last executing test programs: 3m3.402542818s ago: executing program 1 (id=373): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x80000000, @loopback}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r0, 0xffffffffffffffff, 0x0) 2m52.309376515s ago: executing program 1 (id=383): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x9, 0x81, 0x1, 0x1, 0x7, 0xffff, 0x18, 0x1ff, 0x5, 0x1, 0x800, 0x8, 0xffffffff, 0x3, 0xb, 0x30, {0x2, 0x47ee}, 0x3, 0x5a}}) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x6992, 0x8, 0x40002, 0xfc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) 2m47.760618554s ago: executing program 1 (id=401): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x5c7, 0x5a, 0x800, 0x5, 0x4, 0x6, 0x6, 0xffff, 0x5, 0x7, 0x3, 0x5, 0x2, 0x80000000, 0x1, 0x9, 0x80000000, 0x8, 0xb, 0x456d, 0x0, 0x6, 0x4, 0x0, 0xfffffff8, 0xfffffffd, 0x2, 0x9, 0x8, 0x6, 0x3, 0x6]}) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m46.420763155s ago: executing program 1 (id=404): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x80000000, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r0, 0xffffffffffffffff, 0x0) 2m35.719195926s ago: executing program 1 (id=410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m34.483968145s ago: executing program 1 (id=415): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x8, 0xff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703ffffffde0000850000001b000000b7000500000000000000010000000000"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = shmat(0x0, &(0x7f00004d8000/0x1000)=nil, 0x4000) shmdt(r7) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$cramfs(&(0x7f0000000540), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x208e411, &(0x7f0000003100)=ANY=[], 0x2, 0x154, &(0x7f0000000880)="$eJzszk9LKlEcxvHnMHPV+8crF25gQSa0aFBMm7BWURoJA9lA4aZNgU0kKEZCuQoj2rUI2rqwglbiW7CsjaUQ9ibauHZpHEeIoE3757MZzvec85uzstDW4AeOPRhYzuf2D6xCwdrxr5vJxMZbvR6T3QGg92nfPn8XA/bkVwW6J4DMD25gN5O1ptP5rFx3Y4AGIP4bS7JHZPsH/JLtv312BvZ9bRJojNhN/6LNDtuYCsQ9dpPz+lfAlJznBJDJWk77eSiWg7Xq01qraYQCt+MKzozgxA+50R8yQgGfda4nRm/+eBWkrMdrxIW89xpuhl7CtWqn3UqumosAdH1OAKVItGM+t4xo6QLqlvMQ2BSAwMd/HPD61JQLpwK4HMzq3gs3gEalZ+b+zleGb3MdKX5AFMvpbUWufwKKBgEiIiIiIiIiIiIiIiIiIqLveg8AAP//vzBjqA==") openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 2m21.734331458s ago: executing program 4 (id=454): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28000, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = getpid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_pidfd_open(r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m20.434747327s ago: executing program 4 (id=458): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0xb, 0x0, 0x400000, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5, 0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x1}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x200000, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$kcm(r5, 0x0, 0x20000040) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xc, 0x0, 0x0, 0xc, 0x1, 0x16c0, 0x5505, 0x8b, 0x2, 0x0, 'syz0\x00'}) 2m19.113643747s ago: executing program 32 (id=415): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x8, 0xff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703ffffffde0000850000001b000000b7000500000000000000010000000000"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = shmat(0x0, &(0x7f00004d8000/0x1000)=nil, 0x4000) shmdt(r7) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$cramfs(&(0x7f0000000540), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x208e411, &(0x7f0000003100)=ANY=[], 0x2, 0x154, &(0x7f0000000880)="$eJzszk9LKlEcxvHnMHPV+8crF25gQSa0aFBMm7BWURoJA9lA4aZNgU0kKEZCuQoj2rUI2rqwglbiW7CsjaUQ9ibauHZpHEeIoE3757MZzvec85uzstDW4AeOPRhYzuf2D6xCwdrxr5vJxMZbvR6T3QGg92nfPn8XA/bkVwW6J4DMD25gN5O1ptP5rFx3Y4AGIP4bS7JHZPsH/JLtv312BvZ9bRJojNhN/6LNDtuYCsQ9dpPz+lfAlJznBJDJWk77eSiWg7Xq01qraYQCt+MKzozgxA+50R8yQgGfda4nRm/+eBWkrMdrxIW89xpuhl7CtWqn3UqumosAdH1OAKVItGM+t4xo6QLqlvMQ2BSAwMd/HPD61JQLpwK4HMzq3gs3gEalZ+b+zleGb3MdKX5AFMvpbUWufwKKBgEiIiIiIiIiIiIiIiIiIqLveg8AAP//vzBjqA==") openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 2m19.074444028s ago: executing program 4 (id=462): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.859635841s ago: executing program 4 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x7e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m17.232306396s ago: executing program 4 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 2m16.834523722s ago: executing program 4 (id=470): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "ecaba4", 0x20, 0x21, 0x1, @local, @remote, {[@srh={0x2b, 0x0, 0x4, 0x0, 0x8, 0x20, 0x6}, @routing={0x67, 0x0, 0x2, 0xa3}], {{0x4e20, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x5, 0x7, "ab02da", 0x24, "dae5f1"}}}}}}}, 0x0) 2m1.73519295s ago: executing program 33 (id=470): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "ecaba4", 0x20, 0x21, 0x1, @local, @remote, {[@srh={0x2b, 0x0, 0x4, 0x0, 0x8, 0x20, 0x6}, @routing={0x67, 0x0, 0x2, 0xa3}], {{0x4e20, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x5, 0x7, "ab02da", 0x24, "dae5f1"}}}}}}}, 0x0) 17.308859468s ago: executing program 0 (id=782): open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180)={[{@whint_mode_fs}, {@quota}, {@acl}, {@fastboot}, {@six_active_logs}, {@noextent_cache}, {@noextent_cache}, {@whint_mode_fs}, {@checkpoint_diasble}, {@inlinecrypt}, {@background_gc_off}, {@whint_mode_user}, {@checkpoint_enable}, {@noinline_dentry}]}, 0xfd, 0x552a, &(0x7f0000000280)="$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") 15.17022411s ago: executing program 0 (id=788): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4018810}, 0x4040) 14.044174167s ago: executing program 0 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) close(r0) 13.698250392s ago: executing program 0 (id=791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/firmware/fdt', 0x102, 0x0) sendfile(r6, r7, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x6}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x667b}]}}]}, 0x40}}, 0x0) 11.165601361s ago: executing program 5 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) getpgid(0x0) sendmsg$nl_route(r0, 0x0, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0xfffff000, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, 0x0, 0x8881) 10.892240395s ago: executing program 0 (id=801): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) sendfile(r4, r4, 0x0, 0x2) 10.457780841s ago: executing program 0 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x40, 0x0, 0x1, 0x4, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.(\x00'}]}]}]}]}, 0x40}}, 0x0) 10.136324197s ago: executing program 5 (id=803): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x9, 0x81, 0x1, 0x1, 0x7, 0xffff, 0x18, 0x1ff, 0x5, 0x1, 0x800, 0x8, 0xffffffff, 0x3, 0xb, 0x30, {0x2, 0x47ee}, 0x3, 0x5a}}) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x6992, 0x8, 0x40002, 0xfc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) 9.664325403s ago: executing program 6 (id=805): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000007900)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES8=0x0, @ANYRESHEX], 0x6, 0x2e6, &(0x7f00000000c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) 6.791120687s ago: executing program 6 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x77}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 6.481026532s ago: executing program 3 (id=811): madvise(&(0x7f000007b000/0x3000)=nil, 0x3000, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7ff}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}}, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x4004040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.861707906s ago: executing program 5 (id=815): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES8=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xd3) syz_io_uring_setup(0x4000592, &(0x7f0000000880)={0x0, 0xa943, 0x800, 0x0, 0x321}, &(0x7f0000000900), &(0x7f0000000940)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) socket$kcm(0x10, 0x0, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x7cb7562f2d67) 4.157941746s ago: executing program 3 (id=816): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.987973359s ago: executing program 3 (id=817): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000340)=@string={0x2}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, &(0x7f00000004c0)={0x40, 0x30, 0x22, {0x22, 0x2, "0996a82add412ab7406a9f67e37788f76923b94f2363269d6a68d9c620e1bef0"}}, &(0x7f0000000600)={0x0, 0x3, 0x86, @string={0x86, 0x3, "28265a6fe27a4017c00901b9ecf3781bed5ad6fa471b545fef846459d5422235377ac393bc3084cec3a72ca9a3ed912d4d968c684e024e5c7be8048e85d976aa2eb710430a6548001f003d088c77d679f04788571224032d444bd9034fbd8d6efb247844001951726c3e330e40452e0821958f2a8d114f97e279c92cf8a2b0016f687b77"}}, 0x0, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x171}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x1, 0x4a, "d3f8739ce31ffed15602dc2f622b598138ce89b33e3ed208c08309fc7dff9ab29af8ec330396097fbbe8c04e51b6b2cf5ca00ca3b523315a2cb16ca27bc1a5ac41eefc561c17fd686bab"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0xffffffffffffff9b, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00f5dd9b8af4f9e33b61"}}, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0x7, 0x2, {0x2, 0xd}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0, 0x0}, 0x0) 3.364118899s ago: executing program 3 (id=820): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x2040400) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000f80)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x408, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8dac, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x203, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x6, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x10000, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0x2, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x0, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x2, 0x4, 0x4, 0x10, 0x340a, 0xfffffffe, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, 0x0, 0x0) write$input_event(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3.30078271s ago: executing program 6 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x4b4c, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) 3.210595511s ago: executing program 2 (id=822): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000005c0)={0x4, 0x8, 0x3b, 0x0, 0xd}) 2.908334636s ago: executing program 2 (id=823): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x5cad, 0x0, [0x10000, 0xd8, 0x8, 0xd7, 0x7fffffff], [0x8, 0x100000000, 0x6, 0x3311, 0x7b0, 0x8, 0xffffffff00000000, 0x1000, 0x6, 0x1fe0000000000000, 0x7fffffffffffffff, 0x7f, 0x9, 0x7, 0x8, 0x8000, 0xffffffffffffff80, 0x0, 0x100000000, 0x8000000000000000, 0xfed5, 0x0, 0x7, 0x5, 0xad, 0x51b, 0x7fffffff, 0x9, 0x8002, 0x6, 0x7, 0x200, 0x3, 0xfffffffffffffffc, 0x4, 0x1ff, 0x101, 0x6, 0xaf20, 0x9c56, 0x10, 0x0, 0x5, 0xcbf, 0x2, 0x401, 0x7f, 0x7ff, 0xd, 0x7cb, 0x1, 0x4, 0x9, 0x3, 0x4, 0x4ffb, 0xfa, 0xffffffffffffe72c, 0x8, 0xfffffffeffffffff, 0x5c7, 0x6, 0x4, 0x0, 0xe51, 0x9, 0x6, 0x7, 0x31d, 0x7, 0x3, 0xff4, 0xc3fa, 0x200, 0xa1a, 0x101, 0x4, 0x3, 0x6, 0x4, 0x2, 0x681, 0x2, 0x8, 0x3, 0x7fffffff, 0x1, 0x4, 0x37e8, 0x0, 0x5, 0x2, 0x8, 0x5, 0x8, 0x954, 0x5526, 0xffffffffffffe5df, 0xfff, 0x3, 0x80000001, 0x300, 0x9, 0x8001, 0x50000000000000, 0x1, 0x9, 0xfffffffffffff121, 0xffffffffffffffff, 0x9, 0x3, 0x5, 0x2, 0x8, 0x6, 0x8001, 0x8, 0x2, 0x0, 0x2, 0xf1a]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.255395866s ago: executing program 3 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.202831476s ago: executing program 5 (id=825): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@noload}]}, 0x3, 0x430, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8) 2.177331357s ago: executing program 6 (id=826): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x0, 0x441, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$link(0x8, 0x0, r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) 2.028131809s ago: executing program 2 (id=827): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x7db2, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 1.685123234s ago: executing program 2 (id=828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.619194525s ago: executing program 5 (id=829): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 971.944815ms ago: executing program 6 (id=830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) 906.910056ms ago: executing program 5 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x77}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 794.207507ms ago: executing program 2 (id=832): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 257.145366ms ago: executing program 2 (id=833): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r6}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0xb, 0x0, 0x400000, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5, 0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x1}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x200000, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$kcm(r4, 0x0, 0x20000040) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xc, 0x0, 0x0, 0xc, 0x1, 0x16c0, 0x5505, 0x8b, 0x2, 0x0, 'syz0\x00'}) 1.42824ms ago: executing program 6 (id=834): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 0s ago: executing program 3 (id=835): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES8=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xd3) syz_io_uring_setup(0x4000592, &(0x7f0000000880)={0x0, 0xa943, 0x800, 0x0, 0x321}, &(0x7f0000000900), &(0x7f0000000940)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) socket$kcm(0x10, 0x0, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x7cb7562f2d67) kernel console output (not intermixed with test programs): ady [ 40.251130][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.253144][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.261235][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.281857][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.284956][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.287964][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.290983][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.293677][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.297190][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.299920][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.302664][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.306115][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.323073][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.326643][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.329436][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.336673][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.348906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.352721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.356478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.367128][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.380041][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.383123][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.406898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.410000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.430892][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.433543][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.452340][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.462985][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.466376][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.483006][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.507652][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.509978][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.517395][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.520179][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.522898][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.526129][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.528168][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.530963][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.539738][ T4310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.550124][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.553000][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.556514][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.558574][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.561691][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.575365][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.584435][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.593967][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.598085][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.600939][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.605556][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.621236][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.624724][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.628150][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.631501][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.640743][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.643590][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.649075][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.652695][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.657671][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.660312][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.662735][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.669813][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.686365][ T4310] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.689065][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.700058][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.702842][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.706986][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.708974][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.711861][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.715205][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.718141][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.720355][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.727834][ T4296] device veth0_vlan entered promiscuous mode [ 40.742925][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.746526][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.749114][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.751801][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.755309][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.757875][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.760048][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.762651][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.766069][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.768725][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.770764][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.777337][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.783475][ T4296] device veth1_vlan entered promiscuous mode [ 40.787830][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.800703][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.803431][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.807559][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.810416][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.813550][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.815630][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.818698][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.822470][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.843724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.846900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.855053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.861324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.870118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.880084][ T4310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.882996][ T4310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.892238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.895816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.898616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.901296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.904711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.907406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.911497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.920474][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.924535][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.927894][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.948662][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.951639][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.955117][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.958225][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.970671][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.973062][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.976652][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.979447][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.982167][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.986336][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.992284][ T4303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.997068][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.003076][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.006186][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.009956][ T4296] device veth0_macvtap entered promiscuous mode [ 41.019237][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.025985][ T4296] device veth1_macvtap entered promiscuous mode [ 41.040666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.043440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.046972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.049729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.052989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.056536][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.060005][ T4306] device veth0_vlan entered promiscuous mode [ 41.085661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.088717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.103627][ T4306] device veth1_vlan entered promiscuous mode [ 41.107024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.109667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.111890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.132183][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.136884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.139809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.151968][ T4310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.162513][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.170595][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.173403][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.177883][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.180582][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.185822][ T4297] device veth0_vlan entered promiscuous mode [ 41.191581][ T4297] device veth1_vlan entered promiscuous mode [ 41.205511][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.212318][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.215766][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.218681][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.230387][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.233047][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.236548][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.238993][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.247533][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.250751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.264830][ T4306] device veth0_macvtap entered promiscuous mode [ 41.275110][ T4306] device veth1_macvtap entered promiscuous mode [ 41.283497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.285874][ T4308] Bluetooth: hci1: command 0x041b tx timeout [ 41.285908][ T4308] Bluetooth: hci3: command 0x041b tx timeout [ 41.290780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.293610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.295171][ T4301] Bluetooth: hci0: command 0x041b tx timeout [ 41.297534][ T4301] Bluetooth: hci2: command 0x041b tx timeout [ 41.301554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.304559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.340095][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.343094][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.370743][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.374208][ T4308] Bluetooth: hci4: command 0x041b tx timeout [ 41.377936][ T4297] device veth0_macvtap entered promiscuous mode [ 41.392385][ T4297] device veth1_macvtap entered promiscuous mode [ 41.413445][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.417703][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.421964][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.428641][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.431746][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.434778][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.437725][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.442074][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.460702][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.463633][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.471467][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.474882][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.477750][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.480729][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.483664][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.491894][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.497600][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.500706][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.505785][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.514860][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.517879][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.520672][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.523736][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.528364][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.531645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.536417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.539239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.542089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.547858][ T4306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.550368][ T4306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.552845][ T4306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.556833][ T4306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.568838][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.569429][ T4297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.571149][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.573706][ T4297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.580221][ T4297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.582773][ T4297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.593971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.610919][ T4303] device veth0_vlan entered promiscuous mode [ 41.613418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.617511][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.633446][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.636051][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.642391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.645425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.647919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.661655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.665196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.692914][ T4303] device veth1_vlan entered promiscuous mode [ 41.732357][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.750588][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.760048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.762973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.767806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.800616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.803524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.828061][ T4310] device veth0_vlan entered promiscuous mode [ 41.831393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.836300][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.856616][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.858967][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.863408][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.866799][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.876210][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.903503][ T4303] device veth0_macvtap entered promiscuous mode [ 41.915825][ T4303] device veth1_macvtap entered promiscuous mode [ 41.921772][ T4310] device veth1_vlan entered promiscuous mode [ 41.958978][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.961481][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.978107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.980937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.989362][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.992631][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.996422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.021188][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.030295][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.033306][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.036736][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.039568][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.042678][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.052272][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.060043][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.063218][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.072834][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.076361][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.079830][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.082981][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.106724][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.111594][ T4303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.119558][ T4303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.122159][ T4303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.125574][ T4303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.174684][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.177452][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.180305][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.183039][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.213587][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.418960][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.785841][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.831361][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.996890][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.183317][ T4310] device veth0_macvtap entered promiscuous mode [ 43.194407][ T4310] device veth1_macvtap entered promiscuous mode [ 43.196816][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.200024][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.211127][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.216806][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.444506][ T4308] Bluetooth: hci4: command 0x040f tx timeout [ 43.984167][ T4301] Bluetooth: hci2: command 0x040f tx timeout [ 43.985958][ T4301] Bluetooth: hci0: command 0x040f tx timeout [ 43.987645][ T4301] Bluetooth: hci3: command 0x040f tx timeout [ 43.989271][ T4301] Bluetooth: hci1: command 0x040f tx timeout [ 44.203391][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.209861][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.212648][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.215751][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.218561][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.221452][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.224368][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.227264][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.231361][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.252658][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.265096][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.267888][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.274472][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.277302][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.294337][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.297048][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.299988][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.424539][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.431988][ T4400] process 'syz.2.10' launched '/dev/fd/3' with NULL argv: empty string added [ 44.454308][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.476747][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.929312][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.932638][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.936076][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.938873][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.941842][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.948798][ T4310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.951757][ T4310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.960808][ T4310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.963714][ T4310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.966931][ T4401] ======================================================= [ 44.966931][ T4401] WARNING: The mand mount option has been deprecated and [ 44.966931][ T4401] and is ignored by this kernel. Remove the mand [ 44.966931][ T4401] option from the mount to silence this warning. [ 44.966931][ T4401] ======================================================= [ 44.977940][ T4401] tmpfs: Bad value for 'mpol' [ 45.208880][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.211472][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.215879][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.218725][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.234223][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.237427][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.581012][ T4308] Bluetooth: hci4: command 0x0419 tx timeout [ 46.011636][ T4307] Bluetooth: hci2: command 0x0419 tx timeout [ 46.011833][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 46.011995][ T4301] Bluetooth: hci3: command 0x0419 tx timeout [ 46.018569][ T4308] Bluetooth: hci1: command 0x0419 tx timeout [ 46.186935][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.191052][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.325656][ T4308] Bluetooth: hci1: command 0x2016 tx timeout [ 50.574388][ T4464] netlink: 104 bytes leftover after parsing attributes in process `syz.4.21'. [ 52.965385][ T4471] ALSA: mixer_oss: invalid OSS volume '' [ 53.009326][ T4489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.058761][ T4489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.114722][ T4486] bridge0: port 3(netdevsim0) entered blocking state [ 53.116866][ T4486] bridge0: port 3(netdevsim0) entered disabled state [ 53.119872][ T4486] device netdevsim0 entered promiscuous mode [ 53.122046][ T4486] bridge0: port 3(netdevsim0) entered blocking state [ 53.124135][ T4486] bridge0: port 3(netdevsim0) entered forwarding state [ 53.154933][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.157377][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.162128][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.191043][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.295909][ T4473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.206224][ T4502] vivid-000: kernel_thread() failed [ 54.334125][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.337267][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.550558][ T4517] netlink: 104 bytes leftover after parsing attributes in process `syz.2.36'. [ 57.877622][ T4535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.40'. [ 58.028578][ T4530] ALSA: mixer_oss: invalid OSS volume '' [ 58.973777][ C1] sched: RT throttling activated [ 60.272653][ T4566] Zero length message leads to an empty skb [ 60.300871][ T4566] netlink: 104 bytes leftover after parsing attributes in process `syz.0.47'. [ 61.585058][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 62.231278][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.244244][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.255061][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.261199][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.332545][ T4594] bridge0: port 3(netdevsim0) entered blocking state [ 62.335140][ T4594] bridge0: port 3(netdevsim0) entered disabled state [ 62.338250][ T4594] device netdevsim0 entered promiscuous mode [ 62.340359][ T4594] bridge0: port 3(netdevsim0) entered blocking state [ 62.342389][ T4594] bridge0: port 3(netdevsim0) entered forwarding state [ 62.488371][ T4570] ALSA: mixer_oss: invalid OSS volume '' [ 62.920865][ T4601] netlink: 104 bytes leftover after parsing attributes in process `syz.0.62'. [ 65.104698][ T4628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.146743][ T4628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.180375][ T4628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.183109][ T4628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.240397][ T4635] netlink: 104 bytes leftover after parsing attributes in process `syz.0.73'. [ 65.501319][ T4647] vhci_hcd: default hub control req: 6031 v09fa i0008 l0 [ 66.245061][ T4650] tmpfs: Unknown parameter 'usrquota' [ 68.068539][ T47] Bluetooth: hci2: command 0x2016 tx timeout [ 69.249421][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.386432][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.391740][ T4687] tipc: Started in network mode [ 69.393395][ T4687] tipc: Node identity 7f000001, cluster identity 4711 [ 69.412182][ T4687] tipc: Enabled bearer , priority 10 [ 69.432240][ T4687] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 69.449572][ T4687] tipc: Enabled bearer , priority 10 [ 69.470760][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.478936][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.481666][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.486244][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.489140][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.491470][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.564538][ T4346] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.582014][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.618200][ T1515] cfg80211: failed to load regulatory.db [ 69.620851][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.622683][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.827387][ T39] bridge0: port 3(netdevsim0) entered disabled state [ 70.539984][ T4332] tipc: Node number set to 2130706433 [ 70.565779][ T39] device netdevsim0 left promiscuous mode [ 70.570245][ T39] bridge0: port 3(netdevsim0) entered disabled state [ 70.572698][ T4346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.575886][ T4346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.578634][ T4346] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.581116][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.597050][ T4346] usb 1-1: config 0 descriptor?? [ 70.627047][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.760668][ T4694] chnl_net:caif_netlink_parms(): no params data found [ 70.994704][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.996751][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.000478][ T4694] device bridge_slave_0 entered promiscuous mode [ 71.026117][ T4685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.029142][ T4685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.036122][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.043174][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.059508][ T4694] device bridge_slave_1 entered promiscuous mode [ 71.531904][ T4694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.614992][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 72.032578][ T4694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.130299][ T4694] team0: Port device team_slave_0 added [ 72.140203][ T4694] team0: Port device team_slave_1 added [ 72.142052][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 72.279338][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.281493][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.290446][ T4346] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 72.308776][ T4694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.370419][ T4745] netlink: 'syz.2.106': attribute type 13 has an invalid length. [ 72.373239][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.378978][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.407326][ T4694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.505091][ T4346] usb 1-1: USB disconnect, device number 2 [ 72.656131][ T4694] device hsr_slave_0 entered promiscuous mode [ 72.679948][ T4694] device hsr_slave_1 entered promiscuous mode [ 72.735033][ T4694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.737377][ T4694] Cannot create hsr debugfs directory [ 73.589406][ T4767] mmap: syz.2.109 (4767) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.684053][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 74.280340][ T4789] input: syz0 as /devices/virtual/input/input2 [ 74.669099][ T39] device hsr_slave_0 left promiscuous mode [ 74.698588][ T39] device hsr_slave_1 left promiscuous mode [ 74.783999][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.786217][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.789067][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.793528][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.804961][ T39] device bridge_slave_1 left promiscuous mode [ 74.809912][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.863223][ T4308] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 74.869661][ T39] device bridge_slave_0 left promiscuous mode [ 74.871579][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.966524][ T4803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.980181][ T4803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.024374][ T39] device veth1_macvtap left promiscuous mode [ 75.026445][ T39] device veth0_macvtap left promiscuous mode [ 75.028204][ T39] device veth1_vlan left promiscuous mode [ 75.030098][ T39] device veth0_vlan left promiscuous mode [ 75.764271][ T4308] Bluetooth: hci0: command 0x040f tx timeout [ 77.843928][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 78.056673][ T39] team0 (unregistering): Port device team_slave_1 removed [ 78.235864][ T39] team0 (unregistering): Port device team_slave_0 removed [ 78.425432][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.625389][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.057331][ T39] bond0 (unregistering): Released all slaves [ 82.353392][ T4694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.415974][ T4694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.612393][ T4694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.495940][ T4694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.417849][ T47] Bluetooth: hci4: command 0x2016 tx timeout [ 84.631034][ T4875] syz.4.136 uses obsolete (PF_INET,SOCK_PACKET) [ 85.428945][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 85.561139][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.646697][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.651755][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.660886][ T4694] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.677489][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.681149][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.706615][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.708727][ T4725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.711756][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.858741][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.868817][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.871565][ T4618] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.873582][ T4618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.091578][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.172404][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.405371][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.596626][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.636822][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.788381][ T4903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.791592][ T4903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.804490][ T4903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.806972][ T4903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.814708][ T4694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.817656][ T4694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.970005][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.975415][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.983457][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.998350][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.018283][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.027254][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.043719][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.379480][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.381941][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.401674][ T4694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.442967][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.446503][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.483652][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.488929][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.558578][ T4694] device veth0_vlan entered promiscuous mode [ 87.568450][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.579124][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.593333][ T4694] device veth1_vlan entered promiscuous mode [ 87.667292][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.670368][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.673378][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.680711][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.692502][ T4694] device veth0_macvtap entered promiscuous mode [ 87.739670][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.792827][ T4694] device veth1_macvtap entered promiscuous mode [ 87.825060][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.831601][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.852414][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.870258][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.880254][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.883301][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.907698][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.913083][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.930178][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.948505][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.951472][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.984151][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.987437][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.990629][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.994628][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.024731][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.154670][ T4694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.168575][ T4694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.171828][ T4694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.187315][ T4694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.763641][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.766804][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.851012][ T4905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.853465][ T4905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.858117][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.880652][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.883196][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.899684][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.444063][ T4308] Bluetooth: Wrong link type (-22) [ 95.434633][ T5009] could not allocate digest TFM handle sha512-ssse3 [ 101.341887][ T5124] loop1: detected capacity change from 0 to 7 [ 101.347922][ T5124] Dev loop1: unable to read RDB block 7 [ 101.361702][ T5124] loop1: unable to read partition table [ 101.371182][ T5124] loop1: partition table beyond EOD, truncated [ 101.381699][ T5124] loop_reread_partitions: partition scan of loop1 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 101.381699][ T5124] ) failed (rc=-5) [ 102.464243][ T4345] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.570434][ T5135] loop1: detected capacity change from 0 to 16 [ 102.645723][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.649079][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.652978][ T4345] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.673491][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.713666][ T4345] usb 1-1: config 0 descriptor?? [ 103.151206][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.158443][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.125000][ T4725] wlan1: Trigger new scan to find an IBSS to join [ 105.180096][ T4345] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 105.182765][ T4345] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 105.186571][ T4345] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 105.188834][ T4345] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 105.190934][ T4345] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 105.201998][ T4345] usb 1-1: USB disconnect, device number 3 [ 105.267759][ T5163] tmpfs: Unknown parameter 'usrquota' [ 106.245696][ T4725] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 106.303898][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.044991][ T24] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 107.047772][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.050050][ T24] usb 1-1: Product: syz [ 107.051149][ T24] usb 1-1: Manufacturer: syz [ 107.052464][ T24] usb 1-1: SerialNumber: syz [ 107.078354][ T24] usb 1-1: config 0 descriptor?? [ 107.090111][ T24] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 004 [ 108.073865][ T24] (null): failure setting delay to 10us [ 108.075627][ T24] i2c-tiny-usb: probe of 1-1:0.0 failed with error -5 [ 108.220109][ T24] usb 1-1: USB disconnect, device number 4 [ 109.903992][ T9] wlan1: Trigger new scan to find an IBSS to join [ 110.045066][ T5216] bridge0: port 3(netdevsim0) entered blocking state [ 110.047347][ T5216] bridge0: port 3(netdevsim0) entered disabled state [ 110.058317][ T5216] device netdevsim0 entered promiscuous mode [ 110.062555][ T5216] bridge0: port 3(netdevsim0) entered blocking state [ 110.064587][ T5216] bridge0: port 3(netdevsim0) entered forwarding state [ 110.362438][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 111.055827][ T4458] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 112.645560][ T5251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 113.028306][ T5256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 114.221770][ T4725] wlan1: Trigger new scan to find an IBSS to join [ 115.550448][ T5286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 115.764009][ T47] Bluetooth: hci0: command 0x2016 tx timeout [ 115.822409][ T5299] loop3: detected capacity change from 0 to 16 [ 116.371476][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.379020][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.399730][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.407004][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.206743][ T4405] wlan1: Trigger new scan to find an IBSS to join [ 118.557597][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 119.254076][ T4725] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 120.997344][ T5353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.999911][ T5353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.018903][ T5353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.022867][ T5353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.471999][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 123.712628][ T5388] loop4: detected capacity change from 0 to 512 [ 123.724172][ T5388] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.727898][ T5388] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.796101][ T5388] EXT4-fs (loop4): 1 truncate cleaned up [ 123.797702][ T5388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.839317][ T4310] EXT4-fs (loop4): unmounting filesystem. [ 125.386575][ T5406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 125.391470][ T5408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.405053][ T5408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.421576][ T5408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.430367][ T5408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.362145][ T5033] wlan1: Trigger new scan to find an IBSS to join [ 127.482835][ T5441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 128.691482][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 129.065759][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 129.765315][ T4725] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 130.894981][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.897546][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.931654][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.959934][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.044691][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.046539][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.355758][ T5476] loop4: detected capacity change from 0 to 16 [ 131.408696][ T4818] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.504802][ T5479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.294'. [ 132.122012][ T1596] wlan1: Trigger new scan to find an IBSS to join [ 132.468460][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 133.151818][ T11] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 133.622244][ T5506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'. [ 134.443013][ T5517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 136.435308][ T5554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.253036][ T5611] loop4: detected capacity change from 0 to 512 [ 139.272839][ T5611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.336782][ T5614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.371149][ T5611] EXT4-fs (loop4): 1 truncate cleaned up [ 139.373149][ T5611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.733388][ T4310] EXT4-fs (loop4): unmounting filesystem. [ 141.352298][ T5643] loop0: detected capacity change from 0 to 16 [ 141.965161][ T4818] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.442686][ T5656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 143.582166][ T5661] loop4: detected capacity change from 0 to 512 [ 143.607052][ T5661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.677889][ T5661] EXT4-fs (loop4): 1 truncate cleaned up [ 143.679755][ T5661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.360077][ T4310] EXT4-fs (loop4): unmounting filesystem. [ 144.757598][ T5702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.367'. [ 147.161988][ T5716] loop3: detected capacity change from 0 to 16 [ 148.392736][ T5732] loop0: detected capacity change from 0 to 1024 [ 148.400584][ T5732] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.432475][ T5732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.495882][ T4303] EXT4-fs (loop0): unmounting filesystem. [ 159.078822][ T5746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.379'. [ 159.671775][ T5765] loop0: detected capacity change from 0 to 128 [ 159.690366][ T5765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.999078][ T4303] EXT4-fs (loop0): unmounting filesystem. [ 160.848176][ T5779] loop2: detected capacity change from 0 to 128 [ 160.882059][ T5779] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.949255][ T5779] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.960652][ T5779] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 161.087394][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 161.926743][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.929390][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.956656][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.959206][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.193522][ T5795] loop0: detected capacity change from 0 to 16 [ 162.359581][ T5798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'. [ 163.240883][ T39] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 163.360616][ T5808] loop3: detected capacity change from 0 to 16 [ 163.380947][ T5808] erofs: (device loop3): mounted with root inode @ nid 36. [ 163.454439][ T5810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.645451][ T5812] tipc: Enabled bearer , priority 0 [ 163.653657][ T5811] tipc: Resetting bearer [ 163.817331][ T5804] loop2: detected capacity change from 0 to 40427 [ 163.832591][ T5804] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 163.840212][ T5804] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 163.843976][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 163.845787][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 163.847540][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 163.860032][ T5804] F2FS-fs (loop2): invalid crc value [ 163.872277][ T5804] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.910043][ T5804] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 163.912490][ T5804] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 166.573940][ T4345] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.755233][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.758404][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.761145][ T4345] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 166.763699][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.772685][ T4345] usb 1-1: config 0 descriptor?? [ 166.979846][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.982513][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.044175][ T39] wlan1: Trigger new scan to find an IBSS to join [ 169.324838][ T4345] usbhid 1-1:0.0: can't add hid device: -71 [ 169.326915][ T4345] usbhid: probe of 1-1:0.0 failed with error -71 [ 169.337349][ T4345] usb 1-1: USB disconnect, device number 5 [ 170.090551][ T9] wlan1: Trigger new scan to find an IBSS to join [ 171.105016][ T4725] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 175.691173][ T5811] tipc: Disabling bearer [ 175.713337][ T5828] device gretap0 entered promiscuous mode [ 175.715338][ T5828] device macsec1 entered promiscuous mode [ 175.755329][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 175.835723][ T5844] loop4: detected capacity change from 0 to 256 [ 175.867515][ T5844] FAT-fs (loop4): Directory bread(block 64) failed [ 175.869763][ T5844] FAT-fs (loop4): Directory bread(block 65) failed [ 175.874302][ T5844] FAT-fs (loop4): Directory bread(block 66) failed [ 175.876186][ T5844] FAT-fs (loop4): Directory bread(block 67) failed [ 175.878135][ T5844] FAT-fs (loop4): Directory bread(block 68) failed [ 175.880074][ T5844] FAT-fs (loop4): Directory bread(block 69) failed [ 175.881204][ T27] audit: type=1326 audit(175.860:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 175.890259][ T5844] FAT-fs (loop4): Directory bread(block 70) failed [ 175.892568][ T5844] FAT-fs (loop4): Directory bread(block 71) failed [ 175.897101][ T27] audit: type=1326 audit(175.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 175.900936][ T5844] FAT-fs (loop4): Directory bread(block 72) failed [ 175.910570][ T5844] FAT-fs (loop4): Directory bread(block 73) failed [ 175.916099][ T27] audit: type=1326 audit(175.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 175.939283][ T27] audit: type=1326 audit(175.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 175.945650][ T27] audit: type=1326 audit(175.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 175.951844][ T27] audit: type=1326 audit(175.890:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 175.957924][ T27] audit: type=1326 audit(175.890:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 175.963891][ T27] audit: type=1326 audit(175.890:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 175.969765][ T27] audit: type=1326 audit(175.890:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffffbd35a8a8 code=0x7ffc0000 [ 177.043435][ T5861] loop2: detected capacity change from 0 to 512 [ 177.069138][ T5861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.081381][ T5861] EXT4-fs (loop2): 1 truncate cleaned up [ 177.083018][ T5861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 178.199244][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 178.650626][ T5891] loop1: detected capacity change from 0 to 16 [ 178.721211][ T5881] loop3: detected capacity change from 0 to 128 [ 178.723652][ T5881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.190254][ T5881] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 179.676098][ T5862] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.892120][ T5898] loop0: detected capacity change from 0 to 512 [ 179.901623][ T5898] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.421: casefold flag without casefold feature [ 179.906728][ T5898] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.421: couldn't read orphan inode 15 (err -117) [ 179.914127][ T5898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.177561][ T5917] loop3: detected capacity change from 0 to 512 [ 181.210646][ T5917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.293645][ T5917] EXT4-fs (loop3): 1 truncate cleaned up [ 181.300961][ T5917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 182.257418][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 183.121763][ T4303] EXT4-fs (loop0): unmounting filesystem. [ 183.210183][ T5933] loop4: detected capacity change from 0 to 256 [ 183.212527][ T5933] exfat: Deprecated parameter 'namecase' [ 183.272805][ T5933] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 185.705826][ T5964] loop3: detected capacity change from 0 to 512 [ 185.725793][ T5964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.886329][ T5964] EXT4-fs (loop3): 1 truncate cleaned up [ 185.888138][ T5964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.728666][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 189.663412][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 192.524221][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.526096][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.626856][ T6044] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 193.819131][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.188849][ T4307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.220287][ T4307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.224997][ T4307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.231298][ T4307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 194.233636][ T4307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.625135][ T6055] loop3: detected capacity change from 0 to 512 [ 194.667486][ T6055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.700237][ T6055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 194.702593][ T6055] System zones: 1-12 [ 194.719651][ T6055] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.469: corrupted in-inode xattr [ 194.731479][ T6055] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.469: couldn't read orphan inode 15 (err -117) [ 194.748079][ T6055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.756240][ T6061] xt_hashlimit: size too large, truncated to 1048576 [ 194.794047][ T6055] futex_wake_op: syz.3.469 tries to shift op by -1; fix this program [ 195.883676][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 196.155298][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 196.335034][ T4308] Bluetooth: hci5: command 0x0409 tx timeout [ 197.502983][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 197.505557][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 197.893374][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.906856][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.914502][ T6040] device bridge_slave_0 entered promiscuous mode [ 197.924053][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.973998][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.976814][ T6040] device bridge_slave_1 entered promiscuous mode [ 199.045374][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.049817][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.132855][ T6040] team0: Port device team_slave_0 added [ 199.155567][ T6040] team0: Port device team_slave_1 added [ 199.221239][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.223213][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.271391][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.308867][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.310886][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.356759][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.655592][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 199.713476][ T6040] device hsr_slave_0 entered promiscuous mode [ 199.787319][ T6040] device hsr_slave_1 entered promiscuous mode [ 199.845863][ T6098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.479'. [ 199.848576][ T6098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.479'. [ 199.851154][ T6098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.479'. [ 199.868010][ T6098] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 200.166379][ T6106] tipc: Started in network mode [ 200.167945][ T6106] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 200.172264][ T6106] tipc: Enabling of bearer rejected, failed to enable media [ 200.251587][ T6040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.285887][ T6040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.326345][ T6040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.414240][ T6040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.560589][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.588936][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.591755][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.601060][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.615704][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.618657][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.622293][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.624377][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.144032][ T6120] vhci_hcd: invalid port number 96 [ 201.145693][ T6120] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 201.323338][ T169] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.380085][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.732708][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 201.862827][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.899508][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.919497][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.922093][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.924207][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.945782][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.973226][ T6040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.001485][ T6040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.391966][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.682474][ T4405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.867941][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.871433][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.875166][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.878004][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.880805][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.883544][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.906245][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.909070][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.911814][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.968749][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.764101][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 203.977307][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.029462][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.032090][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.049876][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.052115][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.062987][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.927488][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.930394][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.003437][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.006625][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.009549][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.014999][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.145286][ T6040] device veth0_vlan entered promiscuous mode [ 209.164949][ T6040] device veth1_vlan entered promiscuous mode [ 209.304532][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.307344][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.309986][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.346498][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.367583][ T6040] device veth0_macvtap entered promiscuous mode [ 209.371981][ T6040] device veth1_macvtap entered promiscuous mode [ 209.671881][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.681552][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.685669][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.688628][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.691328][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.709036][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.711782][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.714910][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.719244][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.721788][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.730675][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.733384][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.737026][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.286826][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.291178][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.294135][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.296962][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.300059][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.302440][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.573002][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.576114][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.577136][ T6185] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.578857][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.581711][ T6185] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 210.602216][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.605362][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.608314][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.610993][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.622238][ T6199] loop0: detected capacity change from 0 to 1024 [ 210.623819][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.633445][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.636858][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.640087][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.727737][ T6199] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.747766][ T6040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.750289][ T6040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.815979][ T6040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.854669][ T6040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.404161][ T39] device hsr_slave_0 left promiscuous mode [ 211.454573][ T39] device hsr_slave_1 left promiscuous mode [ 211.534035][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.536422][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.539256][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.543722][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.559189][ T39] device bridge_slave_1 left promiscuous mode [ 211.561017][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.599757][ T39] device bridge_slave_0 left promiscuous mode [ 211.601732][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.770114][ T39] device veth1_macvtap left promiscuous mode [ 211.772046][ T39] device veth0_macvtap left promiscuous mode [ 211.774474][ T39] device veth1_vlan left promiscuous mode [ 211.776418][ T39] device veth0_vlan left promiscuous mode [ 212.324227][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 212.446365][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.460347][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.472265][ T4303] EXT4-fs (loop0): unmounting filesystem. [ 213.783949][ T1515] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 213.790548][ T39] team0 (unregistering): Port device team_slave_1 removed [ 213.973966][ T1515] usb 1-1: Using ep0 maxpacket: 32 [ 213.977847][ T1515] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 213.980031][ T1515] usb 1-1: config 0 has no interface number 0 [ 213.981645][ T1515] usb 1-1: config 0 interface 2 has no altsetting 0 [ 213.986947][ T39] team0 (unregistering): Port device team_slave_0 removed [ 214.002042][ T1515] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 214.004730][ T1515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.009022][ T1515] usb 1-1: Product: syz [ 214.010257][ T1515] usb 1-1: Manufacturer: syz [ 214.011609][ T1515] usb 1-1: SerialNumber: syz [ 214.024442][ T1515] usb 1-1: config 0 descriptor?? [ 214.195882][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.272371][ T1515] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 214.353006][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.403968][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 214.458489][ T112] usb 1-1: USB disconnect, device number 6 [ 214.786224][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.483896][ T4308] Bluetooth: hci0: command 0x040f tx timeout [ 217.715867][ T39] bond0 (unregistering): Released all slaves [ 217.962836][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 218.176551][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.178987][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.183068][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.991818][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 219.004164][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.006491][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.012965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.097739][ T6195] chnl_net:caif_netlink_parms(): no params data found [ 220.185782][ T6348] loop5: detected capacity change from 0 to 512 [ 220.235806][ T6348] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.415914][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.418045][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.427319][ T6358] loop2: detected capacity change from 0 to 2048 [ 220.440883][ T6195] device bridge_slave_0 entered promiscuous mode [ 220.447870][ T6348] EXT4-fs (loop5): 1 truncate cleaned up [ 220.449507][ T6348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 220.598170][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.604209][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.608203][ T6195] device bridge_slave_1 entered promiscuous mode [ 221.157292][ T6358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.247683][ T6195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.252253][ T6195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.299632][ T6040] EXT4-fs (loop5): unmounting filesystem. [ 221.336494][ T6195] team0: Port device team_slave_0 added [ 221.339876][ T6195] team0: Port device team_slave_1 added [ 221.526265][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.528298][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.648564][ T6195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.652890][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.665935][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.673081][ T6195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.843943][ T6384] syz.3.522 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 222.888109][ T6384] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 222.956886][ T6195] device hsr_slave_0 entered promiscuous mode [ 222.994399][ T6195] device hsr_slave_1 entered promiscuous mode [ 223.034106][ T6195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.036139][ T6195] Cannot create hsr debugfs directory [ 223.527352][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.529206][ T6394] loop3: detected capacity change from 0 to 16 [ 223.691257][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.714797][ T6195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 223.830562][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.836309][ T6195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 223.885591][ T6195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 223.922610][ T39] bridge0: port 3(netdevsim0) entered disabled state [ 224.005771][ T39] device netdevsim0 left promiscuous mode [ 224.008402][ T39] bridge0: port 3(netdevsim0) entered disabled state [ 224.052098][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.070070][ T6195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.309441][ T6195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.333005][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.336445][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.369104][ T6195] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.397305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.399978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.402602][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.404517][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.435059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.437964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.444420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.447084][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.449100][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.451543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.505357][ T6195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.508142][ T6195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.295060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.298413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.302977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.324483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.330113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.343143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.353484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.363336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.368517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.386731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.397341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.543689][ T6425] loop5: detected capacity change from 0 to 256 [ 225.604090][ T6425] FAT-fs (loop5): Directory bread(block 64) failed [ 225.609131][ T6425] FAT-fs (loop5): Directory bread(block 65) failed [ 225.611224][ T6425] FAT-fs (loop5): Directory bread(block 66) failed [ 225.613106][ T6425] FAT-fs (loop5): Directory bread(block 67) failed [ 225.626826][ T6425] FAT-fs (loop5): Directory bread(block 68) failed [ 225.628677][ T6425] FAT-fs (loop5): Directory bread(block 69) failed [ 225.646658][ T6425] FAT-fs (loop5): Directory bread(block 70) failed [ 225.648570][ T6425] FAT-fs (loop5): Directory bread(block 71) failed [ 225.650415][ T6425] FAT-fs (loop5): Directory bread(block 72) failed [ 225.652308][ T6425] FAT-fs (loop5): Directory bread(block 73) failed [ 226.005628][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.014450][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.928172][ T6195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.267104][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.5.533'. [ 227.292781][ T6454] loop5: detected capacity change from 0 to 512 [ 227.343587][ T6454] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.533: casefold flag without casefold feature [ 227.373638][ T6454] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.533: couldn't read orphan inode 15 (err -117) [ 227.416656][ T6454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 227.650386][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.653223][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.513756][ T6040] EXT4-fs (loop5): unmounting filesystem. [ 228.933657][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.937785][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.949647][ T6195] device veth0_vlan entered promiscuous mode [ 228.962359][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.971714][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.048108][ T6195] device veth1_vlan entered promiscuous mode [ 229.483124][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.486352][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.501176][ T6195] device veth0_macvtap entered promiscuous mode [ 229.597668][ T39] device hsr_slave_0 left promiscuous mode [ 229.637141][ T39] device hsr_slave_1 left promiscuous mode [ 229.713993][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.716110][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.720786][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.722929][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.740943][ T39] device bridge_slave_1 left promiscuous mode [ 229.742862][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.794772][ T39] device bridge_slave_0 left promiscuous mode [ 229.796591][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.954141][ T39] device veth1_macvtap left promiscuous mode [ 229.956020][ T39] device veth0_macvtap left promiscuous mode [ 229.957799][ T39] device veth1_vlan left promiscuous mode [ 229.959515][ T39] device veth0_vlan left promiscuous mode [ 230.311313][ T6491] loop3: detected capacity change from 0 to 256 [ 230.365829][ T6491] FAT-fs (loop3): Directory bread(block 64) failed [ 230.367887][ T6491] FAT-fs (loop3): Directory bread(block 65) failed [ 230.378091][ T6491] FAT-fs (loop3): Directory bread(block 66) failed [ 230.386527][ T6491] FAT-fs (loop3): Directory bread(block 67) failed [ 230.388403][ T6491] FAT-fs (loop3): Directory bread(block 68) failed [ 230.408846][ T6491] FAT-fs (loop3): Directory bread(block 69) failed [ 230.418596][ T6491] FAT-fs (loop3): Directory bread(block 70) failed [ 230.424057][ T6491] FAT-fs (loop3): Directory bread(block 71) failed [ 230.426052][ T6491] FAT-fs (loop3): Directory bread(block 72) failed [ 230.427839][ T6491] FAT-fs (loop3): Directory bread(block 73) failed [ 231.520206][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 231.569744][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.634094][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.377860][ T39] team0 (unregistering): Port device team_slave_1 removed [ 233.579688][ T39] team0 (unregistering): Port device team_slave_0 removed [ 233.774663][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.004687][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.272528][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.276102][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.352304][ T39] bond0 (unregistering): Released all slaves [ 237.609546][ T6195] device veth1_macvtap entered promiscuous mode [ 237.621622][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.624539][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.631761][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.635369][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.638320][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.641244][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.648877][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.651877][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.656219][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.677409][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.680446][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.706978][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.709913][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.713318][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.717195][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.719932][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.723200][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.771040][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.774906][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.781067][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.792544][ T6195] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.800464][ T6195] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.802868][ T6195] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.815897][ T6195] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.016731][ T4541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.019235][ T4541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.028818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.065443][ T4541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.067945][ T4541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.073223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.918345][ T6611] loop5: detected capacity change from 0 to 512 [ 239.949854][ T6611] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 239.990284][ T6611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 240.003269][ T6611] System zones: 1-12 [ 240.139141][ T6611] EXT4-fs (loop5): 1 truncate cleaned up [ 240.141061][ T6611] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.438427][ T6040] EXT4-fs (loop5): unmounting filesystem. [ 243.910519][ T6651] loop6: detected capacity change from 0 to 256 [ 244.275071][ T6665] loop5: detected capacity change from 0 to 512 [ 244.308114][ T6665] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.962626][ T6665] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 245.968740][ T6665] EXT4-fs (loop5): 1 truncate cleaned up [ 245.980746][ T6665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 247.940447][ T6694] usb usb8: usbfs: process 6694 (syz.3.586) did not claim interface 0 before use [ 248.483048][ T6040] EXT4-fs (loop5): unmounting filesystem. [ 249.227516][ T6703] hfsplus: unable to find HFS+ superblock [ 250.903199][ T6749] loop6: detected capacity change from 0 to 512 [ 250.915860][ T6749] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 250.932843][ T6749] EXT4-fs (loop6): 1 truncate cleaned up [ 250.934726][ T6749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 251.912218][ T6195] EXT4-fs (loop6): unmounting filesystem. [ 253.673645][ T6788] hfsplus: unable to find HFS+ superblock [ 253.924771][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.927674][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.740818][ T6813] loop2: detected capacity change from 0 to 512 [ 255.758611][ T6813] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.802780][ T6813] EXT4-fs (loop2): 1 truncate cleaned up [ 255.808216][ T6813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 256.787800][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 257.804423][ T6842] loop0: detected capacity change from 0 to 512 [ 257.945974][ T6848] loop6: detected capacity change from 0 to 512 [ 257.961629][ T6842] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 258.020104][ T6842] EXT4-fs (loop0): 1 truncate cleaned up [ 258.021742][ T6842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 258.711823][ T6848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 258.839555][ T6854] hfsplus: unable to find HFS+ superblock [ 259.031529][ T4303] EXT4-fs (loop0): unmounting filesystem. [ 259.428553][ T6195] EXT4-fs (loop6): unmounting filesystem. [ 260.828928][ T6905] loop3: detected capacity change from 0 to 1024 [ 260.844035][ T6905] EXT4-fs: Ignoring removed bh option [ 260.857654][ T6905] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.045181][ T6905] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 261.903676][ T6905] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.626: Allocating blocks 497-513 which overlap fs metadata [ 261.932490][ T6921] loop6: detected capacity change from 0 to 512 [ 261.965817][ T6905] EXT4-fs (loop3): pa 00000000c7808e95: logic 256, phys. 385, len 8 [ 261.968265][ T6905] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 261.973611][ T6921] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 261.996975][ T6921] EXT4-fs (loop6): 1 truncate cleaned up [ 262.016221][ T6921] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 262.213178][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 263.653303][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 264.636600][ T6955] hfsplus: unable to find HFS+ superblock [ 268.869147][ T6195] EXT4-fs (loop6): unmounting filesystem. [ 270.031282][ T7023] loop2: detected capacity change from 0 to 512 [ 270.041590][ T7023] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 270.072519][ T7023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 270.075141][ T7023] System zones: 1-12 [ 270.113548][ T7023] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.647: corrupted in-inode xattr [ 270.127316][ T7023] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.647: couldn't read orphan inode 15 (err -117) [ 270.157834][ T7023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 270.211264][ T7023] futex_wake_op: syz.2.647 tries to shift op by -1; fix this program [ 271.077838][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 271.342880][ T7047] hfsplus: unable to find HFS+ superblock [ 272.080362][ T27] audit: type=1326 audit(272.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.091725][ T27] audit: type=1326 audit(272.070:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.103957][ T27] audit: type=1326 audit(272.080:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.133910][ T27] audit: type=1326 audit(272.080:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.139910][ T27] audit: type=1326 audit(272.080:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.185421][ T27] audit: type=1326 audit(272.080:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.191450][ T27] audit: type=1326 audit(272.080:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.245426][ T27] audit: type=1326 audit(272.080:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.269695][ T27] audit: type=1326 audit(272.090:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 272.299964][ T27] audit: type=1326 audit(272.090:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed5a8a8 code=0x7ffc0000 [ 273.981059][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 275.203153][ T7088] loop2: detected capacity change from 0 to 1024 [ 275.400631][ T7088] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.636416][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 275.810036][ T7108] loop5: detected capacity change from 0 to 256 [ 275.877647][ T5862] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.900510][ T7112] loop2: detected capacity change from 0 to 512 [ 275.948187][ T7112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.968386][ T7112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 275.970719][ T7112] System zones: 1-12 [ 275.974284][ T7112] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.663: corrupted in-inode xattr [ 275.998612][ T7112] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.663: couldn't read orphan inode 15 (err -117) [ 276.010889][ T7112] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 276.052031][ T7112] futex_wake_op: syz.2.663 tries to shift op by -1; fix this program [ 276.939659][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 277.429663][ T7146] loop6: detected capacity change from 0 to 256 [ 277.511183][ T7149] hfsplus: unable to find HFS+ superblock [ 278.154792][ T7108] loop5: detected capacity change from 0 to 256 [ 278.158218][ T7146] FAT-fs (loop6): Unrecognized mount option "euid=00000000000000000000" or missing value [ 278.158752][ T7108] exfat: Deprecated parameter 'utf8' [ 278.344260][ T7108] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 278.355235][ T7108] usb usb8: usbfs: process 7108 (syz.5.665) did not claim interface 0 before use [ 281.639772][ T7179] loop3: detected capacity change from 0 to 512 [ 281.656722][ T7179] EXT4-fs (loop3): Test dummy encryption mode enabled [ 281.658662][ T7179] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.765872][ T7179] EXT4-fs (loop3): 1 truncate cleaned up [ 281.767458][ T7179] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 282.462688][ T7200] loop6: detected capacity change from 0 to 512 [ 282.513580][ T7200] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 282.560979][ T7200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 282.563433][ T7200] System zones: 1-12 [ 282.571339][ T7200] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.681: corrupted in-inode xattr [ 282.610679][ T7200] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.681: couldn't read orphan inode 15 (err -117) [ 282.618628][ T7200] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 282.647795][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 282.681735][ T7200] futex_wake_op: syz.6.681 tries to shift op by -1; fix this program [ 283.606698][ T4347] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 283.862441][ T6195] EXT4-fs (loop6): unmounting filesystem. [ 284.005805][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.008824][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.011475][ T4347] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.023869][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.047102][ T4347] usb 1-1: config 0 descriptor?? [ 284.059746][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.684'. [ 284.288095][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.292262][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.677484][ T7238] hfsplus: unable to find HFS+ superblock [ 286.603168][ T7260] loop2: detected capacity change from 0 to 512 [ 286.630335][ T7260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.667360][ T7260] EXT4-fs (loop2): 1 truncate cleaned up [ 286.672249][ T4347] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input3 [ 286.675533][ T7260] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 286.695109][ T4347] uclogic 0003:256C:006D.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 287.468835][ T7265] loop5: detected capacity change from 0 to 256 [ 287.489011][ T7265] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 287.490668][ T4347] usb 1-1: USB disconnect, device number 7 [ 289.143990][ T7279] fido_id[7279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 291.145023][ T7318] hfsplus: unable to find HFS+ superblock [ 291.685314][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 292.273012][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.292294][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.540471][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 292.545927][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.687800][ T7331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.928420][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.935134][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.174687][ T7348] bridge0: port 3(netdevsim0) entered blocking state [ 293.177001][ T7348] bridge0: port 3(netdevsim0) entered disabled state [ 293.179544][ T7348] device netdevsim0 entered promiscuous mode [ 293.181540][ T7348] bridge0: port 3(netdevsim0) entered blocking state [ 293.183416][ T7348] bridge0: port 3(netdevsim0) entered forwarding state [ 293.190042][ T7347] ALSA: mixer_oss: invalid OSS volume '' [ 293.292135][ T7352] loop0: detected capacity change from 0 to 1024 [ 293.321081][ T7352] EXT4-fs: Ignoring removed nobh option [ 293.330218][ T7352] EXT4-fs: Ignoring removed bh option [ 293.360662][ T7352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.441130][ T7352] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.712: Allocating blocks 385-513 which overlap fs metadata [ 293.506800][ T7352] EXT4-fs (loop0): pa 00000000dbbc43b3: logic 16, phys. 129, len 24 [ 293.509407][ T7352] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 6 [ 293.530955][ T7360] loop5: detected capacity change from 0 to 512 [ 293.548194][ T7360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 293.593177][ T4303] EXT4-fs (loop0): unmounting filesystem. [ 293.596522][ T7360] EXT4-fs (loop5): 1 truncate cleaned up [ 293.598191][ T7360] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 294.725332][ T7375] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 294.750523][ T7375] syzkaller0: ignored: set checksum disabled [ 294.844843][ T7381] loop2: detected capacity change from 0 to 512 [ 295.030134][ T7381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 295.071208][ T6040] EXT4-fs (loop5): unmounting filesystem. [ 295.352485][ T7391] bridge0: port 3(netdevsim0) entered blocking state [ 295.354541][ T7391] bridge0: port 3(netdevsim0) entered disabled state [ 295.358223][ T7391] device netdevsim0 entered promiscuous mode [ 295.360915][ T7391] bridge0: port 3(netdevsim0) entered blocking state [ 295.362896][ T7391] bridge0: port 3(netdevsim0) entered forwarding state [ 295.369141][ T7390] ALSA: mixer_oss: invalid OSS volume '' [ 295.497677][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 297.975152][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 297.975165][ T27] audit: type=1326 audit(297.940:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 297.993558][ T27] audit: type=1326 audit(297.940:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 298.041872][ T27] audit: type=1326 audit(297.940:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 298.080104][ T27] audit: type=1326 audit(297.940:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 298.130494][ T27] audit: type=1326 audit(297.940:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 298.165786][ T27] audit: type=1326 audit(297.940:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 298.257471][ T27] audit: type=1326 audit(297.940:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 298.263937][ T27] audit: type=1326 audit(297.940:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 298.270059][ T27] audit: type=1326 audit(297.940:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 298.276207][ T27] audit: type=1326 audit(297.940:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8175a8a8 code=0x7ffc0000 [ 299.073512][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.103068][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.583637][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 299.778970][ T7448] bridge0: port 3(netdevsim0) entered blocking state [ 299.780931][ T7448] bridge0: port 3(netdevsim0) entered disabled state [ 299.783522][ T7448] device netdevsim0 entered promiscuous mode [ 299.785733][ T7448] bridge0: port 3(netdevsim0) entered blocking state [ 299.787644][ T7448] bridge0: port 3(netdevsim0) entered forwarding state [ 299.793731][ T7447] ALSA: mixer_oss: invalid OSS volume '' [ 300.929930][ T7471] tipc: Failed to remove unknown binding: 66,1,1/0:1412023027/1412023029 [ 300.932748][ T7471] tipc: Failed to remove unknown binding: 66,1,1/0:1412023027/1412023029 [ 300.971727][ T7475] loop5: detected capacity change from 0 to 512 [ 300.994564][ T7475] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 301.029436][ T7475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 301.031905][ T7475] System zones: 1-12 [ 301.046659][ T7475] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.742: corrupted in-inode xattr [ 301.050752][ T7475] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.742: couldn't read orphan inode 15 (err -117) [ 301.084782][ T7475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 301.154974][ T7475] futex_wake_op: syz.5.742 tries to shift op by -1; fix this program [ 302.122260][ T6040] EXT4-fs (loop5): unmounting filesystem. [ 302.481857][ T7504] loop3: detected capacity change from 0 to 512 [ 302.502908][ T7504] EXT4-fs: Ignoring removed nobh option [ 302.555610][ T7504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.721459][ T7504] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.747: invalid indirect mapped block 256 (level 2) [ 304.002909][ T7508] bridge0: port 3(netdevsim0) entered blocking state [ 304.004984][ T7508] bridge0: port 3(netdevsim0) entered disabled state [ 304.007658][ T7508] device netdevsim0 entered promiscuous mode [ 304.009716][ T7508] bridge0: port 3(netdevsim0) entered blocking state [ 304.011625][ T7508] bridge0: port 3(netdevsim0) entered forwarding state [ 304.017863][ T7505] ALSA: mixer_oss: invalid OSS volume '' [ 304.044471][ T7504] EXT4-fs (loop3): 2 truncates cleaned up [ 304.046185][ T7504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 305.069242][ T7532] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.747: bg 0: block 5: invalid block bitmap [ 306.301029][ T7543] loop5: detected capacity change from 0 to 512 [ 306.729843][ T7532] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 306.733606][ T7532] EXT4-fs (loop3): This should not happen!! Data will be lost [ 306.733606][ T7532] [ 306.736380][ T7532] EXT4-fs (loop3): Total free blocks count 0 [ 306.738079][ T7532] EXT4-fs (loop3): Free/Dirty block details [ 306.739730][ T7532] EXT4-fs (loop3): free_blocks=0 [ 306.741155][ T7532] EXT4-fs (loop3): dirty_blocks=2 [ 306.742534][ T7532] EXT4-fs (loop3): Block reservation details [ 306.744345][ T7532] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 306.827541][ T7543] EXT4-fs: Ignoring removed i_version option [ 306.835646][ T7543] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.772077][ T7543] ext4: Unknown parameter 'seclabel' [ 307.781042][ T7546] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 307.842430][ T7548] 8021q: VLANs not supported on lo [ 308.044600][ T5862] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.098620][ T7554] loop6: detected capacity change from 0 to 2048 [ 308.218029][ T7554] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 308.435464][ T7567] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 308.734317][ T7565] ALSA: mixer_oss: invalid OSS volume '' [ 308.868493][ T7578] loop2: detected capacity change from 0 to 256 [ 308.888643][ T7578] FAT-fs (loop2): Directory bread(block 64) failed [ 308.890503][ T7578] FAT-fs (loop2): Directory bread(block 65) failed [ 308.892433][ T7578] FAT-fs (loop2): Directory bread(block 66) failed [ 308.894242][ T7578] FAT-fs (loop2): Directory bread(block 67) failed [ 308.896089][ T7578] FAT-fs (loop2): Directory bread(block 68) failed [ 308.897877][ T7578] FAT-fs (loop2): Directory bread(block 69) failed [ 308.899731][ T7578] FAT-fs (loop2): Directory bread(block 70) failed [ 308.901588][ T7578] FAT-fs (loop2): Directory bread(block 71) failed [ 308.903434][ T7578] FAT-fs (loop2): Directory bread(block 72) failed [ 308.905334][ T7578] FAT-fs (loop2): Directory bread(block 73) failed [ 310.034194][ T6195] EXT4-fs (loop6): unmounting filesystem. [ 311.216315][ T7612] binder: 7611:7612 tried to acquire reference to desc 0, got 1 instead [ 311.239869][ T1515] binder: release 7611:7612 transaction 5 out, still active [ 311.242325][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 311.282893][ T4425] binder: send failed reply for transaction 5, target dead [ 311.363055][ T7615] binder: 7614:7615 tried to acquire reference to desc 0, got 1 instead [ 311.413432][ T7615] binder: 7614:7615 got new transaction with bad transaction stack, transaction 10 has target 7614:0 [ 311.432174][ T7615] binder: 7614:7615 transaction call to 7614:0 failed 11/29201/-71, size 0-0 line 3114 [ 311.608214][ T4347] binder: release 7614:7615 transaction 10 out, still active [ 311.610491][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 311.613172][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.027353][ T7622] loop6: detected capacity change from 0 to 256 [ 312.269396][ T4425] binder: send failed reply for transaction 10, target dead [ 312.537896][ T7622] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 313.102048][ T7627] loop3: detected capacity change from 0 to 2048 [ 313.236889][ T7627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 313.263828][ T4345] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 313.327809][ T7618] ALSA: mixer_oss: invalid OSS volume '' [ 313.357706][ T7627] fs-verity: sha512 using implementation "sha512-arm64" [ 313.586293][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 314.704902][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.707677][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.785417][ T169] Bluetooth: hci4: Frame reassembly failed (-84) [ 314.840382][ T7674] loop3: detected capacity change from 0 to 256 [ 314.852971][ T7674] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.877748][ T7646] loop0: detected capacity change from 0 to 40427 [ 314.988082][ T7646] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value [ 315.050795][ T5842] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.440480][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.453018][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.191075][ T47] Bluetooth: hci4: command 0x1003 tx timeout [ 317.243919][ T4308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 317.526589][ T4308] Bluetooth: hci5: command 0x0406 tx timeout [ 318.199704][ T7716] loop6: detected capacity change from 0 to 512 [ 318.225228][ T7716] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 318.255010][ T7716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 318.257400][ T7716] System zones: 1-12 [ 318.262766][ T7716] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.795: corrupted in-inode xattr [ 318.876779][ T7716] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.795: couldn't read orphan inode 15 (err -117) [ 318.922352][ T7716] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 319.064926][ T7716] futex_wake_op: syz.6.795 tries to shift op by -1; fix this program [ 319.909493][ T7736] loop3: detected capacity change from 0 to 512 [ 319.928121][ T6195] EXT4-fs (loop6): unmounting filesystem. [ 320.318871][ T7736] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 320.336522][ T7736] EXT4-fs (loop3): mount failed [ 320.808504][ T7755] loop0: detected capacity change from 0 to 2048 [ 320.913732][ T7755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 321.049961][ T4303] EXT4-fs (loop0): unmounting filesystem. [ 321.461032][ T7766] loop3: detected capacity change from 0 to 256 [ 321.516250][ T7749] ALSA: mixer_oss: invalid OSS volume '' [ 321.518699][ T7766] FAT-fs (loop3): Directory bread(block 64) failed [ 321.528284][ T7766] FAT-fs (loop3): Directory bread(block 65) failed [ 321.530136][ T7766] FAT-fs (loop3): Directory bread(block 66) failed [ 321.540080][ T7766] FAT-fs (loop3): Directory bread(block 67) failed [ 321.542055][ T7766] FAT-fs (loop3): Directory bread(block 68) failed [ 321.565726][ T7766] FAT-fs (loop3): Directory bread(block 69) failed [ 321.570993][ T7766] FAT-fs (loop3): Directory bread(block 70) failed [ 321.572907][ T7766] FAT-fs (loop3): Directory bread(block 71) failed [ 321.589730][ T7766] FAT-fs (loop3): Directory bread(block 72) failed [ 321.591772][ T7766] FAT-fs (loop3): Directory bread(block 73) failed [ 322.068443][ T7769] 9pnet_fd: Insufficient options for proto=fd [ 322.580941][ T7774] loop6: detected capacity change from 0 to 256 [ 326.117160][ T7824] loop2: detected capacity change from 0 to 512 [ 326.120202][ T7824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 326.171503][ T7824] EXT4-fs (loop2): 1 truncate cleaned up [ 326.173166][ T7824] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 326.564198][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 327.528765][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.537889][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.578098][ T7831] ALSA: mixer_oss: invalid OSS volume '' [ 328.174608][ T7866] loop3: detected capacity change from 0 to 512 [ 328.182939][ T7866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 328.236198][ T7866] EXT4-fs (loop3): 1 truncate cleaned up [ 328.238097][ T7866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 329.267304][ T4297] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /176/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 329.349154][ T4297] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 329.379251][ T4297] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /176/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 329.391291][ T7884] loop6: detected capacity change from 0 to 512 [ 329.418340][ T4297] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 329.425082][ T7884] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 329.438894][ T7889] loop5: detected capacity change from 0 to 512 [ 329.446340][ T4297] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /176/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 329.462057][ T7889] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 329.465893][ T7884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 329.468324][ T7884] System zones: 1-12 [ 329.497222][ T7889] EXT4-fs (loop5): 1 truncate cleaned up [ 329.498993][ T7889] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 329.502903][ T4297] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 329.509361][ T7884] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.826: corrupted in-inode xattr [ 329.520269][ T7884] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.826: couldn't read orphan inode 15 (err -117) [ 329.525399][ T4297] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /176/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 329.541543][ T4297] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 329.569321][ T4297] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /176/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 329.578870][ T7884] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 329.600324][ T7884] futex_wake_op: syz.6.826 tries to shift op by -1; fix this program [ 329.620159][ T4297] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 329.918070][ T6040] EXT4-fs (loop5): unmounting filesystem. [ 330.528250][ T6195] EXT4-fs (loop6): unmounting filesystem. [ 330.662975][ T5956] EXT4-fs (loop3): unmounting filesystem. [ 331.523869][ C1] ------------[ cut here ]------------ [ 331.525753][ C1] refcount_t: addition on 0; use-after-free. [ 331.527721][ C1] WARNING: CPU: 1 PID: 4294 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 331.530324][ C1] Modules linked in: [ 331.531342][ C1] CPU: 1 PID: 4294 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 331.533600][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.536303][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 331.538489][ C1] pc : refcount_warn_saturate+0x134/0x1f8 [ 331.540083][ C1] lr : refcount_warn_saturate+0x134/0x1f8 [ 331.541619][ C1] sp : ffff8000080178c0 [ 331.542751][ C1] x29: ffff8000080178c0 x28: ffff0000f3e6bc00 x27: ffff0000c4a9c408 [ 331.544967][ C1] x26: ffff0000dc95b4f0 x25: dfff800000000000 x24: 1fffe00018953881 [ 331.547134][ C1] x23: ffff0000f4aec000 x22: ffff0000cd161d94 x21: ffff0000d15a2880 [ 331.549346][ C1] x20: ffff0000cd161d94 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 331.551599][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 331.553876][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 331.556136][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 00e91b1be8dec500 [ 331.558444][ C1] x8 : 00e91b1be8dec500 x7 : 0000000000000001 x6 : 0000000000000001 [ 331.560596][ C1] x5 : ffff800008017358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 331.562841][ C1] x2 : 0000000000000001 x1 : 0000000100000102 x0 : 0000000000000000 [ 331.565033][ C1] Call trace: [ 331.565941][ C1] refcount_warn_saturate+0x134/0x1f8 [ 331.567459][ C1] tipc_crypto_xmit+0x1518/0x2014 [ 331.568887][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 331.570344][ C1] tipc_disc_timeout+0x4c8/0x608 [ 331.571705][ C1] call_timer_fn+0x1b8/0x964 [ 331.573043][ C1] __run_timers+0x460/0x6bc [ 331.574648][ C1] run_timer_softirq+0x7c/0x114 [ 331.576040][ C1] handle_softirqs+0x318/0xc6c [ 331.577379][ C1] __do_softirq+0x14/0x20 [ 331.578565][ C1] ____do_softirq+0x14/0x20 [ 331.579828][ C1] call_on_irq_stack+0x24/0x4c [ 331.581119][ C1] do_softirq_own_stack+0x20/0x2c [ 331.582518][ C1] __irq_exit_rcu+0x23c/0x43c [ 331.583887][ C1] irq_exit_rcu+0x14/0x84 [ 331.585061][ C1] el1_interrupt+0x38/0x54 [ 331.586256][ C1] el1h_64_irq_handler+0x18/0x24 [ 331.587610][ C1] el1h_64_irq+0x64/0x68 [ 331.588763][ C1] do_raw_spin_trylock+0x150/0x1e8 [ 331.590127][ C1] _raw_spin_trylock+0x28/0xbc [ 331.591383][ C1] free_unref_page+0x16c/0x3a0 [ 331.592647][ C1] __free_pages+0x1a4/0x1d0 [ 331.593899][ C1] __vunmap+0x81c/0x9f0 [ 331.595038][ C1] vfree+0xbc/0x150 [ 331.596077][ C1] kcov_close+0x3c/0x98 [ 331.597226][ C1] __fput+0x1bc/0x7c0 [ 331.598365][ C1] ____fput+0x20/0x30 [ 331.599558][ C1] task_work_run+0x1ec/0x270 [ 331.600847][ C1] do_exit+0x544/0x19a8 [ 331.601966][ C1] do_group_exit+0x194/0x22c [ 331.603219][ C1] __wake_up_parent+0x0/0x60 [ 331.604447][ C1] invoke_syscall+0x98/0x2bc [ 331.605681][ C1] el0_svc_common+0x138/0x258 [ 331.607007][ C1] do_el0_svc+0x58/0x13c [ 331.608187][ C1] el0_svc+0x58/0x138 [ 331.609245][ C1] el0t_64_sync_handler+0x84/0xf0 [ 331.610614][ C1] el0t_64_sync+0x18c/0x190 [ 331.611826][ C1] irq event stamp: 20907 [ 331.612998][ C1] hardirqs last enabled at (20906): [] __up_console_sem+0xb4/0x100 [ 331.615525][ C1] hardirqs last disabled at (20907): [] el1_dbg+0x24/0x80 [ 331.617831][ C1] softirqs last enabled at (15140): [] handle_softirqs+0xaf8/0xc6c [ 331.620374][ C1] softirqs last disabled at (20855): [] __do_softirq+0x14/0x20 [ 331.622852][ C1] ---[ end trace 0000000000000000 ]--- [ 331.624442][ C1] ------------[ cut here ]------------ [ 331.625915][ C1] refcount_t: underflow; use-after-free. [ 331.627724][ C1] WARNING: CPU: 1 PID: 4294 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 331.630215][ C1] Modules linked in: [ 331.631316][ C1] CPU: 1 PID: 4294 Comm: syz-executor Tainted: G W 6.1.141-syzkaller #0 [ 331.633787][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.636516][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 331.638606][ C1] pc : refcount_warn_saturate+0x154/0x1f8 [ 331.640188][ C1] lr : refcount_warn_saturate+0x154/0x1f8 [ 331.641699][ C1] sp : ffff8000080178c0 [ 331.642810][ C1] x29: ffff8000080178c0 x28: ffff0000f3e6bc00 x27: 0000000000000000 [ 331.644991][ C1] x26: ffff0000dc95b4f0 x25: dfff800000000000 x24: 1fffe0001b92b6a8 [ 331.647132][ C1] x23: 1fffe0001a6a4379 x22: ffff0000c4a9c400 x21: 00000000c0000000 [ 331.649305][ C1] x20: ffff0000cd161d94 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 331.651570][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 331.653836][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 331.655982][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 00e91b1be8dec500 [ 331.658185][ C1] x8 : 00e91b1be8dec500 x7 : 0000000000000001 x6 : 0000000000000001 [ 331.660401][ C1] x5 : ffff800008017358 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 331.662590][ C1] x2 : 0000000000000001 x1 : 0000000000000102 x0 : 0000000000000000 [ 331.664827][ C1] Call trace: [ 331.665707][ C1] refcount_warn_saturate+0x154/0x1f8 [ 331.667146][ C1] tipc_crypto_xmit+0x1664/0x2014 [ 331.668553][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 331.670016][ C1] tipc_disc_timeout+0x4c8/0x608 [ 331.671392][ C1] call_timer_fn+0x1b8/0x964 [ 331.672657][ C1] __run_timers+0x460/0x6bc [ 331.673869][ C1] run_timer_softirq+0x7c/0x114 [ 331.675179][ C1] handle_softirqs+0x318/0xc6c [ 331.676437][ C1] __do_softirq+0x14/0x20 [ 331.677586][ C1] ____do_softirq+0x14/0x20 [ 331.678785][ C1] call_on_irq_stack+0x24/0x4c [ 331.680103][ C1] do_softirq_own_stack+0x20/0x2c [ 331.681510][ C1] __irq_exit_rcu+0x23c/0x43c [ 331.682830][ C1] irq_exit_rcu+0x14/0x84 [ 331.683978][ C1] el1_interrupt+0x38/0x54 [ 331.685183][ C1] el1h_64_irq_handler+0x18/0x24 [ 331.686520][ C1] el1h_64_irq+0x64/0x68 [ 331.687682][ C1] do_raw_spin_trylock+0x150/0x1e8 [ 331.689079][ C1] _raw_spin_trylock+0x28/0xbc [ 331.690459][ C1] free_unref_page+0x16c/0x3a0 [ 331.691791][ C1] __free_pages+0x1a4/0x1d0 [ 331.692970][ C1] __vunmap+0x81c/0x9f0 [ 331.694052][ C1] vfree+0xbc/0x150 [ 331.695086][ C1] kcov_close+0x3c/0x98 [ 331.696250][ C1] __fput+0x1bc/0x7c0 [ 331.697341][ C1] ____fput+0x20/0x30 [ 331.698478][ C1] task_work_run+0x1ec/0x270 [ 331.699720][ C1] do_exit+0x544/0x19a8 [ 331.700838][ C1] do_group_exit+0x194/0x22c [ 331.702078][ C1] __wake_up_parent+0x0/0x60 [ 331.703275][ C1] invoke_syscall+0x98/0x2bc [ 331.704626][ C1] el0_svc_common+0x138/0x258 [ 331.705923][ C1] do_el0_svc+0x58/0x13c [ 331.707080][ C1] el0_svc+0x58/0x138 [ 331.708165][ C1] el0t_64_sync_handler+0x84/0xf0 [ 331.709575][ C1] el0t_64_sync+0x18c/0x190 [ 331.710881][ C1] irq event stamp: 20939 [ 331.712049][ C1] hardirqs last enabled at (20938): [] __up_console_sem+0xb4/0x100 [ 331.714692][ C1] hardirqs last disabled at (20939): [] el1_dbg+0x24/0x80 [ 331.717033][ C1] softirqs last enabled at (15140): [] handle_softirqs+0xaf8/0xc6c [ 331.719683][ C1] softirqs last disabled at (20855): [] __do_softirq+0x14/0x20 [ 331.722160][ C1] ---[ end trace 0000000000000000 ]--- [ 331.724087][ C1] ------------[ cut here ]------------ [ 331.725524][ C1] refcount_t: saturated; leaking memory. [ 331.727266][ C1] WARNING: CPU: 1 PID: 4294 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 331.729782][ C1] Modules linked in: [ 331.730927][ C1] CPU: 1 PID: 4294 Comm: syz-executor Tainted: G W 6.1.141-syzkaller #0 [ 331.733481][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.736315][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 331.738467][ C1] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 331.740096][ C1] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 331.741648][ C1] sp : ffff8000080178c0 [ 331.742830][ C1] x29: ffff8000080178c0 x28: ffff0000f3e68000 x27: ffff0000c4a9c408 [ 331.745165][ C1] x26: ffff0000dc95aff0 x25: dfff800000000000 x24: 1fffe00018953881 [ 331.747335][ C1] x23: ffff0000f4aeec00 x22: ffff0000cd161d94 x21: 000000007ffffffe [ 331.749573][ C1] x20: ffff0000cd161d94 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 331.751778][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 331.753920][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 331.756113][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 00e91b1be8dec500 [ 331.758251][ C1] x8 : 00e91b1be8dec500 x7 : 0000000000000001 x6 : 0000000000000001 [ 331.760542][ C1] x5 : ffff800008017358 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 331.762720][ C1] x2 : 0000000000000001 x1 : 0000000000000102 x0 : 0000000000000000 [ 331.765006][ C1] Call trace: [ 331.765899][ C1] refcount_warn_saturate+0x1b4/0x1f8 [ 331.767375][ C1] tipc_crypto_xmit+0x1518/0x2014 [ 331.768958][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 331.770420][ C1] tipc_disc_timeout+0x4c8/0x608 [ 331.771807][ C1] call_timer_fn+0x1b8/0x964 [ 331.773059][ C1] __run_timers+0x460/0x6bc [ 331.774397][ C1] run_timer_softirq+0x7c/0x114 [ 331.775775][ C1] handle_softirqs+0x318/0xc6c [ 331.777119][ C1] __do_softirq+0x14/0x20 [ 331.778377][ C1] ____do_softirq+0x14/0x20 [ 331.779594][ C1] call_on_irq_stack+0x24/0x4c [ 331.780896][ C1] do_softirq_own_stack+0x20/0x2c [ 331.782249][ C1] __irq_exit_rcu+0x23c/0x43c [ 331.783572][ C1] irq_exit_rcu+0x14/0x84 [ 331.784793][ C1] el1_interrupt+0x38/0x54 [ 331.786027][ C1] el1h_64_irq_handler+0x18/0x24 [ 331.787373][ C1] el1h_64_irq+0x64/0x68 [ 331.788537][ C1] do_raw_spin_trylock+0x150/0x1e8 [ 331.789949][ C1] _raw_spin_trylock+0x28/0xbc [ 331.791245][ C1] free_unref_page+0x16c/0x3a0 [ 331.792578][ C1] __free_pages+0x1a4/0x1d0 [ 331.793847][ C1] __vunmap+0x81c/0x9f0 [ 331.794971][ C1] vfree+0xbc/0x150 [ 331.795995][ C1] kcov_close+0x3c/0x98 [ 331.797191][ C1] __fput+0x1bc/0x7c0 [ 331.798305][ C1] ____fput+0x20/0x30 [ 331.799427][ C1] task_work_run+0x1ec/0x270 [ 331.800760][ C1] do_exit+0x544/0x19a8 [ 331.801894][ C1] do_group_exit+0x194/0x22c [ 331.803185][ C1] __wake_up_parent+0x0/0x60 [ 331.804505][ C1] invoke_syscall+0x98/0x2bc [ 331.805762][ C1] el0_svc_common+0x138/0x258 [ 331.807108][ C1] do_el0_svc+0x58/0x13c [ 331.808300][ C1] el0_svc+0x58/0x138 [ 331.809485][ C1] el0t_64_sync_handler+0x84/0xf0 [ 331.810855][ C1] el0t_64_sync+0x18c/0x190 [ 331.812108][ C1] irq event stamp: 21055 [ 331.813295][ C1] hardirqs last enabled at (21054): [] __up_console_sem+0xb4/0x100 [ 331.815937][ C1] hardirqs last disabled at (21055): [] el1_dbg+0x24/0x80 [ 331.818340][ C1] softirqs last enabled at (15140): [] handle_softirqs+0xaf8/0xc6c [ 331.820968][ C1] softirqs last disabled at (20855): [] __do_softirq+0x14/0x20 [ 331.823556][ C1] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.014329][ T7546] ------------[ cut here ]------------ [ 332.016152][ T7546] refcount_t: saturated; leaking memory. [ 332.017914][ T7546] WARNING: CPU: 0 PID: 7546 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8 [ 332.020563][ T7546] Modules linked in: [ 332.021647][ T7546] CPU: 0 PID: 7546 Comm: kworker/u4:19 Tainted: G W 6.1.141-syzkaller #0 [ 332.024473][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.027391][ T7546] Workqueue: netns cleanup_net [ 332.028747][ T7546] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 332.030947][ T7546] pc : refcount_warn_saturate+0x174/0x1f8 [ 332.032608][ T7546] lr : refcount_warn_saturate+0x174/0x1f8 [ 332.034225][ T7546] sp : ffff800021167280 [ 332.035380][ T7546] x29: ffff800021167280 x28: 1ffff0000422ce58 x27: dfff800000000000 [ 332.037650][ T7546] x26: 00000000c0000000 x25: 00000000c0000000 x24: ffff0000cd161d94 [ 332.039882][ T7546] x23: 0000000000000046 x22: 0000000000000cc0 x21: 000000007ffffffe [ 332.042106][ T7546] x20: ffff0000cd161d94 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 332.044398][ T7546] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 332.046644][ T7546] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 332.049003][ T7546] x11: ff0080000819149c x10: 0000000000000000 x9 : 4dc734c5a745c100 [ 332.051303][ T7546] x8 : 4dc734c5a745c100 x7 : 0000000000000001 x6 : 0000000000000001 [ 332.053596][ T7546] x5 : ffff800021166d18 x4 : ffff800015154700 x3 : ffff80000852da40 [ 332.055848][ T7546] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 332.058077][ T7546] Call trace: [ 332.059004][ T7546] refcount_warn_saturate+0x174/0x1f8 [ 332.060516][ T7546] nf_nat_masq_schedule+0x478/0x54c [ 332.061998][ T7546] masq_device_event+0x9c/0xe0 [ 332.063338][ T7546] raw_notifier_call_chain+0xd4/0x164 [ 332.064855][ T7546] dev_close_many+0x2cc/0x440 [ 332.066205][ T7546] unregister_netdevice_many+0x3c4/0x1740 [ 332.067834][ T7546] unregister_netdevice_queue+0x2ac/0x2f8 [ 332.069477][ T7546] nsim_destroy+0x58/0x164 [ 332.070765][ T7546] __nsim_dev_port_del+0x144/0x1a4 [ 332.072333][ T7546] nsim_dev_reload_destroy+0x240/0x43c [ 332.073900][ T7546] nsim_dev_reload_down+0x9c/0xd4 [ 332.075297][ T7546] devlink_reload+0x1b4/0x570 [ 332.076541][ T7546] devlink_pernet_pre_exit+0x118/0x2a8 [ 332.078089][ T7546] cleanup_net+0x470/0xa74 [ 332.079420][ T7546] process_one_work+0x7f4/0x13a8 [ 332.080782][ T7546] worker_thread+0x8c8/0xfbc [ 332.082077][ T7546] kthread+0x250/0x2d8 [ 332.083232][ T7546] ret_from_fork+0x10/0x20 [ 332.084448][ T7546] irq event stamp: 407226 [ 332.085641][ T7546] hardirqs last enabled at (407225): [] __up_console_sem+0xb4/0x100 [ 332.088569][ T7546] hardirqs last disabled at (407226): [] el1_dbg+0x24/0x80 [ 332.091482][ T7546] softirqs last enabled at (407204): [] pppoe_device_event+0x48c/0x4bc [ 332.094563][ T7546] softirqs last disabled at (407202): [] pppoe_device_event+0xdc/0x4bc [ 332.097498][ T7546] ---[ end trace 0000000000000000 ]--- [ 332.241429][ T4308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.246655][ T4308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.249745][ T4308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.252571][ T4308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.258780][ T7546] ------------[ cut here ]------------ [ 332.260264][ T7546] WARNING: CPU: 1 PID: 7546 at lib/ref_tracker.c:77 ref_tracker_alloc+0x230/0x3cc [ 332.262938][ T7546] Modules linked in: [ 332.264056][ T7546] CPU: 1 PID: 7546 Comm: kworker/u4:19 Tainted: G W 6.1.141-syzkaller #0 [ 332.266926][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.269807][ T7546] Workqueue: netns cleanup_net [ 332.271095][ T7546] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 332.273267][ T7546] pc : ref_tracker_alloc+0x230/0x3cc [ 332.274667][ T7546] lr : ref_tracker_alloc+0x230/0x3cc [ 332.276112][ T7546] sp : ffff800021167160 [ 332.277253][ T7546] x29: ffff800021167240 x28: 1ffff0000422ce58 x27: dfff800000000000 [ 332.279462][ T7546] x26: dfff800000000000 x25: ffff70000422ce2c x24: ffff0001ffa76f88 [ 332.281740][ T7546] x23: ffff800021167160 x22: ffff0000cd161de4 x21: ffff0001ffa76fd0 [ 332.283941][ T7546] x20: 0000000000000cc0 x19: ffff0000cd161d98 x18: ffff800011a7bce0 [ 332.286180][ T7546] x17: ffff8000181a1000 x16: ffff8000082d1c00 x15: ffff800010a233ec [ 332.288438][ T7546] x14: ffff80000d4f3814 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 332.290715][ T7546] x11: ff0080000aa23d44 x10: 0000000000000000 x9 : ffff80000aa23d44 [ 332.292951][ T7546] x8 : ffff0000d0c48000 x7 : 0000000000000000 x6 : 000000000000003f [ 332.295129][ T7546] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 332.297251][ T7546] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800021167180 [ 332.299482][ T7546] Call trace: [ 332.300450][ T7546] ref_tracker_alloc+0x230/0x3cc [ 332.301953][ T7546] nf_nat_masq_schedule+0x328/0x54c [ 332.303439][ T7546] masq_device_event+0x9c/0xe0 [ 332.304751][ T7546] raw_notifier_call_chain+0xd4/0x164 [ 332.306251][ T7546] dev_close_many+0x2cc/0x440 [ 332.307536][ T7546] unregister_netdevice_many+0x3c4/0x1740 [ 332.309109][ T7546] unregister_netdevice_queue+0x2ac/0x2f8 [ 332.310669][ T7546] nsim_destroy+0x58/0x164 [ 332.311944][ T7546] __nsim_dev_port_del+0x144/0x1a4 [ 332.313370][ T7546] nsim_dev_reload_destroy+0x240/0x43c [ 332.314912][ T7546] nsim_dev_reload_down+0x9c/0xd4 [ 332.316356][ T7546] devlink_reload+0x1b4/0x570 [ 332.317643][ T7546] devlink_pernet_pre_exit+0x118/0x2a8 [ 332.319176][ T7546] cleanup_net+0x470/0xa74 [ 332.320418][ T7546] process_one_work+0x7f4/0x13a8 [ 332.321773][ T7546] worker_thread+0x8c8/0xfbc [ 332.323041][ T7546] kthread+0x250/0x2d8 [ 332.324230][ T7546] ret_from_fork+0x10/0x20 [ 332.325521][ T7546] irq event stamp: 407406 [ 332.326742][ T7546] hardirqs last enabled at (407405): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 332.329660][ T7546] hardirqs last disabled at (407406): [] el1_dbg+0x24/0x80 [ 332.332063][ T7546] softirqs last enabled at (407388): [] handle_softirqs+0xaf8/0xc6c [ 332.334761][ T7546] softirqs last disabled at (407231): [] __do_softirq+0x14/0x20 [ 332.337296][ T7546] ---[ end trace 0000000000000000 ]--- [ 332.344144][ T4308] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.347520][ T4308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.366333][ T4287] ------------[ cut here ]------------ [ 332.368069][ T4287] WARNING: CPU: 1 PID: 4287 at lib/ref_tracker.c:110 ref_tracker_free+0x484/0x694 [ 332.370591][ T4287] Modules linked in: [ 332.371600][ T4287] CPU: 1 PID: 4287 Comm: kworker/1:3 Tainted: G W 6.1.141-syzkaller #0 [ 332.374299][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.377413][ T4287] Workqueue: events iterate_cleanup_work [ 332.379097][ T4287] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 332.381466][ T4287] pc : ref_tracker_free+0x484/0x694 [ 332.382968][ T4287] lr : ref_tracker_free+0x484/0x694 [ 332.384433][ T4287] sp : ffff800020687940 [ 332.385595][ T4287] x29: ffff800020687a40 x28: ffff00019f750800 x27: ffff0001ffa76f80 [ 332.387830][ T4287] x26: dfff800000000000 x25: ffff7000040d0f2c x24: ffff800020687aa0 [ 332.390023][ T4287] x23: ffff7000040d0f54 x22: ffff800020687960 x21: ffff0000cd161de4 [ 332.392352][ T4287] x20: ffff0001ffa76fd0 x19: ffff0000cd161d98 x18: ffff800011a7bce0 [ 332.394623][ T4287] x17: ffff8000181a1000 x16: ffff8000082d0750 x15: ffff800017c81fc0 [ 332.396944][ T4287] x14: ffff0000d0c48a98 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 332.399171][ T4287] x11: ff0080000aa2441c x10: 0000000000000000 x9 : ffff80000aa2441c [ 332.401477][ T4287] x8 : ffff0000d4339bc0 x7 : 0000000000000000 x6 : 000000000000003f [ 332.403764][ T4287] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 332.406089][ T4287] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800020687980 [ 332.408441][ T4287] Call trace: [ 332.409389][ T4287] ref_tracker_free+0x484/0x694 [ 332.410839][ T4287] iterate_cleanup_work+0xe8/0x230 [ 332.412311][ T4287] process_one_work+0x7f4/0x13a8 [ 332.413715][ T4287] worker_thread+0x8c8/0xfbc [ 332.415015][ T4287] kthread+0x250/0x2d8 [ 332.416187][ T4287] ret_from_fork+0x10/0x20 [ 332.417511][ T4287] irq event stamp: 140876 [ 332.418749][ T4287] hardirqs last enabled at (140875): [] __local_bh_enable_ip+0x1f8/0x380 [ 332.421654][ T4287] hardirqs last disabled at (140876): [] el1_dbg+0x24/0x80 [ 332.424270][ T4287] softirqs last enabled at (140874): [] local_bh_enable+0x10/0x34 [ 332.426951][ T4287] softirqs last disabled at (140872): [] local_bh_disable+0x10/0x34 [ 332.429807][ T4287] ---[ end trace 0000000000000000 ]--- [ 332.493680][ T7546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.688165][ T7546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.829404][ T7546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.038197][ T7546] bridge0: port 3(netdevsim0) entered disabled state [ 333.125604][ T7546] device netdevsim0 left promiscuous mode [ 333.128162][ T7546] bridge0: port 3(netdevsim0) entered disabled state [ 333.175420][ T7546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.210090][ T7940] chnl_net:caif_netlink_parms(): no params data found [ 333.318468][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.320511][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.323164][ T7940] device bridge_slave_0 entered promiscuous mode [ 333.377294][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.379370][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.382067][ T7940] device bridge_slave_1 entered promiscuous mode [ 333.416363][ T7940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.421257][ T7940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.447382][ T7940] team0: Port device team_slave_0 added [ 333.450771][ T7940] team0: Port device team_slave_1 added [ 333.476537][ T7940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.478619][ T7940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.490500][ T7940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.495181][ T7546] tipc: Disabling bearer [ 333.499029][ T7546] tipc: Disabling bearer [ 333.500724][ T7546] tipc: Left network mode [ 333.503045][ T7940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.509406][ T7940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.516899][ T7940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.607877][ T7940] device hsr_slave_0 entered promiscuous mode [ 333.634433][ T7940] device hsr_slave_1 entered promiscuous mode [ 333.654150][ T7940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.656390][ T7940] Cannot create hsr debugfs directory [ 334.011121][ T7940] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.098304][ T7940] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 334.125855][ T7940] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 334.207402][ T7940] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 334.341524][ T7940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.352582][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.356784][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.403977][ T4308] Bluetooth: hci1: command 0x0409 tx timeout [ 334.419556][ T7940] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.436561][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.439514][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.442155][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.444209][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.447648][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.451986][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.456227][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.458961][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.460946][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.547255][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.550218][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.553072][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.558584][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.561388][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.571596][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.582779][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.655132][ T7940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.658411][ T7940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.664684][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.667651][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.670642][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.673496][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.677196][ T169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.833750][ T7940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.841640][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.844671][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.250074][ T7546] device hsr_slave_0 left promiscuous mode [ 335.274105][ T7546] device hsr_slave_1 left promiscuous mode [ 335.344157][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.346266][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.348738][ T7546] device bridge_slave_1 left promiscuous mode [ 335.350568][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.376549][ T7546] device bridge_slave_0 left promiscuous mode [ 335.378403][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.494468][ T7546] device veth1_macvtap left promiscuous mode [ 335.496319][ T7546] device veth0_macvtap left promiscuous mode [ 335.498035][ T7546] device veth1_vlan left promiscuous mode [ 335.499667][ T7546] device veth0_vlan left promiscuous mode [ 336.484067][ T4308] Bluetooth: hci1: command 0x041b tx timeout [ 337.588217][ T7546] team0 (unregistering): Port device team_slave_1 removed [ 337.765953][ T7546] team0 (unregistering): Port device team_slave_0 removed [ 337.945368][ T7546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.145734][ T7546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.564117][ T4308] Bluetooth: hci1: command 0x040f tx timeout [ 340.643918][ T4308] Bluetooth: hci1: command 0x0419 tx timeout [ 340.796634][ T7546] bond0 (unregistering): Released all slaves [ 341.065005][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.068548][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.097437][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.100184][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.103136][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.109715][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.119384][ T7940] device veth0_vlan entered promiscuous mode [ 341.136648][ T7940] device veth1_vlan entered promiscuous mode [ 341.154611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.157408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.160250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.163494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.182313][ T7940] device veth0_macvtap entered promiscuous mode [ 341.191132][ T7940] device veth1_macvtap entered promiscuous mode [ 341.201883][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.206522][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.209228][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.212589][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.221754][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.225702][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.229566][ T7940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.232413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.239920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.242478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 341.246858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.252690][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.255977][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.258761][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.261573][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.264549][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.267429][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.277533][ T7940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.279617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.282664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.293385][ T7940] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.296802][ T7940] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.299386][ T7940] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.301960][ T7940] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.366588][ T6467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.368949][ T6467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.380309][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.392651][ T6467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.399512][ T6467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.404812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready