last executing test programs: 27m31.134712291s ago: executing program 1 (id=62): ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x0, 0x4}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f00000000c0)={0x308a, 0x2, 0x2}, 0x18, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0xa, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000280)={'wlan0\x00'}) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 27m29.130638262s ago: executing program 1 (id=64): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 27m28.908360435s ago: executing program 1 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000cfc000/0x2000)=nil, 0x2000, 0x17) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_init1(0x0) rmdir(&(0x7f0000000100)='./control\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) 27m27.754912513s ago: executing program 1 (id=67): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x18, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 27m19.52987658s ago: executing program 1 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000002480)={[{@numtail}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_lower}, {@utf8no}]}, 0x23, 0x34c, &(0x7f0000002100)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26}, 0x28) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) getdents64(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x80) ioctl$AUTOFS_IOC_READY(r0, 0xc0049364, 0x800000000000001) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, &(0x7f0000000340)) fanotify_init(0x202, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xc0800, 0x0) 27m18.305754009s ago: executing program 1 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000038000/0x1000)=nil) r5 = syz_open_dev$video(&(0x7f0000000000), 0x40000000000101, 0xab02) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000040)={0x5, {0x3, 0x7, 0xff, 0xffffffff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r6 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0xa, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, 0x0, 0x0, 0x9200000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) r7 = shmat(r4, &(0x7f00004d8000/0x1000)=nil, 0x4000) shmdt(r7) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=r1, @ANYBLOB="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", @ANYRESDEC=r7], 0xfe, 0x14f, &(0x7f0000000280)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") 27m3.080273333s ago: executing program 32 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000038000/0x1000)=nil) r5 = syz_open_dev$video(&(0x7f0000000000), 0x40000000000101, 0xab02) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000040)={0x5, {0x3, 0x7, 0xff, 0xffffffff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r6 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0xa, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, 0x0, 0x0, 0x9200000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) r7 = shmat(r4, &(0x7f00004d8000/0x1000)=nil, 0x4000) shmdt(r7) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=r1, @ANYBLOB="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", @ANYRESDEC=r7], 0xfe, 0x14f, &(0x7f0000000280)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") 22m7.571142443s ago: executing program 3 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 22m5.520341425s ago: executing program 3 (id=758): r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 22m4.302262914s ago: executing program 3 (id=761): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = timerfd_create(0x7, 0x0) timerfd_gettime(r2, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) unshare(0x2c060000) modify_ldt$write(0x1, 0x0, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) writev(r1, 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, 0x0, 0x20883, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000040)) 22m1.662013384s ago: executing program 3 (id=770): statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x100, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f00007d3000/0x4000)=nil, 0x4000, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4048806) 21m59.401976489s ago: executing program 3 (id=773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) read$dsp(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000900)={0x1d, r6, 0x1}, 0x18) sendmmsg$unix(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)="bd", 0x1}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x2, 0x1d3) 21m58.095058449s ago: executing program 3 (id=779): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) 21m42.125924333s ago: executing program 33 (id=779): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) 1m39.690821041s ago: executing program 4 (id=3292): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x12) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.552739599s ago: executing program 4 (id=3296): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(0x0, 0x81, 0x2a82) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r2, &(0x7f0000000200), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) shutdown(r2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 1m37.110835212s ago: executing program 4 (id=3299): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x62040200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001640)=""/4096, 0x4, 0x0, 0x15, 0xb4, &(0x7f0000000000)="34e635e979d86c60a0f5dd183e2df077378ee433b9", &(0x7f0000000080)="038595c08d232d0728cb8e35f7cb753f1c11eec64c168492901e8c8837deebc16ffb97ab712a6d54df672944d68f22a933f77babbbc24cdd33eaacfea27dfd150efa80aed3aa8622bc14187a4260f481265adcf27b08fd1659b50e57f6cfba7b0a4eaf4378bc72afe71ccd70e99436f372e259c1216aa6564df015d2abd28d859522881bcdbb9647d54874e656191b42f31cfc9ecf4eb3722ee682e80390fab2967b4ec7a17b027c53c256472cc5d954521c72c4", 0x4, 0x0, 0x200}, 0x50) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) socket(0x1, 0x2, 0x0) 1m31.494509549s ago: executing program 4 (id=3309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) fdatasync(0xffffffffffffffff) 1m29.567749228s ago: executing program 4 (id=3312): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) kexec_load(0x8, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000040)="d56f03a7d2e62a63ee1675d1aed9ff55f638eeaec89e20b769322901420c5c2157ea8a52a440d2e46521e1eab287cf5d88064a03eeb7cb3bad450e4a7e41f28327616be7667193ea71484831cb38bee749c4514e28ab0a7bacd0e9ec07106e1cc636b1f3af9206c77f77d71a5c1872e7339179b99527e137b8f42b3da1c2510164f26c776f5651582ece949aa6a704", 0x8f, 0x9, 0x7fffffff}, {&(0x7f0000000100)="e1430afa96a385535d56303c2c74b30277623d4171", 0x15, 0x7, 0x1}, {&(0x7f0000000240)="abafafdfa95badb79dd898ab1e951e7b6c467f2e547196c5b50a361348b233e9c3cdbf8f17e8b85d802b22c805c73355bb93e7ed7aca79e49642ad2ff7d726e0bd03dbedccc6bd890bd71be74f1d02cd927e70c147d9b6c329ee71b818fa60f3fb811012073806da83695e", 0x6b, 0xd, 0x7}, {&(0x7f0000000340)="b78492fbf01425dcf615abd5633a90a98ee9211d8bc6ec4c8482e0b48937824946a83d894430ab61efe396bb80d75e0d4b1a7b813049a7a0570474cf02f996ae4a095a964261ae5f09564961f6ca79a4a6a8bea8ebcd63e043a52c6c94a3e058a2c07bb1afcd525d19b14fb3f42baa", 0x6f, 0x8, 0xfffffffffffffffc}, {&(0x7f00000003c0)="4e7fa1cf8cb5f9f2ad22dc170f5d0a7e46f271409b23c1cd631c10f1817364fa233a8677018503843012d168e9db27e0353f6e07c1317966fc7ca4c01dd54fb74abb77c341ef4f1a3db7894b7dcca271684a591fa6f672b5568056e426e9a65b61ff7f274946618139c60a5c57a568bf01e363dc57c69db9a483a7abf7f3c6feb9a570120a9d1da08295f9b97940d7c22e16e2fd805a1ccf478280ea95e09de792ffc729a61e6098fa1ce0bc253b324a7ed441a0b57248ea49e5658796ec4287d78e653d7fef35cd02508dd2adea5af32b9b3ea6dbbc94", 0xd7, 0x5, 0x7b}, {&(0x7f00000004c0)="73f766d217283291cdd776104fb1418ec78b20cb94880f0c60e2b9bcaa22d31c82a5addf1151867fbd022fb65ac3b7f39bb5fe23400a7bd47ad4984aa00e2fbd67746857248af5c6c03e590b41357bb0e5c73b0d670b6e2e8537667b9a7c7433f0c93abd15f911100ac94f6bcda9eb7ce657ab60a6ae39d432099401d23df0d35edaff3bc18fd6988604bcad37c522de0d9fcee586c99d249614737a299262fcb00156b7916ec4b25516a25dce9235c0e5a649c94f740d28c43cf990c794c2084bc71fa960a898bb8bb459bc50357d3a47e8171fad4ea3ab", 0xd8, 0xa0, 0x1}], 0x280000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x2) 1m28.83121086s ago: executing program 4 (id=3314): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500"/51], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m13.327763081s ago: executing program 34 (id=3314): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500"/51], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 24.425515911s ago: executing program 5 (id=3432): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3fe, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x34, r7, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 22.254833385s ago: executing program 5 (id=3437): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x12) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) close_range(r0, 0xffffffffffffffff, 0x0) 21.217554211s ago: executing program 5 (id=3440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) fdatasync(r6) 17.964163571s ago: executing program 5 (id=3444): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) unshare(0x62040200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001640)=""/4096, 0x4, 0x0, 0x15, 0xb4, &(0x7f0000000000)="34e635e979d86c60a0f5dd183e2df077378ee433b9", &(0x7f0000000080)="038595c08d232d0728cb8e35f7cb753f1c11eec64c168492901e8c8837deebc16ffb97ab712a6d54df672944d68f22a933f77babbbc24cdd33eaacfea27dfd150efa80aed3aa8622bc14187a4260f481265adcf27b08fd1659b50e57f6cfba7b0a4eaf4378bc72afe71ccd70e99436f372e259c1216aa6564df015d2abd28d859522881bcdbb9647d54874e656191b42f31cfc9ecf4eb3722ee682e80390fab2967b4ec7a17b027c53c256472cc5d954521c72c4", 0x4, 0x0, 0x200}, 0x50) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0) 16.455049795s ago: executing program 5 (id=3448): r0 = epoll_create1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.346902252s ago: executing program 5 (id=3449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[r4], 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x7351, 0x8001) 15.083536946s ago: executing program 6 (id=3451): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x9, 0x4, 0x2, 0x4800, 0xffffffffffffffff}) read(r1, &(0x7f0000000240)=""/44, 0x2c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 13.54826558s ago: executing program 7 (id=3454): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x468}}, 0x0) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) mknodat(0xffffffffffffffff, 0x0, 0xc000, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="27005a230826df142cc0eafff40420000000000000c7b82610e057090000000000000039c2f6b2eb7d2f06a75957c9b0733d12c947287f9938b1cf9533ca4f2b1d527b14e18a07fd7c3737382ef40d8c9f2b71e9c6335bd7270f1ea8790eef3d94a91bdd77705debd11188523efdea48e80cb642091bb4379913f4d6c61e15cdf211d4fbc4", @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0xd, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000007503000000000000040000009a6b5000ffffffff85200000010a5b009500000000000000185900000b0000000000000000f6000018120000c155aa7b3570c2b2e948921be9d64bdaad98b1c3b44b339c3ca368c10ed298960cce0b0a4081833982e6d33010e47e", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0xb5, &(0x7f0000000b00)=""/181, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2ed31, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c00)=[{0x3, 0x2, 0xd, 0x6}, {0x3, 0x5, 0x6, 0x7}], 0x10, 0x10001}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2c0000001000000000000000", @ANYRES32=r6, @ANYBLOB="cf3da91a011c8f491d4d59493b88c96f006d32fbdf8e9e7d1ce01658e9e2aa908bd6f80c401ed3c6be980faa127a405bd72c817dc019aaa0ee3b7c894f30255c064bf73daf2951ebbac0cf0b6bb207b7fc2c19d6adfee40eac739e", @ANYRES64=r5], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000400)='\t', 0x1}, {&(0x7f0000000000)='x', 0x1}, {0x0}], 0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRES64=r5], 0x20) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 11.61544939s ago: executing program 2 (id=3456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x50}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xd6}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7", 0x7b}, {&(0x7f0000000300)}], 0x5}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.218312496s ago: executing program 7 (id=3457): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3fe, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, 0x0, 0x0) 11.012375829s ago: executing program 6 (id=3458): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r4, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000340)={0x1, 0x401fc, 0x3, 0x8000000000a, 0x8, 0xfffc, 0xffffffffeb1cce61, 0x9, 0x0, 0x1000000000001, 0x4, 0x2}) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000040)=0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) 9.66852657s ago: executing program 6 (id=3460): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) unshare(0x62040200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001640)=""/4096, 0x4, 0x0, 0x15, 0xb4, &(0x7f0000000000)="34e635e979d86c60a0f5dd183e2df077378ee433b9", &(0x7f0000000080)="038595c08d232d0728cb8e35f7cb753f1c11eec64c168492901e8c8837deebc16ffb97ab712a6d54df672944d68f22a933f77babbbc24cdd33eaacfea27dfd150efa80aed3aa8622bc14187a4260f481265adcf27b08fd1659b50e57f6cfba7b0a4eaf4378bc72afe71ccd70e99436f372e259c1216aa6564df015d2abd28d859522881bcdbb9647d54874e656191b42f31cfc9ecf4eb3722ee682e80390fab2967b4ec7a17b027c53c256472cc5d954521c72c4", 0x4, 0x0, 0x200}, 0x50) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0) 8.830020223s ago: executing program 7 (id=3461): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) shutdown(r0, 0x1) 8.614444396s ago: executing program 7 (id=3463): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000280)=0x68) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000040)={0x3fffffff, 0x0, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) write$sysctl(r5, 0x0, 0x0) syz_emit_ethernet(0x469, &(0x7f0000000400)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x433, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [{0x0, 0x9, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}, {0x0, 0x22, "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"}, {0x3, 0xe, "41489859faad6b7894fe1137424008d432183a0113681c77fc82aec87a233d898a11c5cd98182e0722cd47409df61e0bba337962ebd666210dc03bdacde3052d2e9c5aa731b244867e503ea12228ee0be34e90eb3bf9d5935a7bf990cfb04124927b9452145135264a5e76623102"}]}}}}}}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) r6 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000c80)={0x2, @sliced={0x8, [0x4, 0x7fff, 0x8, 0xf800, 0x2, 0x9, 0x2, 0x7, 0x1, 0xfff9, 0x401, 0xa9ef, 0x6, 0x2, 0x4, 0x6, 0x2, 0x38, 0x1, 0xffff, 0x8, 0x7, 0x3, 0xfffd, 0x5, 0xacb, 0x3, 0x7, 0x5f, 0x40, 0x4, 0xfc00, 0x2, 0x2, 0x0, 0xfffc, 0x2, 0x972, 0x1ff, 0x8, 0xc00, 0xddb, 0x4, 0x4, 0xd477, 0x9, 0x8], 0x2}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) 7.643318492s ago: executing program 6 (id=3464): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3fe, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, 0x0, 0x0) 6.46150204s ago: executing program 6 (id=3466): ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$packet(0x11, 0x2, 0x300) 6.397454971s ago: executing program 2 (id=3467): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@nolazytime}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 6.013341477s ago: executing program 2 (id=3469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0x8, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(0x0, 0x0, 0x0) getrlimit(0xa, &(0x7f0000000180)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) openat$incfs(0xffffffffffffffff, 0x0, 0x2100c0, 0x140) 6.002438537s ago: executing program 0 (id=3470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 3.845054031s ago: executing program 0 (id=3471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x1, 0x0, &(0x7f0000000a40)="82"}) syz_emit_ethernet(0xc5, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff884700000000000000000000000000000000401a00a7006500000e219078e0000002e0000001860a346715960ce5e061445433c1e00000017fffffff0a010100000000080000000000000007ac1414aa000089880a016e9ab6960008e000000100000003ac1414bb0000008a0000000000000006ac14140a7eaa00010001ac1414bb00000005890bed0a010102e00000020000004e204e2204519078c84753b9081af4edab9464977e1a668761d696a7c692", @ANYRES16=r2], &(0x7f0000000180)={0x1, 0x1, [0x929, 0x19e, 0x221, 0x66f]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r9, &(0x7f0000000000)='2', 0x1, 0x4fed0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 2.565610561s ago: executing program 2 (id=3472): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 2.453384872s ago: executing program 0 (id=3473): r0 = epoll_create1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.135610868s ago: executing program 0 (id=3474): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@nolazytime}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[]) 2.065486269s ago: executing program 2 (id=3475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) fdatasync(r6) 1.493336717s ago: executing program 0 (id=3476): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000440)) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={0x1e0, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x1, 0x0, 0x4000}, [@nested={0x14, 0xbc, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x13, 0x0, 0x0, @fd}]}, @nested={0x1b7, 0x92, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}, @generic="5691c7970d30af800e6500", @typed={0xc, 0x59, 0x0, 0x0, @u64=0x5}, @nested={0xe7, 0x60, 0x0, 0x1, [@generic="686c8f4f8ee6e25904242bef388891bc09ca6717104e7456da9ee685826f21261c8c6b48ed678d1dddcba9d220eb87b3c9b5477501749e0bbaedfb9bc3a1947ded28fb3c4f9730e5bcae9f07e6141cbdd0701e8a5ffd675418a3c5c21ade4eb56cf90e94ad97e37d79eb6e9403d1bc204d7b0b3111577e31260f5b848f93354f70f726e815bee9babcc37337b67f5f8c03366c9b536e29ef62fef1f11380a7bdc70c8b0d91b9a8b9621b515023223263119d65bebdc11329f908ecf1dfc234c037a3c8112f058e5328f84de202f7e82da397ecdaeea840abed3ccaf2db519b0dc86275"]}, @nested={0x4, 0x5c}, @nested={0x6f, 0x20, 0x0, 0x1, [@generic="d411ed0501daff5469bd8d46c366c8a704154edae150c3ad59e548aff8d1ab277eb9d3336f8eed95597b5c2eebc6f48971363999283d4eca1f1b91d5bb5119cda3b1cbbd5817f9f26edc7c8197e830345625403ea6076d919abd87a8f7001008770f81124898bd", @nested={0x4, 0xbc}]}, @generic="b7b73d5bf541ce2c0023c11cd138fb2b04ad3f2147468f42980d6cf57a7014275b92da30594ea619bbfeb3f7"]}]}, 0x1e0}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_TIOCOUTQ(r7, 0x5411, 0x0) 1.463983508s ago: executing program 6 (id=3477): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='ext4_remove_blocks\x00', r1}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) eventfd2(0x201, 0x81001) r2 = getpid() setpriority(0x0, r2, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000100000000000000ace1072c406d2006ad2455c98d14af33328923b5986a546c725756bbcaa84989000002484f726347deb383079db192dc4b4ce5e54e097eb40b8fbb363e85071195000985e8944cc16e2d85effeee66862d26d22960883a293b61929f56b40339a8d64024ae4a889fec"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pread64(0xffffffffffffffff, &(0x7f0000002200)=""/89, 0x59, 0x10000) 1.423097369s ago: executing program 7 (id=3478): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {}]}, @func, @volatile={0x3}, @volatile, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @func_proto, @datasec={0xd, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x1, 0x1000000}, {0x1, 0x2, 0x72800000}, {0x4, 0x5, 0x49e}, {0x1, 0x41a1, 0x2}], "17"}]}}, 0x0, 0xe2}, 0x28) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x400000008000f28, 0x0) splice(r7, 0x0, r6, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) dup3(r3, r2, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0xa100}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000340)=[@request_death, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x0, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/144, 0x0, 0x2, 0x14}, @fda={0x66646185, 0xa, 0x0, 0x18}}}}], 0xfffffffffffffe97, 0x1000000, 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0}, 0x94) r10 = epoll_create(0x609f) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x210000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000001740)={0x40000000}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r12}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x20) 230.427717ms ago: executing program 0 (id=3479): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 166.215638ms ago: executing program 7 (id=3480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fdatasync(r5) 0s ago: executing program 2 (id=3481): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000040)={0x4, r4, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x7) kernel console output (not intermixed with test programs): 4, bcdDevice=e4.df [ 1101.192141][T10486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.597263][T10486] usb 1-1: config 0 descriptor?? [ 1101.749534][T10486] pwc: Askey VC010 type 2 USB webcam detected. [ 1102.019102][T13104] loop6: detected capacity change from 0 to 32768 [ 1102.076446][T13104] JBD2: Ignoring recovery information on journal [ 1102.105397][T13104] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1102.314583][T10486] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1102.357626][T10486] pwc: recv_control_msg error -32 req 02 val 2700 [ 1102.491451][T10486] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1103.617818][ T7908] ocfs2: Unmounting device (7,6) on (node local) [ 1104.429034][T13114] binder: 13110:13114 ioctl c0306201 200000000780 returned -11 [ 1104.452571][T13114] loop2: detected capacity change from 0 to 128 [ 1105.624093][T13113] virtio-fs: tag not found [ 1105.684061][T10486] pwc: recv_control_msg error -71 req 04 val 1000 [ 1105.701625][T10486] pwc: recv_control_msg error -71 req 04 val 1300 [ 1105.746877][T10486] pwc: recv_control_msg error -71 req 04 val 1400 [ 1105.760865][T10486] pwc: recv_control_msg error -71 req 02 val 2000 [ 1105.771223][T10486] pwc: recv_control_msg error -71 req 02 val 2100 [ 1105.807265][T10486] pwc: recv_control_msg error -71 req 04 val 1500 [ 1105.985977][T10486] pwc: recv_control_msg error -71 req 02 val 2500 [ 1106.159705][T13123] loop0: detected capacity change from 0 to 32768 [ 1106.235405][T10486] pwc: recv_control_msg error -71 req 02 val 2400 [ 1106.251947][T10486] pwc: recv_control_msg error -71 req 02 val 2600 [ 1106.271156][T10486] pwc: recv_control_msg error -71 req 02 val 2900 [ 1106.301127][T10486] pwc: recv_control_msg error -71 req 02 val 2800 [ 1106.342827][T10486] pwc: recv_control_msg error -71 req 04 val 1100 [ 1106.361126][T10486] pwc: recv_control_msg error -71 req 04 val 1200 [ 1106.387664][T10486] pwc: Registered as video103. [ 1106.413946][T10486] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input80 [ 1106.460905][T10486] usb 1-1: USB disconnect, device number 11 [ 1107.961011][T10486] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1108.170990][T10486] usb 1-1: Using ep0 maxpacket: 8 [ 1108.253540][T10486] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1108.325025][T13136] overlayfs: unrecognized mount option "verity=off" or missing value [ 1108.574430][T10486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.591770][T10486] usb 1-1: Product: syz [ 1108.596068][T10486] usb 1-1: Manufacturer: syz [ 1108.600676][T10486] usb 1-1: SerialNumber: syz [ 1108.608042][T10486] usb 1-1: config 0 descriptor?? [ 1108.639835][T10486] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1109.746074][T11214] block nbd4: Attempted send on invalid socket [ 1109.752941][T11214] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1109.763093][T13150] (syz.4.2167,13150,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1109.771037][T13150] (syz.4.2167,13150,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1109.778515][T13150] (syz.4.2167,13150,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1109.788039][T13150] (syz.4.2167,13150,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1110.500630][T10486] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 1110.508744][T10486] sq905: probe of 1-1:0.0 failed with error -110 [ 1110.524967][ T9599] usb 1-1: USB disconnect, device number 12 [ 1111.780912][ T4256] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1112.019960][T13174] overlayfs: unrecognized mount option "verity=off" or missing value [ 1112.112496][ T4256] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.155323][ T4256] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1112.190993][ T4256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.443097][ T4256] usb 6-1: config 0 descriptor?? [ 1112.480520][ T4256] pwc: Askey VC010 type 2 USB webcam detected. [ 1112.954468][T12068] block nbd6: Attempted send on invalid socket [ 1112.960700][T12068] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1112.969890][T13184] (syz.6.2177,13184,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1112.977707][T13184] (syz.6.2177,13184,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1112.985148][T13184] (syz.6.2177,13184,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1112.993888][T13184] (syz.6.2177,13184,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1113.849754][ T4256] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1115.080843][ T4257] Bluetooth: hci4: command 0x0409 tx timeout [ 1115.344128][ T4256] pwc: recv_control_msg error -32 req 02 val 2700 [ 1115.355137][ T4256] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1115.723244][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.729887][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.543162][ T4256] pwc: recv_control_msg error -71 req 04 val 1000 [ 1116.553023][ T4256] pwc: recv_control_msg error -71 req 04 val 1300 [ 1116.579949][ T4256] pwc: recv_control_msg error -71 req 04 val 1400 [ 1116.587177][ T4256] pwc: recv_control_msg error -71 req 02 val 2000 [ 1116.607400][ T4256] pwc: recv_control_msg error -71 req 02 val 2100 [ 1116.622330][ T4256] pwc: recv_control_msg error -71 req 04 val 1500 [ 1116.637630][ T4256] pwc: recv_control_msg error -71 req 02 val 2500 [ 1116.652326][ T4256] pwc: recv_control_msg error -71 req 02 val 2400 [ 1116.661913][ T4256] pwc: recv_control_msg error -71 req 02 val 2600 [ 1116.671809][ T4256] pwc: recv_control_msg error -71 req 02 val 2900 [ 1116.681688][ T4256] pwc: recv_control_msg error -71 req 02 val 2800 [ 1116.692739][ T4256] pwc: recv_control_msg error -71 req 04 val 1100 [ 1116.761177][ T4256] pwc: recv_control_msg error -71 req 04 val 1200 [ 1116.810161][ T4256] pwc: Registered as video103. [ 1116.861659][ T4256] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input81 [ 1116.915627][ T4256] usb 6-1: USB disconnect, device number 15 [ 1122.303636][ T7256] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1122.796276][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 1122.823325][T13248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2195'. [ 1123.147326][ T7256] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.268140][ T7256] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1123.407333][ T7256] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.429220][ T7256] usb 7-1: config 0 descriptor?? [ 1123.461366][ T7256] pwc: Askey VC010 type 2 USB webcam detected. [ 1124.562290][ T7256] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1124.575052][ T7256] pwc: recv_control_msg error -32 req 02 val 2700 [ 1124.621212][ T7256] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1125.440106][ T7256] pwc: recv_control_msg error -71 req 04 val 1000 [ 1125.481303][ T7256] pwc: recv_control_msg error -71 req 04 val 1300 [ 1125.527616][ T7256] pwc: recv_control_msg error -71 req 04 val 1400 [ 1125.548170][ T7256] pwc: recv_control_msg error -71 req 02 val 2000 [ 1125.592632][ T7256] pwc: recv_control_msg error -71 req 02 val 2100 [ 1125.609660][ T7256] pwc: recv_control_msg error -71 req 04 val 1500 [ 1126.009917][ T7256] pwc: recv_control_msg error -71 req 02 val 2500 [ 1126.149331][ T7256] pwc: recv_control_msg error -71 req 02 val 2400 [ 1126.186031][ T7256] pwc: recv_control_msg error -71 req 02 val 2600 [ 1126.211034][ T7256] pwc: recv_control_msg error -71 req 02 val 2900 [ 1126.235730][ T7256] pwc: recv_control_msg error -71 req 02 val 2800 [ 1126.304198][ T7256] pwc: recv_control_msg error -71 req 04 val 1100 [ 1126.583745][ T7256] pwc: recv_control_msg error -71 req 04 val 1200 [ 1126.736864][ T26] audit: type=1326 audit(1751248392.872:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13298 comm="syz.4.2206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2351d8e929 code=0x0 [ 1126.864006][ T7256] pwc: Registered as video103. [ 1126.869448][ T7256] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input83 [ 1126.881763][ T7256] usb 7-1: USB disconnect, device number 24 [ 1127.022027][T13302] loop6: detected capacity change from 0 to 64 [ 1127.224138][T13302] overlayfs: unrecognized mount option "/fiÿ" or missing value [ 1127.242967][ T26] audit: type=1804 audit(1751248393.382:86): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2209" name="/newroot/254/file1/file0" dev="loop6" ino=21 res=1 errno=0 [ 1127.264700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1128.187558][T13320] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2212'. [ 1128.630946][T12901] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1129.163357][T12068] block nbd6: Attempted send on invalid socket [ 1129.169587][T12068] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1129.178853][T13333] (syz.6.2215,13333,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1129.186583][T13333] (syz.6.2215,13333,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1129.195153][T13333] (syz.6.2215,13333,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1129.195180][T13333] (syz.6.2215,13333,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1129.278478][T12901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.432745][T12901] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1129.732780][T12901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.768890][T12901] usb 6-1: config 0 descriptor?? [ 1129.796223][T12901] pwc: Askey VC010 type 2 USB webcam detected. [ 1130.223200][T12901] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1130.991933][ T4257] Bluetooth: hci4: command 0x0409 tx timeout [ 1131.003651][T13347] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1131.038288][T12901] pwc: recv_control_msg error -32 req 02 val 2700 [ 1131.045616][T12901] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1131.512118][T13364] binder: 13356:13364 ioctl c0306201 200000000780 returned -11 [ 1131.575952][T13364] loop4: detected capacity change from 0 to 128 [ 1132.529275][T13365] virtio-fs: tag not found [ 1132.622558][T12901] pwc: recv_control_msg error -71 req 04 val 1000 [ 1132.626160][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 1133.019012][T12901] pwc: recv_control_msg error -71 req 04 val 1300 [ 1133.074128][T12901] pwc: recv_control_msg error -71 req 04 val 1400 [ 1133.117457][T12901] pwc: recv_control_msg error -71 req 02 val 2000 [ 1133.133586][T12901] pwc: recv_control_msg error -71 req 02 val 2100 [ 1133.204113][T13372] ptrace attach of "./syz-executor exec"[4254] was attempted by ""[13372] [ 1133.604383][T12901] pwc: recv_control_msg error -71 req 04 val 1500 [ 1133.618339][T12901] pwc: recv_control_msg error -71 req 02 val 2500 [ 1133.629878][T12901] pwc: recv_control_msg error -71 req 02 val 2400 [ 1133.668885][T12901] pwc: recv_control_msg error -71 req 02 val 2600 [ 1133.683420][T12901] pwc: recv_control_msg error -71 req 02 val 2900 [ 1133.828690][T12901] pwc: recv_control_msg error -71 req 02 val 2800 [ 1134.304082][T12901] pwc: recv_control_msg error -71 req 04 val 1100 [ 1134.452209][T12901] pwc: recv_control_msg error -71 req 04 val 1200 [ 1134.488917][T12901] pwc: Registered as video103. [ 1134.497293][T12901] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input84 [ 1134.510915][T12901] usb 6-1: USB disconnect, device number 16 [ 1135.614269][T13389] loop5: detected capacity change from 0 to 64 [ 1137.744768][T13386] overlayfs: filesystem on './file2' not supported [ 1137.753253][ T26] audit: type=1804 audit(1751248403.892:87): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2225" name="/newroot/406/file1/file0" dev="loop5" ino=21 res=1 errno=0 [ 1140.009607][T13417] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1140.019411][T13417] gfs2: error 10 reading superblock [ 1140.421000][ T9599] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1140.511566][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2236'. [ 1140.700101][T13427] ptrace attach of "./syz-executor exec"[4261] was attempted by ""[13427] [ 1141.039636][ T9599] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.057041][ T9599] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1141.084652][ T9599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.110645][ T9599] usb 5-1: config 0 descriptor?? [ 1141.135960][ T9599] pwc: Askey VC010 type 2 USB webcam detected. [ 1142.385352][T13440] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2240'. [ 1142.696367][T13447] loop5: detected capacity change from 0 to 64 [ 1144.146434][T13447] overlayfs: filesystem on './file2' not supported [ 1144.232167][ T26] audit: type=1804 audit(1751248410.372:88): pid=13450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2241" name="/newroot/410/file1/file0" dev="loop5" ino=21 res=1 errno=0 [ 1144.659671][T13454] 9pnet_fd: Insufficient options for proto=fd [ 1144.730026][ T9599] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1144.741725][ T9599] pwc: recv_control_msg error -71 req 02 val 2700 [ 1144.857978][ T9599] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1145.015330][ T9599] pwc: recv_control_msg error -71 req 04 val 1000 [ 1145.023722][ T9599] pwc: recv_control_msg error -71 req 04 val 1300 [ 1145.031698][ T9599] pwc: recv_control_msg error -71 req 04 val 1400 [ 1145.165036][T11214] block nbd5: Attempted send on invalid socket [ 1145.171756][T11214] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1145.476574][T13459] (syz.5.2245,13459,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1145.489128][T13459] (syz.5.2245,13459,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1145.510527][T13459] (syz.5.2245,13459,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1145.539138][T13459] (syz.5.2245,13459,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1146.005106][ T9599] pwc: recv_control_msg error -71 req 02 val 2000 [ 1146.438217][ T9599] pwc: recv_control_msg error -71 req 02 val 2100 [ 1146.450508][ T9599] pwc: recv_control_msg error -71 req 04 val 1500 [ 1146.473461][ T9599] pwc: recv_control_msg error -71 req 02 val 2500 [ 1146.541846][ T9599] pwc: recv_control_msg error -71 req 02 val 2400 [ 1146.549283][ T9599] pwc: recv_control_msg error -71 req 02 val 2600 [ 1146.588088][T13470] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1146.598049][T13470] gfs2: error 10 reading superblock [ 1146.947644][ T9599] pwc: recv_control_msg error -71 req 02 val 2900 [ 1146.989707][ T9599] pwc: recv_control_msg error -71 req 02 val 2800 [ 1147.036183][ T9599] pwc: recv_control_msg error -71 req 04 val 1100 [ 1147.063484][ T9599] pwc: recv_control_msg error -71 req 04 val 1200 [ 1147.110618][ T9599] pwc: Registered as video103. [ 1147.159545][ T9599] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input85 [ 1147.309861][ T9599] usb 5-1: USB disconnect, device number 24 [ 1147.841039][T13485] binder: 13479:13485 ioctl c0306201 200000000780 returned -11 [ 1147.878866][T13485] loop5: detected capacity change from 0 to 128 [ 1147.961004][ T4257] Bluetooth: hci2: command 0x0409 tx timeout [ 1148.234992][T13485] virtio-fs: tag not found [ 1149.143897][T13493] loop0: detected capacity change from 0 to 64 [ 1149.182290][T13493] overlayfs: filesystem on './file2' not supported [ 1149.239705][ T26] audit: type=1804 audit(1751248415.372:89): pid=13494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2255" name="/newroot/467/file1/file0" dev="loop0" ino=21 res=1 errno=0 [ 1150.809175][T13501] afs: Unknown parameter '0xffffffffffffffff' [ 1152.131032][ T9599] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1153.089974][ T9599] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1153.148582][ T9599] usb 7-1: config 0 has no interface number 0 [ 1153.316100][ T9599] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1153.511769][ T9599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.583695][ T9599] usb 7-1: config 0 descriptor?? [ 1153.709333][ T9599] usb 7-1: selecting invalid altsetting 1 [ 1153.754183][ T9599] dvb_ttusb_budget: ttusb_init_controller: error [ 1153.770007][ T9599] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1154.296103][ T9599] DVB: Unable to find symbol cx22700_attach() [ 1154.381872][ T26] audit: type=1326 audit(1751248420.522:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2351d8e929 code=0x0 [ 1154.972043][T13539] binder: 13535:13539 ioctl c0306201 200000000780 returned -11 [ 1155.006698][T13539] loop5: detected capacity change from 0 to 128 [ 1155.463651][T13537] virtio-fs: tag not found [ 1155.653685][ T9599] DVB: Unable to find symbol tda10046_attach() [ 1155.684903][ T9599] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1155.808706][ T9599] usb 7-1: USB disconnect, device number 25 [ 1157.028613][T13546] I/O error, dev loop6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1157.038486][T13546] gfs2: error 10 reading superblock [ 1157.075622][T13557] loop5: detected capacity change from 0 to 64 [ 1157.123928][T13557] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1157.133043][T13557] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1157.144623][ T26] audit: type=1804 audit(1751248423.282:91): pid=13557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2271" name="/newroot/418/file1/file0" dev="loop5" ino=21 res=1 errno=0 [ 1158.628181][T13572] loop5: detected capacity change from 0 to 1024 [ 1161.032071][ T26] audit: type=1326 audit(1751248427.172:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.2.2279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a38e929 code=0x0 [ 1161.382609][T13590] binder: 13587:13590 ioctl c0306201 200000000780 returned -11 [ 1161.404816][T13590] loop6: detected capacity change from 0 to 128 [ 1161.460573][T13590] virtio-fs: tag not found [ 1162.436050][T13596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2283'. [ 1163.078491][T13605] loop5: detected capacity change from 0 to 64 [ 1163.187854][T13605] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1163.197307][T13605] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1163.210610][ T26] audit: type=1804 audit(1751248429.342:93): pid=13605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2285" name="/newroot/420/file1/file0" dev="loop5" ino=21 res=1 errno=0 [ 1166.259087][T13638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2295'. [ 1166.300826][ T7256] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1166.409096][T13642] loop6: detected capacity change from 0 to 64 [ 1166.885741][ T7256] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.908203][T13642] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1166.917558][T13642] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1166.966346][ T26] audit: type=1804 audit(1751248433.102:94): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2296" name="/newroot/272/file1/file0" dev="loop6" ino=21 res=1 errno=0 [ 1167.253896][ T7256] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1167.346439][ T7256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.455192][ T7256] usb 6-1: config 0 descriptor?? [ 1167.515373][ T7256] pwc: Askey VC010 type 2 USB webcam detected. [ 1169.236534][T13653] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2299'. [ 1170.343863][ T7256] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1170.354528][ T7256] pwc: recv_control_msg error -71 req 02 val 2700 [ 1170.365130][ T7256] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1170.393205][ T7256] pwc: recv_control_msg error -71 req 04 val 1000 [ 1170.424824][ T7256] pwc: recv_control_msg error -71 req 04 val 1300 [ 1170.454405][ T7256] pwc: recv_control_msg error -71 req 04 val 1400 [ 1171.508214][ T7256] pwc: recv_control_msg error -71 req 02 val 2000 [ 1171.654129][ T7256] pwc: recv_control_msg error -71 req 02 val 2100 [ 1172.018775][ T7256] pwc: recv_control_msg error -71 req 04 val 1500 [ 1172.048981][ T7256] pwc: recv_control_msg error -71 req 02 val 2500 [ 1172.077579][ T7256] pwc: recv_control_msg error -71 req 02 val 2400 [ 1172.107073][ T7256] pwc: recv_control_msg error -71 req 02 val 2600 [ 1172.175854][ T7256] pwc: recv_control_msg error -71 req 02 val 2900 [ 1172.196128][ T7256] pwc: recv_control_msg error -71 req 02 val 2800 [ 1172.310285][ T7256] pwc: recv_control_msg error -71 req 04 val 1100 [ 1172.421649][ T7256] pwc: recv_control_msg error -71 req 04 val 1200 [ 1172.560553][ T7256] pwc: Registered as video103. [ 1172.675646][ T7256] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input86 [ 1172.806833][ T7256] usb 6-1: USB disconnect, device number 17 [ 1174.770919][ T4305] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1175.787882][ T4305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.814048][ T4305] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1175.860783][ T4305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.875713][ T4305] usb 6-1: config 0 descriptor?? [ 1175.883390][ T4305] pwc: Askey VC010 type 2 USB webcam detected. [ 1176.859498][ T4305] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1176.881247][ T4305] pwc: recv_control_msg error -32 req 02 val 2700 [ 1176.910317][ T4305] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1177.219474][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.229932][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.540800][ T4305] pwc: recv_control_msg error -71 req 04 val 1000 [ 1178.575981][ T4305] pwc: recv_control_msg error -71 req 04 val 1300 [ 1178.708638][ T4305] pwc: recv_control_msg error -71 req 04 val 1400 [ 1178.800380][ T4305] pwc: recv_control_msg error -71 req 02 val 2000 [ 1178.817720][T11214] block nbd2: Attempted send on invalid socket [ 1178.824013][T11214] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1178.833216][T13749] (syz.2.2324,13749,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1178.840956][T13749] (syz.2.2324,13749,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1178.848362][T13749] (syz.2.2324,13749,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1178.857162][T13749] (syz.2.2324,13749,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1178.858585][ T4305] pwc: recv_control_msg error -71 req 02 val 2100 [ 1179.009829][ T4305] pwc: recv_control_msg error -71 req 04 val 1500 [ 1179.789789][T11214] block nbd0: Attempted send on invalid socket [ 1179.796125][T11214] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1179.805843][T13739] (syz.0.2322,13739,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1180.185013][T13739] (syz.0.2322,13739,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1180.199843][ T4305] pwc: recv_control_msg error -71 req 02 val 2500 [ 1180.206542][T13739] (syz.0.2322,13739,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1180.216825][ T4305] pwc: recv_control_msg error -71 req 02 val 2400 [ 1180.227162][T13739] (syz.0.2322,13739,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1180.289132][T13761] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2326'. [ 1180.701314][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 1180.702202][ T4305] pwc: recv_control_msg error -71 req 02 val 2600 [ 1180.716821][ T4305] pwc: recv_control_msg error -71 req 02 val 2900 [ 1180.751773][ T4305] pwc: recv_control_msg error -71 req 02 val 2800 [ 1180.761378][ T4305] pwc: recv_control_msg error -71 req 04 val 1100 [ 1180.857938][ T4305] pwc: recv_control_msg error -71 req 04 val 1200 [ 1180.871591][ T4305] pwc: Registered as video103. [ 1180.884870][ T4305] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 1180.969123][ T4305] usb 6-1: USB disconnect, device number 18 [ 1181.674453][T13774] overlayfs: missing 'lowerdir' [ 1182.422882][T11840] Bluetooth: hci3: command 0x0409 tx timeout [ 1182.782433][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 1183.492949][T13796] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2337'. [ 1185.449607][T13802] overlayfs: unrecognized mount option "verity=off" or missing value [ 1187.502438][T13830] overlayfs: missing 'lowerdir' [ 1188.547928][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2346'. [ 1188.884542][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.891981][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.211938][T13840] afs: Unknown parameter '0xffffffffffffffff' [ 1192.666030][T13858] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1192.677040][T13858] gfs2: error 10 reading superblock [ 1193.119751][T13864] loop6: detected capacity change from 0 to 32768 [ 1194.097711][T13873] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2357'. [ 1194.200821][ T4349] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1194.386999][T13877] loop0: detected capacity change from 0 to 64 [ 1194.410839][ T4349] usb 7-1: Using ep0 maxpacket: 8 [ 1194.447693][ T4349] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1194.460367][T13877] overlayfs: missing 'workdir' [ 1194.520391][ T26] audit: type=1804 audit(1751248460.652:95): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2358" name="/newroot/484/file1/file0" dev="loop0" ino=21 res=1 errno=0 [ 1194.801999][ T4349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.810044][ T4349] usb 7-1: Product: syz [ 1194.992525][ T4349] usb 7-1: Manufacturer: syz [ 1195.072143][ T4349] usb 7-1: SerialNumber: syz [ 1196.157340][ T4349] usb 7-1: config 0 descriptor?? [ 1196.819260][ T4349] usb 7-1: can't set config #0, error -71 [ 1196.831650][ T4349] usb 7-1: USB disconnect, device number 26 [ 1197.048937][T13893] loop0: detected capacity change from 0 to 32768 [ 1197.370895][ T4751] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1198.590835][ T4751] usb 1-1: Using ep0 maxpacket: 8 [ 1198.615992][ T4751] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1198.641356][ T4751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.670797][ T4751] usb 1-1: Product: syz [ 1198.675010][ T4751] usb 1-1: Manufacturer: syz [ 1198.679611][ T4751] usb 1-1: SerialNumber: syz [ 1198.732953][ T4751] usb 1-1: config 0 descriptor?? [ 1198.740494][ T4751] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1199.409889][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2363'. [ 1199.434884][T13914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.442107][T13914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.069899][ T4751] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1200.080875][ T4751] sq905: probe of 1-1:0.0 failed with error -71 [ 1200.113531][ T4751] usb 1-1: USB disconnect, device number 13 [ 1200.145862][T13918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2370'. [ 1200.421857][T13923] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2369'. [ 1201.317230][T13928] loop5: detected capacity change from 0 to 64 [ 1201.377382][T13928] overlayfs: missing 'workdir' [ 1201.385368][ T26] audit: type=1804 audit(1751248467.522:96): pid=13928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2372" name="/newroot/439/file1/file0" dev="loop5" ino=21 res=1 errno=0 [ 1203.985805][T13944] overlayfs: unrecognized mount option "verity=off" or missing value [ 1204.640129][T13951] overlayfs: unrecognized mount option "verity=off" or missing value [ 1205.429591][T13953] overlayfs: unrecognized mount option "verity=off" or missing value [ 1205.515736][T13960] loop0: detected capacity change from 0 to 164 [ 1205.775617][T13964] Bluetooth: MGMT ver 1.22 [ 1206.384670][ T26] audit: type=1326 audit(1751248472.522:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.5.2382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc58e929 code=0x0 [ 1207.143529][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 1207.272581][T13972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.280029][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.580343][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2386'. [ 1209.164610][T13992] loop6: detected capacity change from 0 to 32768 [ 1209.215710][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 1209.381521][T13989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.388700][T13989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.811497][ T9559] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1210.348279][T14000] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1210.364017][T14000] gfs2: error 10 reading superblock [ 1210.431011][ T9559] usb 7-1: Using ep0 maxpacket: 8 [ 1210.443330][ T9559] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1210.465080][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2394'. [ 1210.488518][ T9559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.502904][ T9559] usb 7-1: Product: syz [ 1210.507607][ T9559] usb 7-1: Manufacturer: syz [ 1210.515415][ T9559] usb 7-1: SerialNumber: syz [ 1210.528030][ T9559] usb 7-1: config 0 descriptor?? [ 1210.548634][ T9559] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1210.811945][T12068] block nbd4: Attempted send on invalid socket [ 1210.818214][T12068] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1210.827378][T14009] (syz.4.2395,14009,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1210.835592][T14009] (syz.4.2395,14009,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1210.843198][T14009] (syz.4.2395,14009,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1210.851956][T14009] (syz.4.2395,14009,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1211.596218][ T9559] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1211.608251][ T9559] sq905: probe of 7-1:0.0 failed with error -71 [ 1211.778319][ T9559] usb 7-1: USB disconnect, device number 27 [ 1211.845884][T14018] binder: 14013:14018 ioctl c0306201 200000000780 returned -11 [ 1211.899167][T14018] loop4: detected capacity change from 0 to 128 [ 1212.044384][T14019] virtio-fs: tag not found [ 1213.057990][T14024] loop4: detected capacity change from 0 to 64 [ 1213.070794][ T4257] Bluetooth: hci1: command 0x0409 tx timeout [ 1213.140251][T14024] overlayfs: filesystem on './file2' not supported [ 1215.474612][T14036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2403'. [ 1215.678825][ T26] audit: type=1326 audit(1751248481.812:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.6.2399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81b2d8e929 code=0x0 [ 1217.692891][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 1217.999737][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2406'. [ 1221.098185][T14079] loop6: detected capacity change from 0 to 64 [ 1221.545283][T14079] overlayfs: filesystem on './file2' not supported [ 1222.059571][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2414'. [ 1222.848642][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'. [ 1223.429169][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 1223.819614][T14101] afs: Unknown parameter '0xffffffffffffffff' [ 1224.536159][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 1224.642015][T14107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.649158][T14107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.707822][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2422'. [ 1226.131910][T14113] delete_channel: no stack [ 1229.029731][ T26] audit: type=1326 audit(1751248495.162:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.0.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6899f8e929 code=0x0 [ 1229.930807][T14153] I/O error, dev loop6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1229.940461][T14153] gfs2: error 10 reading superblock [ 1230.052786][T14152] loop2: detected capacity change from 0 to 164 [ 1230.151992][ T4247] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1230.302357][T14157] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2435'. [ 1232.286614][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'. [ 1233.402851][ T26] audit: type=1326 audit(1751248499.542:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.6.2442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81b2d8e929 code=0x0 [ 1234.247386][T14187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2445'. [ 1236.216864][T14206] loop4: detected capacity change from 0 to 164 [ 1237.174955][T14220] overlayfs: unrecognized mount option "verity=off" or missing value [ 1237.685548][ T26] audit: type=1326 audit(1751248503.822:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.0.2456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6899f8e929 code=0x0 [ 1238.647135][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.655785][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.049751][T14262] loop5: detected capacity change from 0 to 164 [ 1242.379567][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2464'. [ 1243.747545][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2467'. [ 1244.736256][ T26] audit: type=1326 audit(1751248510.872:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2351d8e929 code=0x0 [ 1246.469738][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 1246.614601][T14298] loop6: detected capacity change from 0 to 164 [ 1246.663347][T14301] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2472'. [ 1249.656557][ T26] audit: type=1326 audit(1751248515.792:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.2.2482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a38e929 code=0x0 [ 1252.108188][T14342] loop4: detected capacity change from 0 to 164 [ 1253.534375][T11214] block nbd6: Attempted send on invalid socket [ 1253.540586][T11214] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1253.589406][T14355] (syz.6.2490,14355,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1253.636958][T14355] (syz.6.2490,14355,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1253.645620][T14355] (syz.6.2490,14355,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1253.815086][T14355] (syz.6.2490,14355,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1255.274172][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 1257.627358][T11840] Bluetooth: hci4: command 0x0409 tx timeout [ 1258.398475][T14392] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1258.408246][T14392] gfs2: error 10 reading superblock [ 1258.973612][T14393] overlayfs: unrecognized mount option "verity=off" or missing value [ 1259.855079][T14404] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1259.864729][T14404] gfs2: error 10 reading superblock [ 1261.423557][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2510'. [ 1264.826932][ T26] audit: type=1326 audit(1751248530.962:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14460 comm="syz.0.2521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6899f8e929 code=0x0 [ 1267.721832][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2527'. [ 1270.430183][ T26] audit: type=1326 audit(1751248536.562:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.2534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc58e929 code=0x0 [ 1271.437093][T14522] ptrace attach of "./syz-executor exec"[4254] was attempted by ""[14522] [ 1274.769490][T14554] loop4: detected capacity change from 0 to 164 [ 1274.831385][ T4247] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1276.087430][ T26] audit: type=1326 audit(1751248542.222:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.4.2548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2351d8e929 code=0x0 [ 1277.235708][T14575] ptrace attach of "./syz-executor exec"[4865] was attempted by ""[14575] [ 1277.645006][T14571] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1277.661493][T14571] gfs2: error 10 reading superblock [ 1278.643718][T14584] I/O error, dev loop6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1278.653390][T14584] gfs2: error 10 reading superblock [ 1278.686249][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 1280.707587][T14606] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1280.707697][T14606] gfs2: error 10 reading superblock [ 1280.927643][T14608] loop0: detected capacity change from 0 to 164 [ 1282.289227][ T26] audit: type=1326 audit(1751248548.422:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.0.2563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6899f8e929 code=0x0 [ 1282.617513][T14631] ptrace attach of "./syz-executor exec"[4865] was attempted by ""[14631] [ 1289.501267][T14677] overlayfs: missing 'lowerdir' [ 1289.600639][ T26] audit: type=1326 audit(1751248555.722:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14675 comm="syz.5.2577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc58e929 code=0x0 [ 1291.049754][T14693] I/O error, dev loop6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1291.062051][T14693] gfs2: error 10 reading superblock [ 1291.844114][T14697] Malformed UNC in devname [ 1291.844114][T14697] [ 1291.851110][T14697] CIFS: VFS: Malformed UNC in devname [ 1293.832161][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 1294.158764][T14715] Malformed UNC in devname [ 1294.158764][T14715] [ 1294.165809][T14715] CIFS: VFS: Malformed UNC in devname [ 1296.153951][ T26] audit: type=1326 audit(1751248562.292:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14728 comm="syz.6.2590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81b2d8e929 code=0x0 [ 1299.075644][T14756] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1299.085293][T14756] gfs2: error 10 reading superblock [ 1300.111647][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.120436][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.746768][ T26] audit: type=1326 audit(1751248566.882:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.4.2604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2351d8e929 code=0x0 [ 1300.768649][ C0] vkms_vblank_simulate: vblank timer overrun [ 1303.886829][T14782] I/O error, dev loop6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1303.896489][T14782] gfs2: error 10 reading superblock [ 1304.381417][T14810] loop0: detected capacity change from 0 to 1024 [ 1307.324517][ T4638] hfsplus: b-tree write err: -5, ino 3 [ 1307.366607][ T4261] hfsplus: node 4:3 still has 1 user(s)! [ 1307.952188][T14830] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2615'. [ 1308.844893][ T26] audit: type=1326 audit(1751248574.902:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.2.2618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a38e929 code=0x0 [ 1312.073402][T14871] overlayfs: missing 'lowerdir' [ 1312.603768][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 1312.836455][T14879] loop6: detected capacity change from 0 to 164 [ 1313.374289][ T4247] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1318.085640][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2642'. [ 1318.287327][T14930] loop4: detected capacity change from 0 to 164 [ 1326.246391][T14981] loop6: detected capacity change from 0 to 164 [ 1326.446348][T14971] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1326.458523][ T4247] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1326.849673][T14971] gfs2: error 10 reading superblock [ 1327.415727][T15002] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1327.429242][T15002] gfs2: error 10 reading superblock [ 1327.746248][T15008] loop4: detected capacity change from 0 to 1024 [ 1331.834637][ T4400] hfsplus: b-tree write err: -5, ino 3 [ 1331.878827][ T4254] hfsplus: node 4:3 still has 1 user(s)! [ 1333.831660][T15037] loop0: detected capacity change from 0 to 164 [ 1333.969448][ T4247] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1335.261745][T15042] I/O error, dev loop6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1335.277062][T15042] gfs2: error 10 reading superblock [ 1336.525374][T15062] use of bytesused == 0 is deprecated and will be removed in the future, [ 1336.534585][T15062] use the actual size instead. [ 1339.826283][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 1340.281756][T15089] loop0: detected capacity change from 0 to 164 [ 1341.699660][T15098] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1341.709647][T15098] gfs2: error 10 reading superblock [ 1345.022976][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2696'. [ 1346.155067][T15119] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2700'. [ 1351.858274][T15166] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2711'. [ 1352.720695][T15179] binder: 15175:15179 ioctl c0306201 200000000540 returned -14 [ 1354.829054][T15192] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2718'. [ 1354.838702][T15193] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2719'. [ 1355.921219][T15206] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2723'. [ 1358.865910][T15226] binder: 15225:15226 ioctl c0306201 200000000540 returned -14 [ 1358.883024][T15226] capability: warning: `syz.6.2728' uses deprecated v2 capabilities in a way that may be insecure [ 1360.703651][T15252] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2734'. [ 1361.228015][T15265] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2736'. [ 1361.561446][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.568485][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.861397][T15267] fuse: Bad value for 'fd' [ 1365.286256][T15291] binder: 15288:15291 ioctl c0306201 200000000540 returned -14 [ 1367.353075][T15295] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1367.362744][T15295] gfs2: error 10 reading superblock [ 1367.429357][T15302] futex_wake_op: syz.4.2746 tries to shift op by 535; fix this program [ 1368.505528][T15318] futex_wake_op: syz.0.2749 tries to shift op by 535; fix this program [ 1369.638480][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'. [ 1370.237684][T15334] futex_wake_op: syz.5.2754 tries to shift op by 535; fix this program [ 1372.804834][T15346] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2758'. [ 1376.382684][T15378] binder: 15371:15378 ioctl c0306201 200000000540 returned -14 [ 1376.607046][T15370] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1376.616828][T15370] gfs2: error 10 reading superblock [ 1378.993897][T15408] program syz.0.2783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1379.059111][T15408] program syz.0.2783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1379.074093][T15408] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1379.693330][T15415] futex_wake_op: syz.2.2773 tries to shift op by 535; fix this program [ 1380.823953][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2776'. [ 1382.486344][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 1383.161504][T15442] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2782'. [ 1383.268470][T15447] futex_wake_op: syz.6.2784 tries to shift op by 535; fix this program [ 1383.401912][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2786'. [ 1385.097310][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'. [ 1386.095846][T11214] block nbd5: Attempted send on invalid socket [ 1386.102190][T11214] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1386.112288][T15472] (syz.5.2792,15472,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1386.160615][T15472] (syz.5.2792,15472,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1386.290750][T15472] (syz.5.2792,15472,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1386.340041][T15472] (syz.5.2792,15472,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1386.617001][T15482] program syz.2.2795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1386.651531][T15482] program syz.2.2795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1386.654456][T15482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1387.869066][T15488] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2797'. [ 1388.350806][ T4257] Bluetooth: hci2: command 0x0409 tx timeout [ 1391.718569][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'. [ 1392.169693][T15515] program syz.5.2805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1392.229893][T15515] program syz.5.2805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1392.239471][T15515] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1392.584544][T15535] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2810'. [ 1393.498548][T15543] binder: 15539:15543 ioctl c0306201 200000000540 returned -14 [ 1397.598194][T15576] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2822'. [ 1397.758751][T15571] program syz.0.2821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1397.770511][T15571] program syz.0.2821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1398.522203][T15571] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1399.028167][T15591] program syz.5.2826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1399.059877][T15591] program syz.5.2826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1399.069755][T15591] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1401.842061][T15606] program syz.2.2829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1401.953745][T15606] program syz.2.2829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1401.963833][T15606] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1402.970011][T15624] loop0: detected capacity change from 0 to 164 [ 1403.196811][T15622] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2835'. [ 1404.208716][T15634] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2836'. [ 1405.257795][T15645] program syz.6.2840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1405.379474][T15645] program syz.6.2840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1405.389526][T15645] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1405.768926][T15647] binder: 15644:15647 ioctl c0306201 200000000540 returned -14 [ 1407.144344][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 1408.640843][T15677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2850'. [ 1412.743608][T15715] loop6: detected capacity change from 0 to 164 [ 1413.365065][T15721] program syz.0.2861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1413.380850][T15721] program syz.0.2861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1413.390451][T15721] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1414.328180][T15729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2864'. [ 1414.871297][T15735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2876'. [ 1414.967378][T15738] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2866'. [ 1419.599231][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2877'. [ 1420.672916][T15776] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2879'. [ 1420.859940][T15773] program syz.5.2878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1421.089743][T15773] program syz.5.2878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1421.099239][T15773] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1422.913444][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.920313][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.869458][T15874] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2904'. [ 1435.231105][T15908] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2916'. [ 1435.409604][T15912] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2911'. [ 1437.742951][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 1441.426113][T15949] overlayfs: missing 'lowerdir' [ 1442.856463][T11840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1442.900961][T11840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1442.910054][T11840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1442.927516][T11840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1442.936466][T11840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1442.943876][T11840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1442.946918][ T4413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.069078][ T4413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.935527][ T4413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.074768][ T4257] Bluetooth: hci1: command 0x0409 tx timeout [ 1445.950047][T15989] program syz.2.2938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.986930][ T4413] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.001973][T15989] program syz.2.2938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1446.012580][T15989] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1446.082659][T16004] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1446.210520][T16004] overlayfs: failed to set xattr on upper [ 1446.217478][T16004] overlayfs: ...falling back to index=off,metacopy=off. [ 1446.353355][T16004] overlayfs: failed to resolve './file0': -2 [ 1446.378179][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1447.160906][T15972] Bluetooth: hci1: command 0x041b tx timeout [ 1447.360198][T15970] chnl_net:caif_netlink_parms(): no params data found [ 1449.664008][T15972] Bluetooth: hci1: command 0x040f tx timeout [ 1449.882096][T15970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.021887][T15970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.746510][T15970] device bridge_slave_0 entered promiscuous mode [ 1450.986637][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 1451.216482][T15970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.319817][T15970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.341920][T15970] device bridge_slave_1 entered promiscuous mode [ 1451.716508][T15972] Bluetooth: hci1: command 0x0419 tx timeout [ 1453.162504][T15970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.428749][T15970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.692751][T16074] program syz.0.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1453.728049][T16074] program syz.0.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1453.737803][T16074] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1454.095348][T15970] team0: Port device team_slave_0 added [ 1454.111236][T15970] team0: Port device team_slave_1 added [ 1456.782191][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 1457.296472][T15970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.309262][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.390977][T15970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.481548][T15970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.504788][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.606482][T15970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.300903][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2961'. [ 1458.345637][T15970] device hsr_slave_0 entered promiscuous mode [ 1458.363598][T15970] device hsr_slave_1 entered promiscuous mode [ 1458.381952][T15970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1458.389555][T15970] Cannot create hsr debugfs directory [ 1458.725322][ T4413] device hsr_slave_0 left promiscuous mode [ 1458.770930][ T4413] device hsr_slave_1 left promiscuous mode [ 1458.803976][ T4413] device bridge_slave_1 left promiscuous mode [ 1458.851047][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.859799][ T4413] device bridge_slave_0 left promiscuous mode [ 1458.880930][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.932438][ T4413] device veth1_macvtap left promiscuous mode [ 1458.938514][ T4413] device veth0_macvtap left promiscuous mode [ 1458.957749][ T4413] device veth1_vlan left promiscuous mode [ 1458.971015][ T4413] device veth0_vlan left promiscuous mode [ 1459.195055][ T4413] bond1 (unregistering): Released all slaves [ 1461.475654][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 1462.637407][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 1462.724289][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.802095][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.863051][T16153] program syz.2.2972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.916291][T16153] program syz.2.2972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.927318][T16153] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1463.398118][ T4413] bond0 (unregistering): Released all slaves [ 1465.551784][T16170] futex_wake_op: syz.6.2977 tries to shift op by 535; fix this program [ 1465.878022][T15970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1465.912426][T15970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1466.149339][T15970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1466.454549][T15970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1466.642783][T16203] program syz.6.2981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1466.776930][T15970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.845746][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1466.862523][T16203] program syz.6.2981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1466.872993][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1466.895123][T15970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.903596][T16203] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1466.911108][T16206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2982'. [ 1466.946095][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1466.992022][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1467.039830][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.047026][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.108137][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1467.128937][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1467.160413][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1467.408998][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.416194][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.426570][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1467.464727][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1467.498347][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1467.666291][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1468.042517][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1468.058547][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1468.120360][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1468.189280][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1468.200566][T16214] futex_wake_op: syz.2.2984 tries to shift op by 535; fix this program [ 1468.228634][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1468.254759][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1468.267108][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1468.284465][T15970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1470.840667][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1470.854868][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1470.944468][T15970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.070076][T16253] xt_l2tp: v2 sid > 0xffff: 262144 [ 1471.449540][T16248] program syz.2.2990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1471.495931][T16248] program syz.2.2990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1471.555265][T16248] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1473.692953][T16269] xt_l2tp: v2 sid > 0xffff: 262144 [ 1476.183494][T16285] xt_l2tp: v2 sid > 0xffff: 262144 [ 1477.087010][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1477.109741][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1477.889166][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1478.349904][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1478.403761][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1478.624999][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1479.297227][T15970] device veth0_vlan entered promiscuous mode [ 1479.313166][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3001'. [ 1479.461346][T15970] device veth1_vlan entered promiscuous mode [ 1480.557007][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1480.572233][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1480.594015][T15970] device veth0_macvtap entered promiscuous mode [ 1480.691897][T15970] device veth1_macvtap entered promiscuous mode [ 1480.759150][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.826769][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.864558][T15970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.874881][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1480.999550][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1482.146450][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1482.230359][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.174937][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.218142][T15970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1483.961303][T15970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.970514][T15970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.992482][T15970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.124963][T15970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.135152][T16343] futex_wake_op: syz.2.3010 tries to shift op by 535; fix this program [ 1484.353453][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.359789][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.392451][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1484.418386][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1484.757573][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.116185][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.205744][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.219891][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1485.237731][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.324284][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1486.560467][T16374] xt_l2tp: v2 sid > 0xffff: 262144 [ 1490.365879][T16385] futex_wake_op: syz.4.3019 tries to shift op by 535; fix this program [ 1490.504742][T16395] futex_wake_op: syz.6.3020 tries to shift op by 535; fix this program [ 1490.877334][ T4257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1490.895199][ T4257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1490.909284][ T4257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1490.920051][ T4257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1490.930672][ T4257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1490.937980][ T4257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1490.974723][ T4610] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.282953][T16416] program syz.5.3022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1491.306541][T16416] program syz.5.3022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1491.321409][T16416] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1491.326986][ T4610] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.976012][ T4610] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.036832][T16403] chnl_net:caif_netlink_parms(): no params data found [ 1492.136185][ T4610] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.099072][T15972] Bluetooth: hci3: command 0x0409 tx timeout [ 1493.897040][T16403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.914628][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.945744][T16403] device bridge_slave_0 entered promiscuous mode [ 1493.962810][T16452] program syz.6.3029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.027044][T16403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.044814][T16453] program syz.6.3029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.057098][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.081989][T16403] device bridge_slave_1 entered promiscuous mode [ 1494.353025][T16453] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1495.110861][T16455] futex_wake_op: syz.4.3030 tries to shift op by 535; fix this program [ 1495.151013][T15972] Bluetooth: hci3: command 0x041b tx timeout [ 1495.558371][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3031'. [ 1495.583717][T16403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.015314][T16403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.252834][T16403] team0: Port device team_slave_0 added [ 1496.298972][T16403] team0: Port device team_slave_1 added [ 1497.280529][T15972] Bluetooth: hci3: command 0x040f tx timeout [ 1497.529550][T16481] xt_l2tp: v2 sid > 0xffff: 262144 [ 1499.316999][T16403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.320735][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 1499.330159][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.388987][T16403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.497269][T16403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.510919][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.568960][T16403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.610894][T16403] device hsr_slave_0 entered promiscuous mode [ 1500.819282][T16403] device hsr_slave_1 entered promiscuous mode [ 1501.148890][T16403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1501.158273][T16403] Cannot create hsr debugfs directory [ 1502.400781][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'. [ 1502.662847][T16524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.673190][T16524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.181944][T16551] binder: 16549:16551 ioctl c0306201 200000000540 returned -14 [ 1507.717911][ T4610] device hsr_slave_0 left promiscuous mode [ 1507.733780][ T4610] device hsr_slave_1 left promiscuous mode [ 1507.872644][ T4610] device bridge_slave_1 left promiscuous mode [ 1507.878893][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.471094][ T4610] device bridge_slave_0 left promiscuous mode [ 1508.497751][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.108017][ T4610] device veth1_macvtap left promiscuous mode [ 1509.126640][ T4610] device veth0_macvtap left promiscuous mode [ 1509.152708][ T4610] device veth1_vlan left promiscuous mode [ 1509.174376][ T4610] device veth0_vlan left promiscuous mode [ 1509.552746][T16598] futex_wake_op: syz.4.3057 tries to shift op by 535; fix this program [ 1513.235548][ T4610] team0 (unregistering): Port device team_slave_1 removed [ 1513.470365][ T4610] team0 (unregistering): Port device team_slave_0 removed [ 1515.445660][ T4610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.839874][ T4610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.215979][T16635] program syz.5.3066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1517.251507][T16635] program syz.5.3066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1517.261843][T16635] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1517.846020][ T4610] bond0 (unregistering): Released all slaves [ 1518.287165][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3054'. [ 1519.861818][T16403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1519.873202][T16650] program syz.2.3070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1520.024813][T16403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1520.052357][T16662] program syz.2.3070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1521.225582][T16661] futex_wake_op: syz.4.3074 tries to shift op by 535; fix this program [ 1521.401062][T16662] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1521.462496][T16403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1521.891807][T16403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1521.950081][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3075'. [ 1523.206956][T16403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.274196][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1524.145334][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1524.205191][T16403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.253550][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1525.080187][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1525.095004][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.102161][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.115123][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1525.165372][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1525.194130][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1526.054580][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.061704][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.114553][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1526.143807][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1526.165237][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1526.215285][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1526.250560][T16403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1526.299022][T16403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1526.463284][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1527.225756][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1527.235151][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1527.253317][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1527.733811][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1527.818945][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1527.899866][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1527.991105][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1528.471042][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1529.014327][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1529.061050][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1529.095639][T16403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.186579][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1529.216090][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1529.253566][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1529.283219][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1529.323580][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1529.361554][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1529.399158][T16747] binder: 16745:16747 ioctl c0306201 200000000540 returned -14 [ 1529.414731][T16403] device veth0_vlan entered promiscuous mode [ 1529.453704][T16403] device veth1_vlan entered promiscuous mode [ 1529.503533][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1529.627822][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1529.644034][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1529.667973][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1530.969641][T16403] device veth0_macvtap entered promiscuous mode [ 1531.211499][T16757] program syz.2.3090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.265036][T16756] program syz.2.3090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.275083][T16756] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1531.455168][T16403] device veth1_macvtap entered promiscuous mode [ 1531.520043][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.543811][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.564617][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.587651][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.648634][T16403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.694621][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1531.844946][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1531.857658][T16760] program syz.4.3091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.859844][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.882844][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.884163][T16760] program syz.4.3091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.902091][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.902137][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.923553][T16760] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1532.193965][T16403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.301871][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1532.320802][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1532.375495][T16403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.400739][T16403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.419763][T16403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.450135][T16403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.604631][ T4580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.656055][ T4580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.484611][T16375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.514155][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1533.534058][T16375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.574302][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1534.625109][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 1534.741281][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.749236][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.521692][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3096'. [ 1541.504019][T16808] xt_l2tp: v2 sid > 0xffff: 262144 [ 1541.617815][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.633925][T16794] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3099'. [ 1541.763514][T15972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1541.775277][T15972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1541.826196][T15972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1541.840899][T15972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1541.853494][T15972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1541.865835][T15972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1542.274452][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.619006][T16822] binder: 16820:16822 ioctl c0306201 200000000540 returned -14 [ 1542.809388][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.176141][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.981233][T15972] Bluetooth: hci0: command 0x0409 tx timeout [ 1545.200721][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3109'. [ 1546.018032][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.024414][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.030790][T15972] Bluetooth: hci0: command 0x041b tx timeout [ 1547.250339][T16857] xt_l2tp: v2 sid > 0xffff: 262144 [ 1547.519944][T16858] program syz.4.3114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1547.601970][T16858] program syz.4.3114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1547.623078][T16858] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1548.093864][T16811] chnl_net:caif_netlink_parms(): no params data found [ 1548.110689][T15972] Bluetooth: hci0: command 0x040f tx timeout [ 1556.749845][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 1557.060120][T16908] program syz.5.3124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1557.151327][T16908] program syz.5.3124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1557.300829][T16908] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1558.082666][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1558.891293][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.402990][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.457916][T16811] device bridge_slave_0 entered promiscuous mode [ 1560.035389][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.042879][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.054027][T16811] device bridge_slave_1 entered promiscuous mode [ 1561.429542][T16951] Bluetooth: MGMT ver 1.22 [ 1561.445294][T16811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.636759][T16811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.789975][T16958] binder: 16956:16958 ioctl c0306201 200000000540 returned -14 [ 1563.591238][T16811] team0: Port device team_slave_0 added [ 1563.812176][T16811] team0: Port device team_slave_1 added [ 1564.122246][T16811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.171773][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.204781][T16811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.019675][T16811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.027303][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.098255][T16811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.490914][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 1568.410912][T15972] Bluetooth: hci1: command 0x0406 tx timeout [ 1569.414249][T16811] device hsr_slave_0 entered promiscuous mode [ 1569.429787][T16811] device hsr_slave_1 entered promiscuous mode [ 1570.152616][T16811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1570.160235][T16811] Cannot create hsr debugfs directory [ 1571.736049][ T75] device hsr_slave_0 left promiscuous mode [ 1571.747054][ T75] device hsr_slave_1 left promiscuous mode [ 1571.753981][ T75] device bridge_slave_1 left promiscuous mode [ 1571.760329][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.773091][ T75] device bridge_slave_0 left promiscuous mode [ 1571.779458][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.874184][ T75] device veth1_macvtap left promiscuous mode [ 1571.896920][ T75] device veth0_macvtap left promiscuous mode [ 1573.490762][ T75] device veth1_vlan left promiscuous mode [ 1573.511023][ T75] device veth0_vlan left promiscuous mode [ 1581.811507][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.869301][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.321814][ T75] bond0 (unregistering): Released all slaves [ 1583.293849][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 1583.311300][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1587.884095][T17117] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1592.885048][T16811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1593.771330][T16811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1594.829640][T16811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1594.871914][T16811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1597.106053][T15972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1597.117485][T15972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1597.126090][T15972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1597.245260][T15972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1597.256370][T15972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1597.263912][T15972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1599.312183][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 1599.911103][T17223] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3198'. [ 1601.582346][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 1603.746628][T15972] Bluetooth: hci0: command 0x040f tx timeout [ 1605.801028][T15972] Bluetooth: hci0: command 0x0419 tx timeout [ 1607.500925][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.507238][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.834916][T17279] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3211'. [ 1608.878315][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 1611.913990][T17208] chnl_net:caif_netlink_parms(): no params data found [ 1613.982569][T17323] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3221'. [ 1614.440729][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 1614.542372][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.578669][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.537828][T17208] device bridge_slave_0 entered promiscuous mode [ 1615.840319][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.938924][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.081551][T17208] device bridge_slave_1 entered promiscuous mode [ 1616.342186][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 1616.743848][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.972050][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.258106][ T4362] device hsr_slave_0 left promiscuous mode [ 1617.275008][ T4362] device hsr_slave_1 left promiscuous mode [ 1617.310145][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.325564][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.796190][ T4362] device bridge_slave_1 left promiscuous mode [ 1617.805144][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.836737][ T4362] device bridge_slave_0 left promiscuous mode [ 1617.844011][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.454031][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 1621.651889][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 1622.098985][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.572195][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.734061][ T4362] bond0 (unregistering): Released all slaves [ 1622.860053][T17208] team0: Port device team_slave_0 added [ 1622.874444][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'. [ 1622.909451][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3238'. [ 1622.935777][T17208] team0: Port device team_slave_1 added [ 1623.920833][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.927828][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.997104][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.009956][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.017281][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.110773][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.375450][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3244'. [ 1628.545884][T17208] device hsr_slave_0 entered promiscuous mode [ 1628.671939][T17208] device hsr_slave_1 entered promiscuous mode [ 1628.693160][T17208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1628.703056][T17208] Cannot create hsr debugfs directory [ 1630.900192][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'. [ 1632.792327][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1633.756895][T17480] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1634.950360][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1636.516803][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 1638.787931][T17208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1638.952538][T17208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1639.071040][T17208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1639.093541][T17208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1640.038590][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.059268][T17208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.144274][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1640.162273][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1640.171252][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1640.183147][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1640.533717][T12863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.540883][T12863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.405363][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1641.414564][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1641.430450][T12863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.437640][T12863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.445540][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1641.453848][T17548] binder: 17542:17548 ioctl c0306201 200000000540 returned -14 [ 1641.471544][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1641.494841][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1641.513448][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1641.522457][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1641.532682][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1641.713931][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1641.722669][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1642.965665][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1642.992698][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1643.418790][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'. [ 1644.151408][T17208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1644.168495][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1644.216767][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1650.007078][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1650.018083][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1650.054756][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.141080][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1650.151482][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1650.233215][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1650.263653][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1650.289187][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1650.304851][T17614] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1650.328030][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1650.406939][T17208] device veth0_vlan entered promiscuous mode [ 1650.494157][T17208] device veth1_vlan entered promiscuous mode [ 1650.551494][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1650.605420][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1650.691556][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1651.150411][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1651.178456][T17208] device veth0_macvtap entered promiscuous mode [ 1651.235648][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1651.267455][T17208] device veth1_macvtap entered promiscuous mode [ 1651.342700][T17208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1651.380725][T17208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1651.399478][T17208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1651.607797][T17208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1651.617856][T17208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1651.646873][T17208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.314469][T17208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.516916][T17208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.555162][T17208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.574727][T17208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.585664][T17208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.597716][T17208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.608463][T17208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.619894][T17208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.319245][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1653.366702][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1653.411270][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1653.425827][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1653.437947][T17632] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1653.500732][T17208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.633265][T17208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.762108][T17208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.106788][T17208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.088422][T16840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1656.258620][T16840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1656.441176][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1657.720963][T17678] loop0: detected capacity change from 0 to 512 [ 1657.760195][T17678] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1657.781848][ T4257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1657.792969][ T4257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1657.831289][ T4257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1657.842108][ T4257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1657.849690][ T4257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1657.854420][T17678] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1657.866285][ T4257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1658.002160][T17678] EXT4-fs (loop0): 1 truncate cleaned up [ 1658.007854][T17678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1658.506295][T17678] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 1658.624933][T16403] EXT4-fs (loop0): unmounting filesystem. [ 1659.950887][T15972] Bluetooth: hci5: command 0x0409 tx timeout [ 1661.263552][T17704] loop4: detected capacity change from 0 to 2048 [ 1661.329783][T17704] EXT4-fs: Ignoring removed mblk_io_submit option [ 1661.462618][T17704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1662.030784][ T4257] Bluetooth: hci5: command 0x041b tx timeout [ 1662.358349][T17681] chnl_net:caif_netlink_parms(): no params data found [ 1662.422791][T15970] EXT4-fs (loop4): unmounting filesystem. [ 1663.027866][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3313'. [ 1663.098211][T17681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.148679][T17681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.186790][T17681] device bridge_slave_0 entered promiscuous mode [ 1663.258641][T17681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.287779][T17681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.334819][T17681] device bridge_slave_1 entered promiscuous mode [ 1663.361777][T17681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.374613][T17681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.710484][T17681] team0: Port device team_slave_0 added [ 1664.110863][ T4257] Bluetooth: hci5: command 0x040f tx timeout [ 1664.151678][T17681] team0: Port device team_slave_1 added [ 1664.239437][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 1666.089828][T17681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.121659][T17681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.230843][ T4257] Bluetooth: hci5: command 0x0419 tx timeout [ 1666.299762][T17681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.341293][T17681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.348664][T17681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.430264][T17681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.767791][T17681] device hsr_slave_0 entered promiscuous mode [ 1666.824166][T17681] device hsr_slave_1 entered promiscuous mode [ 1666.878307][T17681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1666.906702][T17681] Cannot create hsr debugfs directory [ 1667.504054][ T4413] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.636831][ T4413] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.682892][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.689240][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.707507][T17756] No buffer was provided with the request [ 1669.251662][ T4413] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.799592][ T4413] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.738689][T17681] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1676.795987][T17681] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1677.115104][T17681] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1678.051761][T17681] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1681.507268][T17681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.775551][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1681.786102][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1681.796174][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1681.805355][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1681.812968][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1681.822098][ T4257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1682.350849][T17863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1682.409375][ T4413] device hsr_slave_0 left promiscuous mode [ 1682.438694][ T4413] device hsr_slave_1 left promiscuous mode [ 1682.453027][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.470003][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.486202][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.495166][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.503727][ T4413] device bridge_slave_1 left promiscuous mode [ 1682.510149][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.524177][ T4413] device bridge_slave_0 left promiscuous mode [ 1682.530914][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.563174][ T4413] device veth1_macvtap left promiscuous mode [ 1682.569250][ T4413] device veth0_macvtap left promiscuous mode [ 1682.575410][ T4413] device veth1_vlan left promiscuous mode [ 1682.581766][ T4413] device veth0_vlan left promiscuous mode [ 1682.660888][T17867] binder: 17865:17867 ioctl c0306201 200000000540 returned -14 [ 1683.136552][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 1683.185222][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 1683.239572][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1683.287139][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.340253][T15972] Bluetooth: hci0: command 0x0409 tx timeout [ 1685.201763][ T4413] bond0 (unregistering): Released all slaves [ 1685.985564][T17681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.057696][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1686.077994][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1686.098680][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 1686.164792][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1686.202255][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1686.251094][T16375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.258235][T16375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.298620][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1686.461837][T15972] Bluetooth: hci0: command 0x041b tx timeout [ 1686.536244][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1686.621149][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1686.679545][T16375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.686721][T16375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.695703][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1686.727365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1686.740857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1686.814493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1686.950733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1687.320709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1687.573738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1687.607514][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1687.665276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1687.691649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1687.762013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1688.510871][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 1688.749055][T17853] chnl_net:caif_netlink_parms(): no params data found [ 1689.138771][ T4413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.596560][ T4413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.937215][ T4413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.395295][ T4413] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.452922][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.460054][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.485045][T17853] device bridge_slave_0 entered promiscuous mode [ 1690.519385][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1690.533142][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1690.547518][T17681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1690.558626][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.568074][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.578665][T17853] device bridge_slave_1 entered promiscuous mode [ 1690.641018][T17933] loop5: detected capacity change from 0 to 2048 [ 1690.682788][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1690.692252][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1690.732194][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1690.755405][T17933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1690.766442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1690.789444][T17933] EXT4-fs (loop5): can't enable nombcache during remount [ 1690.810398][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.828113][T17681] device veth0_vlan entered promiscuous mode [ 1690.847291][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.859303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1690.876199][ T4865] EXT4-fs (loop5): unmounting filesystem. [ 1690.886348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1690.937218][T17681] device veth1_vlan entered promiscuous mode [ 1692.119031][T17853] team0: Port device team_slave_0 added [ 1692.155999][T17681] device veth0_macvtap entered promiscuous mode [ 1692.202471][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1692.217641][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1692.940594][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1693.051401][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1693.067504][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1693.111432][T17853] team0: Port device team_slave_1 added [ 1693.264139][T17681] device veth1_macvtap entered promiscuous mode [ 1695.723041][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.772930][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.799344][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.820180][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.831530][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.842441][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.853256][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.877389][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.906494][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.933208][T17681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.949791][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.959393][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.007263][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.185337][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1696.229529][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1696.283571][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.299429][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.318804][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.336028][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.346031][T17681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.366909][T17681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.427167][T17681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1696.789689][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1696.821279][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1696.998952][T17853] device hsr_slave_0 entered promiscuous mode [ 1697.035429][T17853] device hsr_slave_1 entered promiscuous mode [ 1697.085559][T17853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1697.100716][T17853] Cannot create hsr debugfs directory [ 1697.133882][T17681] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.154174][T17681] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.190623][T17681] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.219783][T17681] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.565130][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.612555][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.717996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1699.761353][ T4638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.796175][ T4638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.864639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1700.423766][T17853] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1701.745073][T17853] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1701.762518][T17853] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1701.792745][T17853] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1703.627195][ T4413] device hsr_slave_0 left promiscuous mode [ 1703.637859][ T4413] device hsr_slave_1 left promiscuous mode [ 1703.860725][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1704.515561][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.625479][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.797814][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.022820][ T4413] device bridge_slave_1 left promiscuous mode [ 1706.195043][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.894604][ T4413] device bridge_slave_0 left promiscuous mode [ 1707.978646][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.673328][ T4413] device veth1_macvtap left promiscuous mode [ 1708.761680][ T4413] device veth0_macvtap left promiscuous mode [ 1708.836439][ T4413] device veth1_vlan left promiscuous mode [ 1708.897059][ T4413] device veth0_vlan left promiscuous mode [ 1713.001411][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 1713.050229][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 1713.104619][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.154072][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.679134][ T4413] bond0 (unregistering): Released all slaves [ 1715.760908][T17853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.890652][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1715.919898][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1715.959827][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.088120][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1716.101791][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1716.131972][T16840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.139152][T16840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.157637][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1716.190470][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1716.238035][T16840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.245226][T16840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.430426][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1716.466581][T18167] loop2: detected capacity change from 0 to 2048 [ 1716.484428][T18167] EXT4-fs: Ignoring removed mblk_io_submit option [ 1716.543060][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1716.572696][T18167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1716.773615][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1716.804378][T18164] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3411: bg 0: block 234: padding at end of block bitmap is not set [ 1716.823546][T18164] EXT4-fs (loop2): Remounting filesystem read-only [ 1717.746444][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1717.827706][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1717.913821][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1717.929473][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1718.155223][T18188] binder: 18182:18188 ioctl c0306201 200000000540 returned -14 [ 1718.940744][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1718.948878][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1719.188968][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1720.248466][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1720.285375][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1722.525763][T17681] EXT4-fs (loop2): unmounting filesystem. [ 1722.859099][T18229] binder: 18223:18229 ioctl c0306201 200000000780 returned -11 [ 1722.931130][T18230] loop5: detected capacity change from 0 to 128 [ 1723.521975][T18229] Set syz1 is full, maxelem 65536 reached [ 1723.542593][T18228] virtio-fs: tag not found [ 1723.819644][T17853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1723.905296][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1723.915516][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1727.459870][T18269] loop0: detected capacity change from 0 to 2048 [ 1727.477317][T18269] EXT4-fs: Ignoring removed mblk_io_submit option [ 1727.575549][T18269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1727.822861][T18279] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3431: bg 0: block 234: padding at end of block bitmap is not set [ 1727.912915][T18279] EXT4-fs (loop0): Remounting filesystem read-only [ 1728.090758][T16403] EXT4-fs (loop0): unmounting filesystem. [ 1728.266742][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1728.292657][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1728.522370][T18294] binder: 18287:18294 ioctl c0306201 200000000780 returned -11 [ 1728.850950][T18294] loop6: detected capacity change from 0 to 128 [ 1729.010313][T18291] virtio-fs: tag not found [ 1729.481889][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1729.524583][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1729.585517][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1729.625300][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1729.922284][T17853] device veth0_vlan entered promiscuous mode [ 1729.934977][T17853] device veth1_vlan entered promiscuous mode [ 1729.958865][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1729.979280][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1730.035441][T17853] device veth0_macvtap entered promiscuous mode [ 1730.203798][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.217821][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.255359][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1731.317920][T17853] device veth1_macvtap entered promiscuous mode [ 1732.778874][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.790196][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.801145][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.811954][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.822337][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.834836][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.846671][T17853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1732.877011][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1732.916225][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1732.939645][T18312] loop5: detected capacity change from 0 to 2048 [ 1732.981138][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.033435][T18312] EXT4-fs: Ignoring removed mblk_io_submit option [ 1733.096664][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.128557][T18312] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1733.168573][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.413336][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.423566][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.434386][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.448232][T18320] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3440: bg 0: block 234: padding at end of block bitmap is not set [ 1733.498250][T17853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1733.545561][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1733.556934][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1733.609786][T17853] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.654525][T18340] loop6: detected capacity change from 0 to 512 [ 1733.661073][T18320] EXT4-fs (loop5): Remounting filesystem read-only [ 1733.694852][T17853] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.762927][T17853] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.789056][T18340] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1733.791750][T17853] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.908612][T18340] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1733.985197][T18340] EXT4-fs (loop6): 1 truncate cleaned up [ 1734.029072][ T4865] EXT4-fs (loop5): unmounting filesystem. [ 1734.042624][T18340] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1734.129060][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.154086][T18340] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 1734.162167][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.218345][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1734.273933][T16375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.481893][ T7908] EXT4-fs (loop6): unmounting filesystem. [ 1735.585940][T16375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.910254][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1740.654279][T18393] loop0: detected capacity change from 0 to 1024 [ 1740.701672][T18393] EXT4-fs: Ignoring removed oldalloc option [ 1740.739314][T18393] EXT4-fs: Ignoring removed bh option [ 1740.799808][T18393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1740.924290][T18393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1741.230129][T16403] EXT4-fs (loop0): unmounting filesystem. [ 1743.228560][T15972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1743.252824][T15972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1743.261381][T15972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1743.269129][T15972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1743.278422][T15972] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1743.285852][T15972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1744.927833][T18448] binder: 18441:18448 ioctl c0306201 200000000540 returned -14 [ 1745.393716][T15972] Bluetooth: hci1: command 0x0409 tx timeout [ 1745.445470][T18420] chnl_net:caif_netlink_parms(): no params data found [ 1745.819656][T18420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.863952][T18420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.875850][T18420] device bridge_slave_0 entered promiscuous mode [ 1745.901630][T18420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.003875][T18420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.035387][T18420] device bridge_slave_1 entered promiscuous mode [ 1746.263794][T18475] No buffer was provided with the request [ 1747.470624][T15972] Bluetooth: hci1: command 0x041b tx timeout [ 1748.203492][ T4610] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.598969][T18487] binder: 18477:18487 ioctl c0306201 200000000780 returned -11 [ 1748.621632][T18487] loop0: detected capacity change from 0 to 128 [ 1749.368346][T18484] No source specified [ 1749.376354][ T4610] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.550820][T15972] Bluetooth: hci1: command 0x040f tx timeout [ 1749.582320][T18420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.637427][T18420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.790016][ T4610] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.954629][T18420] team0: Port device team_slave_0 added [ 1750.020396][T18495] loop0: detected capacity change from 0 to 1024 [ 1750.088945][T18495] EXT4-fs: Ignoring removed oldalloc option [ 1750.106186][T18495] EXT4-fs: Ignoring removed bh option [ 1750.123643][T18495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1750.145004][ T4610] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.184514][T18420] team0: Port device team_slave_1 added [ 1750.226339][T18495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1750.328880][T18420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.396923][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1750.507573][T16403] EXT4-fs (loop0): unmounting filesystem. [ 1750.541024][T18420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1750.613168][T18420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1750.620152][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1750.754154][T18420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.925760][T18515] binder: 18508:18515 ioctl c0306201 200000000540 returned -14 [ 1750.949246][T18420] device hsr_slave_0 entered promiscuous mode [ 1751.018898][T18420] device hsr_slave_1 entered promiscuous mode [ 1751.288791][T18420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1751.469476][T18420] Cannot create hsr debugfs directory [ 1751.657083][T15972] Bluetooth: hci1: command 0x0419 tx timeout [ 1751.779588][T18522] loop0: detected capacity change from 0 to 512 [ 1751.786777][T18522] EXT4-fs: Ignoring removed i_version option [ 1751.797147][T18522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1751.861154][T18522] EXT4-fs (loop0): 1 truncate cleaned up [ 1751.867046][T18522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1751.994546][T18522] [ 1751.996917][T18522] ====================================================== [ 1752.003941][T18522] WARNING: possible circular locking dependency detected [ 1752.010979][T18522] 6.1.142-syzkaller #0 Not tainted [ 1752.016089][T18522] ------------------------------------------------------ [ 1752.016392][T18526] loop7: detected capacity change from 0 to 2048 [ 1752.023089][T18522] syz.0.3479/18522 is trying to acquire lock: [ 1752.023102][T18522] ffff88805d48e850 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 1752.023158][T18522] [ 1752.023158][T18522] but task is already holding lock: [ 1752.023162][T18522] ffff88805d48c8c0 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 1752.023202][T18522] [ 1752.023202][T18522] which lock already depends on the new lock. [ 1752.023202][T18522] [ 1752.023212][T18522] [ 1752.023212][T18522] the existing dependency chain (in reverse order) is: [ 1752.023216][T18522] [ 1752.023216][T18522] -> #1 (&ei->i_data_sem/3){++++}-{3:3}: [ 1752.023241][T18522] down_write+0x36/0x60 [ 1752.023260][T18522] ext4_xattr_inode_lookup_create+0x15c4/0x1d10 [ 1752.023279][T18522] ext4_xattr_ibody_set+0x1fe/0x690 [ 1752.023299][T18522] ext4_xattr_set_handle+0xa7c/0x12b0 [ 1752.023319][T18522] ext4_xattr_set+0x22a/0x320 [ 1752.023336][T18522] __vfs_setxattr+0x3e0/0x420 [ 1752.079804][T18526] EXT4-fs: Ignoring removed mblk_io_submit option [ 1752.083513][T18522] __vfs_setxattr_noperm+0x129/0x5e0 [ 1752.083542][T18522] vfs_setxattr+0x168/0x2f0 [ 1752.083561][T18522] setxattr+0x2b2/0x2d0 [ 1752.083573][T18522] path_setxattr+0x142/0x280 [ 1752.083584][T18522] __x64_sys_lsetxattr+0xb4/0xd0 [ 1752.083601][T18522] do_syscall_64+0x4c/0xa0 [ 1752.083619][T18522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1752.083643][T18522] [ 1752.083643][T18522] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}: [ 1752.177137][T18522] __lock_acquire+0x2cf8/0x7c50 [ 1752.182508][T18522] lock_acquire+0x1b4/0x490 [ 1752.187523][T18522] down_write+0x36/0x60 [ 1752.192226][T18522] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 1752.198981][T18522] ext4_xattr_block_set+0x23a/0x32a0 [ 1752.204778][T18522] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 1752.211180][T18522] __ext4_expand_extra_isize+0x301/0x3e0 [ 1752.217321][T18522] __ext4_mark_inode_dirty+0x47f/0x770 [ 1752.223282][T18522] ext4_setattr+0x1457/0x19f0 [ 1752.228463][T18522] notify_change+0xc74/0xf40 [ 1752.233567][T18522] do_truncate+0x197/0x220 [ 1752.238490][T18522] path_openat+0x27f2/0x2e70 [ 1752.243587][T18522] do_filp_open+0x1c1/0x3c0 [ 1752.248599][T18522] do_sys_openat2+0x142/0x490 [ 1752.253787][T18522] __x64_sys_openat+0x135/0x160 [ 1752.259146][T18522] do_syscall_64+0x4c/0xa0 [ 1752.264074][T18522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1752.270479][T18522] [ 1752.270479][T18522] other info that might help us debug this: [ 1752.270479][T18522] [ 1752.280689][T18522] Possible unsafe locking scenario: [ 1752.280689][T18522] [ 1752.288145][T18522] CPU0 CPU1 [ 1752.293494][T18522] ---- ---- [ 1752.298844][T18522] lock(&ei->i_data_sem/3); [ 1752.303425][T18522] lock(&sb->s_type->i_mutex_key#8/1); [ 1752.311500][T18522] lock(&ei->i_data_sem/3); [ 1752.318609][T18522] lock(&sb->s_type->i_mutex_key#8/1); [ 1752.324165][T18522] [ 1752.324165][T18522] *** DEADLOCK *** [ 1752.324165][T18522] [ 1752.332300][T18522] 5 locks held by syz.0.3479/18522: [ 1752.337486][T18522] #0: ffff888074c6c460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1752.346629][T18522] #1: ffff88805d48ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x183/0x220 [ 1752.356913][T18522] #2: ffff88805d48cbd8 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xe6f/0x19f0 [ 1752.367103][T18522] #3: ffff88805d48c8c0 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 1752.376857][T18522] #4: ffff88805d48c700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 1752.387115][T18522] [ 1752.387115][T18522] stack backtrace: [ 1752.392986][T18522] CPU: 1 PID: 18522 Comm: syz.0.3479 Not tainted 6.1.142-syzkaller #0 [ 1752.401125][T18522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1752.411186][T18522] Call Trace: [ 1752.414462][T18522] [ 1752.417387][T18522] dump_stack_lvl+0x168/0x22e [ 1752.422080][T18522] ? load_image+0x3b0/0x3b0 [ 1752.426588][T18522] ? show_regs_print_info+0x12/0x12 [ 1752.431796][T18522] ? print_circular_bug+0x12b/0x1a0 [ 1752.436996][T18522] check_noncircular+0x274/0x310 [ 1752.441928][T18522] ? add_chain_block+0x940/0x940 [ 1752.446864][T18522] ? lockdep_lock+0xdc/0x1e0 [ 1752.451449][T18522] ? verify_lock_unused+0x140/0x140 [ 1752.456635][T18522] ? _find_first_zero_bit+0xcf/0x100 [ 1752.461918][T18522] __lock_acquire+0x2cf8/0x7c50 [ 1752.466761][T18522] ? __lock_acquire+0x7c50/0x7c50 [ 1752.471782][T18522] ? verify_lock_unused+0x140/0x140 [ 1752.476976][T18522] ? mark_buffer_dirty+0x2d8/0x7a0 [ 1752.482081][T18522] lock_acquire+0x1b4/0x490 [ 1752.486573][T18522] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 1752.492984][T18522] ? __might_sleep+0xd0/0xd0 [ 1752.497567][T18522] ? read_lock_is_recursive+0x10/0x10 [ 1752.502929][T18522] ? __ext4_mark_inode_dirty+0x4eb/0x770 [ 1752.508554][T18522] down_write+0x36/0x60 [ 1752.512699][T18522] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 1752.519107][T18522] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 1752.525340][T18522] ? ext4_xattr_ibody_set+0x690/0x690 [ 1752.530704][T18522] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1752.536673][T18522] ? lock_chain_count+0x20/0x20 [ 1752.541522][T18522] ext4_xattr_block_set+0x23a/0x32a0 [ 1752.546798][T18522] ? __might_sleep+0xd0/0xd0 [ 1752.551382][T18522] ? __getblk_gfp+0x4f/0xb20 [ 1752.555965][T18522] ? xattr_find_entry+0x12b/0x2f0 [ 1752.560979][T18522] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 1752.566426][T18522] ? ext4_xattr_block_find+0x241/0x2b0 [ 1752.571876][T18522] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 1752.577768][T18522] __ext4_expand_extra_isize+0x301/0x3e0 [ 1752.583389][T18522] __ext4_mark_inode_dirty+0x47f/0x770 [ 1752.588834][T18522] ext4_setattr+0x1457/0x19f0 [ 1752.593500][T18522] ? ext4_write_inode+0x5e0/0x5e0 [ 1752.598508][T18522] notify_change+0xc74/0xf40 [ 1752.603090][T18522] do_truncate+0x197/0x220 [ 1752.607494][T18522] ? aa_get_current_label+0x110/0x1d0 [ 1752.612854][T18522] ? put_page_bootmem+0x2c0/0x2c0 [ 1752.617868][T18522] ? ima_bprm_check+0x1f0/0x1f0 [ 1752.622705][T18522] ? bpf_lsm_path_truncate+0x5/0x10 [ 1752.627894][T18522] path_openat+0x27f2/0x2e70 [ 1752.632479][T18522] ? do_sys_openat2+0xcf/0x490 [ 1752.637231][T18522] ? __x64_sys_openat+0x135/0x160 [ 1752.642245][T18522] ? do_filp_open+0x3c0/0x3c0 [ 1752.646913][T18522] do_filp_open+0x1c1/0x3c0 [ 1752.651426][T18522] ? vfs_tmpfile+0x480/0x480 [ 1752.656037][T18522] ? _raw_spin_unlock+0x24/0x40 [ 1752.660890][T18522] ? alloc_fd+0x58f/0x630 [ 1752.665220][T18522] do_sys_openat2+0x142/0x490 [ 1752.669900][T18522] ? do_sys_open+0xe0/0xe0 [ 1752.674313][T18522] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1752.680302][T18522] ? lock_chain_count+0x20/0x20 [ 1752.685153][T18522] __x64_sys_openat+0x135/0x160 [ 1752.690008][T18522] do_syscall_64+0x4c/0xa0 [ 1752.694450][T18522] ? clear_bhb_loop+0x60/0xb0 [ 1752.699118][T18522] ? clear_bhb_loop+0x60/0xb0 [ 1752.703782][T18522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1752.709666][T18522] RIP: 0033:0x7ffbcf78e929 [ 1752.714090][T18522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1752.733770][T18522] RSP: 002b:00007ffbd05d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1752.742179][T18522] RAX: ffffffffffffffda RBX: 00007ffbcf9b5fa0 RCX: 00007ffbcf78e929 [ 1752.750135][T18522] RDX: 0000000000000242 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1752.758089][T18522] RBP: 00007ffbcf810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1752.766047][T18522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.774005][T18522] R13: 0000000000000000 R14: 00007ffbcf9b5fa0 R15: 00007ffeee8b73a8 [ 1752.781975][T18522] [ 1752.839370][T18526] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1753.033228][T18539] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3480: bg 0: block 234: padding at end of block bitmap is not set [ 1753.050321][T16403] EXT4-fs (loop0): unmounting filesystem. [ 1753.157271][T18539] EXT4-fs (loop7): Remounting filesystem read-only [ 1753.615648][T17853] EXT4-fs (loop7): unmounting filesystem. [ 1753.985023][ T4610] device hsr_slave_0 left promiscuous mode [ 1753.991462][ T4610] device hsr_slave_1 left promiscuous mode [ 1753.997803][ T4610] device bridge_slave_1 left promiscuous mode [ 1754.004273][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.013337][ T4610] device bridge_slave_0 left promiscuous mode [ 1754.019585][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.030640][ T4610] device veth1_macvtap left promiscuous mode [ 1754.036705][ T4610] device veth0_macvtap left promiscuous mode [ 1754.042893][ T4610] device veth1_vlan left promiscuous mode [ 1754.048642][ T4610] device veth0_vlan left promiscuous mode [ 1754.099762][ T4610] bond1 (unregistering): Released all slaves [ 1754.181961][ T4610] team0 (unregistering): Port device team_slave_1 removed [ 1754.211310][ T4610] team0 (unregistering): Port device team_slave_0 removed [ 1754.222373][ T4610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1754.233819][ T4610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1754.304341][ T4610] bond0 (unregistering): Released all slaves [ 1754.568238][T18420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1754.577719][T18420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1754.605409][T18420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1754.615337][T18420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1754.653532][T18420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.668098][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1754.677403][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1754.695694][T18420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.714624][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1754.723934][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1754.732394][T16840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.739473][T16840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.755309][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1754.763600][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1754.773421][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1754.782455][T16840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.789546][T16840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1754.797807][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1754.806936][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1754.823002][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1754.832080][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1754.840467][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1754.850447][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1754.859017][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1754.868149][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1754.879538][T18420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1754.892569][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1754.900547][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1754.908505][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1754.918781][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1755.019356][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1755.026866][T16840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1755.037431][T18420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.180325][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1755.189694][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1755.210248][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1755.218506][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1755.227460][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1755.235641][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1755.245157][T18420] device veth0_vlan entered promiscuous mode [ 1755.254507][T18420] device veth1_vlan entered promiscuous mode [ 1755.268190][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1755.276358][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1755.284610][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1755.293125][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1755.305385][T18420] device veth0_macvtap entered promiscuous mode [ 1755.313895][T18420] device veth1_macvtap entered promiscuous mode [ 1755.327432][T18420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.338105][T18420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.348009][T18420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.358958][T18420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.369049][T18420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.382397][T18420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.392292][T18420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.402964][T18420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.416012][T18420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1755.423797][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1755.433566][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1755.441510][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1755.449895][T12863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1755.460471][T18420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1755.471248][T18420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.481520][T18420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1755.492118][T18420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.502512][T18420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1755.512973][T18420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.522829][T18420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1755.533295][T18420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.546599][T18420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1755.554913][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1755.563574][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1755.573725][T18420] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.582790][T18420] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.591909][T18420] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.600897][T18420] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.623035][T18420] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 1755.642371][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.643148][T18420] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 1755.655501][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.672872][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.673264][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1755.683658][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.696236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready