id_offset+0x83d/0x860 [ 1023.937841][T13042] ? get_perf_callchain+0x3b1/0x480 [ 1023.944082][T13042] ? put_callchain_entry+0xb0/0xb0 [ 1023.950051][T13042] ? __bpf_get_stackid+0x920/0x920 [ 1023.956643][T13042] ? verify_lock_unused+0x140/0x140 [ 1023.963774][T13042] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1023.971344][T13042] __bpf_get_stack+0x44a/0x4f0 [ 1023.977170][T13042] ? stack_map_get_build_id_offset+0x860/0x860 [ 1023.985275][T13042] ? read_lock_is_recursive+0x10/0x10 [ 1023.990962][T13042] ? __cant_sleep+0x210/0x210 [ 1023.996010][T13042] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1024.002279][T13042] bpf_get_stack_raw_tp+0x175/0x1d0 [ 1024.007641][T13042] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1024.013214][T13042] bpf_trace_run4+0x188/0x330 [ 1024.018096][T13042] ? bpf_trace_run3+0x320/0x320 [ 1024.023166][T13042] ? get_mm_memcg_path+0x24f/0x330 [ 1024.028676][T13042] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 1024.035799][T13042] ? get_mm_memcg_path+0x330/0x330 [ 1024.041045][T13042] ? mark_lock+0x94/0x320 [ 1024.045750][T13042] ? __init_rwsem+0x160/0x160 [ 1024.051338][T13042] stack_map_get_build_id_offset+0x83d/0x860 [ 1024.058235][T13042] ? get_perf_callchain+0x3b1/0x480 [ 1024.064107][T13042] ? put_callchain_entry+0xb0/0xb0 [ 1024.069449][T13042] ? __bpf_get_stackid+0x920/0x920 [ 1024.075025][T13042] ? verify_lock_unused+0x140/0x140 [ 1024.080966][T13042] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1024.087181][T13042] __bpf_get_stack+0x44a/0x4f0 [ 1024.092550][T13042] ? stack_map_get_build_id_offset+0x860/0x860 [ 1024.098832][T13042] ? read_lock_is_recursive+0x10/0x10 [ 1024.104514][T13042] ? __cant_sleep+0x210/0x210 [ 1024.109526][T13042] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1024.115864][T13042] bpf_get_stack_raw_tp+0x175/0x1d0 [ 1024.121512][T13042] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb0c [ 1024.128108][T13042] bpf_trace_run4+0x188/0x330 [ 1024.134124][T13042] ? bpf_trace_run3+0x320/0x320 [ 1024.139742][T13042] ? get_mm_memcg_path+0x24f/0x330 [ 1024.145290][T13042] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 1024.153739][T13042] ? get_mm_memcg_path+0x330/0x330 [ 1024.160719][T13042] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 1024.168533][T13042] ? __init_rwsem+0x160/0x160 [ 1024.173807][T13042] ? do_user_addr_fault+0x1a9/0xc80 [ 1024.180707][T13042] do_user_addr_fault+0xbbb/0xc80 [ 1024.186476][T13042] ? vtime_user_exit+0x2dc/0x400 [ 1024.191633][T13042] ? rcu_is_watching+0x11/0xa0 [ 1024.197245][T13042] exc_page_fault+0x60/0x100 [ 1024.201893][T13042] ? clear_bhb_loop+0x15/0x70 [ 1024.206701][T13042] asm_exc_page_fault+0x22/0x30 [ 1024.211763][T13042] RIP: 0033:0x7f178885acad [ 1024.216488][T13042] Code: ff 48 83 e8 01 48 89 ee bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 e9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 11 fd ff ff e9 c0 fd ff ff e8 7b 2b [ 1024.240061][T13042] RSP: 002b:00007ffd88725f50 EFLAGS: 00010202 [ 1024.247618][T13042] RAX: 000000110c33c000 RBX: 00007f17896d1720 RCX: 0000000000000006 [ 1024.257993][T13042] RDX: 0000000000001df2 RSI: 00000000000005f7 RDI: 0000000000000040 [ 1024.266883][T13042] RBP: ffffffff84017df2 R08: 00007f1788ba2038 R09: 00007f1788b8e000 [ 1024.275230][T13042] R10: 00007f1787feb008 R11: 0000000000000003 R12: 0000000000000003 [ 1024.283680][T13042] R13: 0000000000000000 R14: ffffffff840171be R15: 00000000000002cc [ 1024.292057][T13042] ? insn_decode+0x1e/0x490 [ 1024.296658][T13042] ? __copy_user_flushcache+0x22/0x2a0 [ 1024.302371][T13042] [ 1024.306052][T13042] Kernel Offset: disabled [ 1024.314602][T13042] Rebooting in 86400 seconds..