last executing test programs: 5m26.084354874s ago: executing program 1 (id=141): socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r0, 0x141601) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f00000001c0), &(0x7f0000000080)=r1}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x423}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) 5m24.317364857s ago: executing program 1 (id=145): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x1, 'veth1_to_batadv\x00', {}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x4000280) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x12, 0x4004, @fd=r6, 0x8, &(0x7f0000000100)="34b5c710eed2b4e7f737c5481ec5aac8cf722adf1725265557074c", 0x1b, 0x0, 0x0, {0x0, r9}}) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) 5m21.759899672s ago: executing program 1 (id=149): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) 5m20.804590185s ago: executing program 1 (id=151): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) 5m19.304118045s ago: executing program 1 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3, 0x0, 0x100}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 5m17.236536933s ago: executing program 1 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}]}, 0x24}}, 0x4) 5m17.054817305s ago: executing program 32 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}]}, 0x24}}, 0x4) 30.57336019s ago: executing program 0 (id=839): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000007c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@mode={'mode', 0x3d, 0x4}}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@longad}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f000001fdc0)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, 0x0, 0x0) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0xffffffffffffffff, {0x0, 0x0, 0x3}}, 0x18) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 26.966001028s ago: executing program 0 (id=844): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x60}}, 0x0) 26.80910083s ago: executing program 0 (id=847): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) fsopen(0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030"], 0xb8) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 25.200289992s ago: executing program 0 (id=850): unshare(0x2c020400) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x21, 0x0, 0x0) 24.488467111s ago: executing program 0 (id=852): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, 0x0, 0x103ec2, 0x100) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000031000000050035000000000005003300000400000500360000000000080002"], 0x34}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r4, 0x3af001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) write$cgroup_int(r5, &(0x7f00000002c0)=0x8, 0x12) truncate(0x0, 0x3a6000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) 21.111039687s ago: executing program 0 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") open(&(0x7f0000000140)='./file1\x00', 0x0, 0x1a1) socket$pppoe(0x18, 0x1, 0x0) unshare(0x2c020400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_int(r4, 0x10d, 0x21, &(0x7f0000000040), &(0x7f0000000240)=0x4) 18.243798975s ago: executing program 4 (id=869): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xd50002d2c9f58a0f) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r4, &(0x7f0000000000)=""/77, 0x4d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x35, 0x9, 0x3, 0x5}]}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140), 0x1, 0x562, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000480005800800010265756800070002"], 0x5c}}, 0x0) 17.243802329s ago: executing program 4 (id=871): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndpcmc(0x0, 0x4000000000000, 0xa340658bc4133dd5) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000380)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @phonet={0x23, 0x1, 0x1e, 0x1}, 0xea, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000340)='veth0_to_team\x00', 0x40, 0x6, 0x5}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, 0x3}) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb) epoll_create1(0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 15.453709443s ago: executing program 5 (id=875): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000007c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@mode={'mode', 0x3d, 0x4}}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@longad}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f00000079c0)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f000001fdc0)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) connect$can_j1939(r4, 0x0, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 14.18209917s ago: executing program 2 (id=877): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) fsopen(0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030"], 0xb8) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 13.353238801s ago: executing program 5 (id=878): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000007c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@mode={'mode', 0x3d, 0x4}}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@longad}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f00000079c0)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f000001fdc0)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0xffffffffffffffff, {0x0, 0x0, 0x3}}, 0x18) writev(r4, &(0x7f0000000240), 0x0) 12.505881162s ago: executing program 2 (id=880): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) close(r7) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x8dff}, 0x10b8c}}, 0x0) 10.370574371s ago: executing program 2 (id=881): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f0000000340)=0x78) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, 0x0, 0x36) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r5, &(0x7f00000001c0)=""/47, 0x2f) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x78492000) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000380)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006000340000300000900010073797a30000000000900020073797a"], 0xa0}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 10.238526233s ago: executing program 5 (id=883): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, 0x0, 0x103ec2, 0x100) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000031000000050035000000000005003300000400000500360000000000080002"], 0x34}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r4, 0x3af001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) write$cgroup_int(r5, &(0x7f00000002c0)=0x8, 0x12) truncate(0x0, 0x3a6000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) 9.048533569s ago: executing program 2 (id=885): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, 0x0, 0x103ec2, 0x100) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000031000000050035000000000005003300000400000500360000000000080002"], 0x34}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r5, 0x3af001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) write$cgroup_int(r6, &(0x7f00000002c0)=0x8, 0x12) truncate(0x0, 0x3a6000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) 7.215108893s ago: executing program 5 (id=887): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000007c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@mode={'mode', 0x3d, 0x4}}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@longad}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f000001fdc0)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0xffffffffffffffff, {0x0, 0x0, 0x3}}, 0x18) writev(r4, 0x0, 0x0) 6.487174973s ago: executing program 2 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9859, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) connect$netrom(r2, &(0x7f0000000300)={{0x6, @default}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_ifreq(r1, 0x8990, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xc41, 0x0) sendto$inet6(r5, &(0x7f0000000380)="47487f524345eae0e6ddad1449d22b5c08b67a7ce40676c0bb52d00fd4f3058e77dd08c50d02ca73843135c628639c8c73da505f18ba73e851ad4a650deaf6a2cf0c28253067afd521d3cc268e94031ec139b417c8a8e615c0b41daa1f2a0b285d01ed53959ced70012e06b40231e40ffe40bbed722a23e5ed79877460fa0d3a919d0ca6fff30cbc3f58770c295f9c46d4d128fe688df06493da823860e09de0848adc42cdea", 0xa6, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x18, @local, 0x7}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0x1, 0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.021806189s ago: executing program 33 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") open(&(0x7f0000000140)='./file1\x00', 0x0, 0x1a1) socket$pppoe(0x18, 0x1, 0x0) unshare(0x2c020400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_int(r4, 0x10d, 0x21, &(0x7f0000000040), &(0x7f0000000240)=0x4) 6.016390509s ago: executing program 3 (id=891): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000007c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@mode={'mode', 0x3d, 0x4}}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@longad}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f00000079c0)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f000001fdc0)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0xffffffffffffffff, {0x0, 0x0, 0x3}}, 0x18) writev(r4, &(0x7f0000000240)=[{}], 0x1) 4.748941386s ago: executing program 3 (id=892): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) close(r7) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x8dff}, 0x10b8c}}, 0x0) 3.316240535s ago: executing program 5 (id=893): socket$kcm(0xa, 0x922000000003, 0x11) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x10012, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xd50002d2c9f58a0f) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r3, &(0x7f0000000000)=""/77, 0x4d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x35, 0x9, 0x3, 0x5}]}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140), 0x1, 0x562, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000480005800800010265756800070002"], 0x5c}}, 0x0) 3.315722755s ago: executing program 3 (id=894): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014000780"], 0x60}}, 0x0) 3.311271815s ago: executing program 4 (id=895): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f0000000340)=0x78) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x36) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r4, &(0x7f00000001c0)=""/47, 0x2f) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x78492000) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000380)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006000340000300000900010073797a30000000000900020073797a"], 0xa0}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.437511357s ago: executing program 3 (id=896): socket$kcm(0xa, 0x922000000003, 0x11) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x10012, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xd50002d2c9f58a0f) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r3, &(0x7f0000000000)=""/77, 0x4d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x35, 0x9, 0x3, 0x5}]}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140), 0x1, 0x562, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000480005800800010265756800070002"], 0x5c}}, 0x0) 2.391457718s ago: executing program 4 (id=897): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$cgroup(0x0, 0x0, 0x0, 0x10012, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xd50002d2c9f58a0f) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r4, &(0x7f0000000000)=""/77, 0x4d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x35, 0x9, 0x3, 0x5}]}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140), 0x1, 0x562, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000480005800800010265756800070002"], 0x5c}}, 0x0) 2.068892062s ago: executing program 2 (id=898): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x4000280) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x12, 0x4004, @fd=r3, 0x8, &(0x7f0000000100)="34b5c710eed2b4e7f737c5481ec5aac8cf722adf1725265557074c", 0x1b, 0x0, 0x0, {0x0, r7}}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) 1.198013744s ago: executing program 4 (id=899): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, 0x0, 0x103ec2, 0x100) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000031000000050035000000000005003300000400000500360000000000080002"], 0x34}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r4, 0x3af001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) write$cgroup_int(r5, &(0x7f00000002c0)=0x8, 0x12) truncate(0x0, 0x3a6000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) 1.189423074s ago: executing program 5 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$eJzs3VFv01YbwPHHpYWSV0LoZUKoKnAom1SkEhwXgiKuPOckPeDYke2g9gpVNEUVKUyUSWtvNm7YJm0fgtt9iH0jtI/AZDspzdo0HaUJ6v6/Co5jH/s8x4n86LTxsQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALG8qm2XLPFN0FpWg3nVKGx8fNnde98KudVXHNKuiJX+k+lpuZKvuvLVx82X0//mZDZ/NSvTaTEtO/+7fPHBpcmJ3v6HBDwSW9s7z1c7nfarcQdygq6eG7ytrgMTh6bh1rUycagq5bJ9Z6kWq5rxdbwSJ7qhvEi7SRipee+WKlUqi0oXV8JWUK+6vu6tvH/bse2yelhsajeKw+DOw2LsLRnfN0E9q5NuTuvcTz+Ij0yiEu02lFrf6LQXh3UgrVQ6SiVnWCXHdpxSyXFK5XuVe/dte3LfCvsfZF+N8X9oMV6f8eoNHM9EN/+LL0YCacmyqAN/PKlKJKE0Bmzv6uX/b+7oQ9vdm/97Wf7Kx80zkuX/a/mra4Py/4BYRvezJduyI89lVTrSkba8GntEo/2pi5ZAjMQSipGGuNka1V2jpCJlKYstT2RJahKLkpoY8UVLLCsSSyI6+0R5EokWVxIJJRIl8+LJLVFSkopUZFGUaCnKioTSkkDqUhU3O8q6bGTnfVGUNSjG3Uqlgd0o9D53bXEO6S35H8f3Wa/fwHF86OV/AAAAAABwalnZb9/T8f+UXM2WasbX9rjDAgAAAAAAn1H2l//ZtJhKl66KxfgfAAAAAIDTxsrusbNEpCDX86V1sbLbpfglAAAAAAAAp0T29/9raZHNgXJdrN3pUhj/AwAAAABwSvwydI79uHnO+vMviaIp601z+Wtr003ruZtn8v3O9I400S2T2ox1oXuQrCjnxeSkp2et6bzS7iSY77vF+rA4rIMC+GlvADIkgEuT8pvcyOvcWMvLtd6WvJVCzfi66IX+g5K47oWJRC8n37/Y+EGy7v8aNC5Ysr7RaRefvuysZbG8SY/yZrM7geK+eRQPieV1Nt9Cds/FgT2eym7E6LZbyNu19/Z/ov+8H6XNtzKX15nrznhb6O//dNpmqdjX+3TbbhTTstFpl47Z87dyM69zc/5mXhwQhVMc9B50z4WzN4pPOhf7o7D6ojgvIsOiWBwUhXW0KABgXNaHZCFrf+L/hGvtp2V3+ZfZ/a3M53XmZ7IL6+TMAXnFHnZFt4+Z3f7Y9wykQTk2bff33XbzrPou3eHdwHZj37HSU3jm9eZ3cnlre+f2xubqs/az9gvHWSzbd237niNTWTe6xZ5IP5wj9wAAcsOfsTO0hnU3H1VfFDl4VP3/3a8UFOWpvJSOrMlCdrdB9o2DA49a2PM1hIUho9ZClibzJ7wsHDK2PJvd5dA7rnNo3f4YFkfxVgAAMDJzQ/LwUfL/wpBxd38u7x8dn5VBdUsjPxcAAPxX6Oi9VUh+tqLINJ+UKpWSmyxpFYXeIxWZal0rEyQ68pbcoK5VMwqT0Av9dOGxqepYxa1mM4wSVQsj1Qxjs5w9+V11H/0e64YbJMaLm752Y628MEhcL1FVE59Xzda3vomXdJTtHDe1Z2rGcxMTBioOW5Gni0rFWu+paKo6SEzNpIuBakam4UYr6nHotxpaWWJJZJpJmB+w15YJamHUyA5bHPfJBgDgC7G1vfN8tdNpvzrBhXH3EQAA9CNLAwAAAAAAAAAAAAAAAAAAAADw5RvF/X8sjGPhbPcdHkFbvamgx93lE16wRtrBSREZZ5eHXjp+PNELE4AT93cAAAD//+IERnQ=") open(&(0x7f0000000140)='./file1\x00', 0x0, 0x1a1) socket$pppoe(0x18, 0x1, 0x0) unshare(0x2c020400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa8f064ab6bf7c86dd606410a60f51000020010000000000000000000000000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e3"], 0x0) getsockopt$inet_int(r4, 0x10d, 0x21, &(0x7f0000000040), &(0x7f0000000240)=0x4) 990.594517ms ago: executing program 3 (id=901): socket$kcm(0xa, 0x922000000003, 0x11) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x10012, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xd50002d2c9f58a0f) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r3, &(0x7f0000000000)=""/77, 0x4d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x35, 0x9, 0x3, 0x5}]}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140), 0x1, 0x562, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000480005800800010265756800070002"], 0x5c}}, 0x0) 19.3475ms ago: executing program 3 (id=902): syz_open_dev$loop(0x0, 0x5, 0x4201) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x20, 0x2f, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x20}}, 0xc000) 0s ago: executing program 4 (id=903): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f0000000340)=0x78) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x36) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r3, &(0x7f00000001c0)=""/47, 0x2f) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x78492000) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000380)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006000340000300000900010073797a30000000000900020073797a"], 0xa0}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 475689][ T4014] Bluetooth: hci0: command 0x0409 tx timeout [ 43.559670][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 43.632398][ T4032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.662083][ T4032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.711729][ T4032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.760667][ T4032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.830055][ T4025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.881610][ T4025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.929911][ T4025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.985610][ T4025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.075590][ T4036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.123016][ T4036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.172625][ T4036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.218564][ T4036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.310602][ T4023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.384548][ T4023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.435009][ T4023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.491965][ T4023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.550390][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.593907][ T4024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.625192][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.627245][ T4024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.671600][ T4024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.711238][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.715295][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.722133][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.732948][ T4024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.782949][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.785656][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.788390][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.792434][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.795602][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.797827][ T434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.801331][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.804322][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.807046][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.809059][ T434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.815956][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.818320][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.847330][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.855063][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.858764][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.863139][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.865762][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.867679][ T434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.871642][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.897739][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.901108][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.903833][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.905809][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.908281][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.917540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.921899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.935338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.938253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.948519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.952218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.970686][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.973592][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.977182][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.981628][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.988944][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.997861][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.016193][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.019173][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.025634][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.028658][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.042860][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.047060][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.051198][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.054039][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.056705][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.065539][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.069274][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.084322][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.089940][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.092772][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.098309][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.132251][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.135207][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.137914][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.139993][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.155360][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.159186][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.163596][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.166225][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.168137][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.197270][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.200217][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.202912][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.205483][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.225158][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.228229][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.233229][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.247862][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.256724][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.260767][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.263762][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.265929][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.271174][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.278929][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.282909][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.285768][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.287643][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.298654][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.302607][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.305306][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.308762][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.328012][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.331331][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.334084][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.336039][ T434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.338558][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.344855][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.347625][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.351116][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.367929][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.370848][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.372975][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.383343][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.390529][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.395796][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.400936][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.404756][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.412450][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.430859][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.434200][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.437750][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.441565][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.444388][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.447158][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.452150][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.454122][ T434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.476032][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.478862][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.482609][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.485418][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.501874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.504747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.508240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.514664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.518786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.523413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.525947][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.527784][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.537255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.540880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.543675][ T4025] device veth0_vlan entered promiscuous mode [ 45.548138][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.549814][ T1534] Bluetooth: hci2: command 0x041b tx timeout [ 45.551154][ T4069] Bluetooth: hci0: command 0x041b tx timeout [ 45.551789][ T1534] Bluetooth: hci3: command 0x041b tx timeout [ 45.553549][ T4069] Bluetooth: hci1: command 0x041b tx timeout [ 45.570042][ T4025] device veth1_vlan entered promiscuous mode [ 45.581640][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.584583][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.587436][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.592124][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.614689][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.617708][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.622788][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.625016][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.641381][ T4069] Bluetooth: hci4: command 0x041b tx timeout [ 45.645259][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.648752][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.662318][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.665062][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.668358][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.677737][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.689187][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.692927][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.695634][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.698678][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.702357][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.705949][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.714517][ T4024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.718093][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.726899][ T4032] device veth0_vlan entered promiscuous mode [ 45.737301][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.741361][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.744618][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.747590][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.758378][ T4025] device veth0_macvtap entered promiscuous mode [ 45.767595][ T4025] device veth1_macvtap entered promiscuous mode [ 45.775707][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.778921][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.783044][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.785193][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.801574][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.823335][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.826527][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.832637][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.835491][ T4032] device veth1_vlan entered promiscuous mode [ 45.856669][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.865998][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.868994][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.873259][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.876118][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.879064][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.882832][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.903585][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.917929][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.921735][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.924721][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.931712][ T4025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.934302][ T4025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.936783][ T4025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.943165][ T4025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.965759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.970036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.973705][ T4036] device veth0_vlan entered promiscuous mode [ 45.991933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.995192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.998059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.004610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.014386][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.017126][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.023116][ T4032] device veth0_macvtap entered promiscuous mode [ 46.026530][ T4023] device veth0_vlan entered promiscuous mode [ 46.038217][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.042029][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.044761][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.051736][ T4032] device veth1_macvtap entered promiscuous mode [ 46.066680][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.081194][ T4023] device veth1_vlan entered promiscuous mode [ 46.097316][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.106582][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.114638][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.127193][ T4036] device veth1_vlan entered promiscuous mode [ 46.142542][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.145387][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.148223][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.156405][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.172903][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.175971][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.187518][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.195907][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.199242][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.210502][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.230102][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.232304][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.235785][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.257572][ T4032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.261900][ T4032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.264263][ T4032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.266767][ T4032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.298176][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.303402][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.306295][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.309221][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.312187][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.318699][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.322579][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.341067][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.344018][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.355845][ T4036] device veth0_macvtap entered promiscuous mode [ 46.361796][ T4023] device veth0_macvtap entered promiscuous mode [ 46.408096][ T4036] device veth1_macvtap entered promiscuous mode [ 46.422992][ T4023] device veth1_macvtap entered promiscuous mode [ 46.451455][ T4024] device veth0_vlan entered promiscuous mode [ 46.517483][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.527517][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.532696][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.536304][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.539178][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.548520][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.569587][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.572385][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.582117][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.584404][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.588699][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.615574][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.618485][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.629647][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.632604][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.636829][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.647722][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.652360][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.655196][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.658068][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.668103][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.677965][ T4036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.680799][ T4036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.683284][ T4036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.685699][ T4036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.719783][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.722898][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.726340][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.729301][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.542294][ T330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.545146][ T330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.548546][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.593921][ T4024] device veth1_vlan entered promiscuous mode [ 47.603456][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.608542][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.614232][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.617070][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.620258][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.623118][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.628511][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.630163][ T1534] Bluetooth: hci1: command 0x040f tx timeout [ 47.631384][ T4074] Bluetooth: hci0: command 0x040f tx timeout [ 47.634097][ T4074] Bluetooth: hci2: command 0x040f tx timeout [ 47.775952][ T1534] Bluetooth: hci3: command 0x040f tx timeout [ 47.778003][ T1534] Bluetooth: hci4: command 0x040f tx timeout [ 47.809130][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.815133][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.847046][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.974844][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.611614][ T4112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.615739][ T4112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.621477][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.692734][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.696173][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.698827][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.720250][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.723115][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.726042][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.743183][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.747394][ T4024] device veth0_macvtap entered promiscuous mode [ 48.771027][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.776160][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.782902][ T4023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.785322][ T4023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.787730][ T4023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.792935][ T4023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.822561][ T4024] device veth1_macvtap entered promiscuous mode [ 48.872474][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.875224][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.891695][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.903360][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.906286][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.908993][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.936136][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.938977][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.944844][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.947621][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.957653][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.963903][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.972083][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.975239][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.008971][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.018855][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.032646][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.035645][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.038602][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.051962][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.054760][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.057648][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.065111][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.086554][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.091806][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.105560][ T4114] loop0: detected capacity change from 0 to 32768 [ 49.110651][ T4024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.113112][ T4024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.120259][ T4024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.122709][ T4024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.148398][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.152317][ T4114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8 (4114) [ 49.161104][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.164507][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.179068][ T4114] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 49.183237][ T4114] BTRFS info (device loop0): force clearing of disk cache [ 49.198746][ T4114] BTRFS info (device loop0): setting nodatacow, compression disabled [ 49.204133][ T4114] BTRFS info (device loop0): doing ref verification [ 49.212761][ T4114] BTRFS info (device loop0): enabling auto defrag [ 49.217828][ T4114] BTRFS info (device loop0): max_inline at 0 [ 49.222044][ T4114] BTRFS info (device loop0): using free space tree [ 49.226696][ T4114] BTRFS info (device loop0): has skinny extents [ 49.254808][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.257889][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.268069][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.271702][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.275448][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.294928][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.329125][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.334478][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.339203][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.445050][ T4114] BTRFS info (device loop0): enabling ssd optimizations [ 49.458621][ T4114] BTRFS info (device loop0): clearing free space tree [ 49.463667][ T4114] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 49.467832][ T4114] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 49.535250][ T4114] BTRFS info (device loop0): creating free space tree [ 49.554027][ T4114] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 49.559124][ T4148] binder: 4146:4148 tried to acquire reference to desc 0, got 1 instead [ 49.565964][ T4114] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 49.573997][ T4148] binder_alloc: 4146: pid 4146 spamming oneway? 1 buffers allocated for a total size of 4096 [ 49.631637][ T4072] binder: undelivered transaction 5, process died. [ 49.720047][ T4069] Bluetooth: hci2: command 0x0419 tx timeout [ 49.725359][ T4069] Bluetooth: hci0: command 0x0419 tx timeout [ 50.024336][ T4107] Bluetooth: hci4: command 0x0419 tx timeout [ 50.026269][ T4107] Bluetooth: hci3: command 0x0419 tx timeout [ 50.028060][ T4107] Bluetooth: hci1: command 0x0419 tx timeout [ 51.289204][ T4178] binder: 4177:4178 tried to acquire reference to desc 0, got 1 instead [ 51.307116][ T4178] binder: 4177:4178 got transaction with invalid data ptr [ 51.316290][ T4178] binder: 4177:4178 transaction failed 29201/-14, size 0-24 line 3186 [ 51.330478][ T4169] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.424250][ T4159] loop2: detected capacity change from 0 to 32768 [ 51.432626][ T4159] ======================================================= [ 51.432626][ T4159] WARNING: The mand mount option has been deprecated and [ 51.432626][ T4159] and is ignored by this kernel. Remove the mand [ 51.432626][ T4159] option from the mount to silence this warning. [ 51.432626][ T4159] ======================================================= [ 51.557258][ T4159] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 51.658697][ T4159] (syz.2.13,4159,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 51.665059][ T4159] (syz.2.13,4159,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 51.667731][ T4159] (syz.2.13,4159,1):ocfs2_link:762 ERROR: status = -2 [ 51.676654][ T4159] (syz.2.13,4159,1):ocfs2_link:839 ERROR: status = -2 [ 52.560106][ T4196] loop0: detected capacity change from 0 to 16 [ 52.585613][ T4036] ocfs2: Unmounting device (7,2) on (node local) [ 52.604884][ T4196] erofs: (device loop0): mounted with root inode @ nid 36. [ 52.646336][ T4196] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.724356][ T4201] loop4: detected capacity change from 0 to 1024 [ 52.882714][ T4201] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.008083][ T4208] loop2: detected capacity change from 0 to 32768 [ 53.127611][ T4220] binder: 4218:4220 tried to acquire reference to desc 0, got 1 instead [ 53.140895][ T4208] XFS (loop2): Mounting V5 Filesystem [ 53.145010][ T4220] binder: 4218:4220 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.169711][ T4220] binder: 4220 RLIMIT_NICE not set [ 53.171256][ T4220] binder: 4220 RLIMIT_NICE not set [ 53.183643][ T4220] binder: 4218:4220 got new transaction with bad transaction stack, transaction 15 has target 4218:4220 [ 53.187179][ T4220] binder: 4218:4220 transaction failed 29201/-71, size 0-48 line 2973 [ 53.246574][ T4172] binder: release 4218:4220 transaction 15 out, still active [ 53.249120][ T4172] binder: undelivered TRANSACTION_COMPLETE [ 53.251362][ T4172] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.254386][ T4198] loop3: detected capacity change from 0 to 32768 [ 53.271481][ T4227] loop0: detected capacity change from 0 to 1024 [ 53.280726][ T4070] binder: release 4218:4220 transaction 15 in, still active [ 53.282994][ T4070] binder: send failed reply for transaction 15, target dead [ 53.295877][ T4198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.23 (4198) [ 53.338394][ T4198] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 53.352272][ T4198] BTRFS info (device loop3): using free space tree [ 53.354270][ T4198] BTRFS info (device loop3): has skinny extents [ 53.367699][ T4229] bridge0: port 3(vlan2) entered blocking state [ 53.387334][ T4229] bridge0: port 3(vlan2) entered disabled state [ 53.427647][ T4208] XFS (loop2): Ending clean mount [ 53.449030][ T4231] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET) [ 53.451242][ T4208] XFS (loop2): Quotacheck needed: Please wait. [ 53.508385][ T4208] XFS (loop2): Quotacheck: Done. [ 53.544962][ T153] hfsplus: b-tree write err: -5, ino 4 [ 53.732723][ T4198] BTRFS info (device loop3): enabling ssd optimizations [ 53.908451][ T4264] loop0: detected capacity change from 0 to 2048 [ 53.970060][ T4036] XFS (loop2): Unmounting Filesystem [ 54.125767][ T4264] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 54.151687][ T4254] loop4: detected capacity change from 0 to 32768 [ 54.183310][ T4254] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.34 (4254) [ 54.237525][ T4264] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 54.300823][ T4254] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 54.304351][ T4254] BTRFS info (device loop4): using free space tree [ 54.306139][ T4254] BTRFS info (device loop4): has skinny extents [ 54.308214][ T4262] loop1: detected capacity change from 0 to 32768 [ 54.387645][ T4244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4244) [ 54.406135][ T4262] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.35 (4262) [ 54.501677][ T4262] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 54.504462][ T4262] BTRFS info (device loop1): using free space tree [ 54.506187][ T4262] BTRFS info (device loop1): has skinny extents [ 54.686078][ T4254] BTRFS info (device loop4): enabling ssd optimizations [ 55.608479][ T4314] loop0: detected capacity change from 0 to 512 [ 55.647399][ T4313] loop2: detected capacity change from 0 to 2048 [ 55.722134][ T4314] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 55.725086][ T4314] EXT4-fs (loop0): 1 truncate cleaned up [ 55.742114][ T4313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.951513][ T4314] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,init_itable=0x0000000000001002,journal_dev=0x0000000000000002,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 56.038976][ T4262] BTRFS info (device loop1): enabling ssd optimizations [ 56.086537][ T4314] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.44: Directory hole found for htree leaf block 0 [ 56.440376][ T4329] loop0: detected capacity change from 0 to 256 [ 56.475810][ T4243] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop4 scanned by udevd (4243) [ 56.566404][ T4338] loop2: detected capacity change from 0 to 2048 [ 56.614160][ T4338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 56.616373][ T4338] UDF-fs: Scanning with blocksize 512 failed [ 56.624743][ T4251] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop1 scanned by udevd (4251) [ 56.635851][ T4338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.912300][ T4343] binder: 4342:4343 tried to acquire reference to desc 0, got 1 instead [ 56.921025][ T4343] binder: 4342:4343 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.924757][ T4343] binder: 4343 RLIMIT_NICE not set [ 56.946647][ T4343] binder: undelivered transaction 21, put_user failed [ 56.948888][ T4343] binder: 4342:4343 ioctl c0306201 20001d40 returned -14 [ 56.961437][ T4332] binder: undelivered TRANSACTION_COMPLETE [ 57.004553][ T4329] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 57.020816][ T4329] FAT-fs (loop0): Filesystem has been set read-only [ 57.031792][ T4329] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 57.036568][ T4329] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 57.047381][ T4329] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 57.052051][ T4329] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 57.056861][ T4329] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 57.062933][ T4329] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 57.069194][ T4329] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 57.232098][ T4349] binder: 4348:4349 tried to acquire reference to desc 0, got 1 instead [ 57.266777][ T4073] binder: undelivered TRANSACTION_COMPLETE [ 57.302182][ T4073] binder: undelivered transaction 26, process died. [ 57.370357][ T4356] loop3: detected capacity change from 0 to 512 [ 57.431121][ T4357] loop0: detected capacity change from 0 to 64 [ 57.517172][ T4357] Trying to free block not in datazone [ 57.677844][ T4356] EXT4-fs (loop3): Test dummy encryption mode enabled [ 57.686350][ T4356] EXT4-fs error (device loop3): __ext4_iget:4893: inode #11: block 1: comm syz.3.56: invalid block [ 57.691560][ T4356] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.56: couldn't read orphan inode 11 (err -117) [ 57.697831][ T4356] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000040000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 58.351505][ T4372] loop0: detected capacity change from 0 to 64 [ 58.437670][ T4356] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.56: Directory hole found for htree leaf block 0 [ 58.493672][ T4375] loop4: detected capacity change from 0 to 1024 [ 58.512475][ T4377] loop1: detected capacity change from 0 to 16 [ 58.570181][ T4377] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 58.577466][ T4377] cramfs: empty filesystem [ 58.717255][ T136] hfsplus: b-tree write err: -5, ino 4 [ 58.753517][ T4383] binder: 4380:4383 tried to acquire reference to desc 0, got 1 instead [ 58.755596][ T4379] sp0: Synchronizing with TNC [ 58.758480][ T4383] binder: 4380:4383 got reply transaction with bad transaction stack, transaction 35 has target 4380:0 [ 58.805666][ T4383] binder: 4380:4383 transaction failed 29201/-71, size 0-0 line 2837 [ 58.814516][ T4332] binder: release 4380:4383 transaction 35 out, still active [ 58.816600][ T4332] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.830992][ T4387] loop4: detected capacity change from 0 to 64 [ 58.835283][ T25] binder: send failed reply for transaction 35, target dead [ 58.963101][ T4389] loop1: detected capacity change from 0 to 4096 [ 59.020581][ T4389] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 59.026173][ T4024] hfs: node 4:3 still has 2 user(s)! [ 59.220846][ T4396] netlink: 'syz.0.70': attribute type 10 has an invalid length. [ 59.254694][ T4396] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 59.604637][ T4403] tipc: Started in network mode [ 59.606273][ T4403] tipc: Node identity 06518c182ad1, cluster identity 4711 [ 59.608401][ T4403] tipc: Enabled bearer , priority 0 [ 59.617851][ T4402] tipc: Resetting bearer [ 59.675381][ T4402] tipc: Disabling bearer [ 59.925943][ T4417] loop0: detected capacity change from 0 to 512 [ 59.945502][ T4417] EXT4-fs (loop0): Ignoring removed bh option [ 59.995567][ T4417] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 60.020976][ T4417] EXT4-fs (loop0): 1 truncate cleaned up [ 60.022537][ T4417] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 60.155716][ T4025] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 60.169883][ T4025] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 60.179986][ T4025] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 60.236453][ T4434] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 60.238830][ T4434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.85'. [ 60.266276][ T4435] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 60.287084][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.292757][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.294961][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.606718][ T4453] loop1: detected capacity change from 0 to 1024 [ 60.647744][ T4453] EXT4-fs (loop1): Ignoring removed nobh option [ 60.680264][ T4453] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.697454][ T4457] capability: warning: `GPL' uses deprecated v2 capabilities in a way that may be insecure [ 60.728144][ T4453] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,nodioread_nolock,dioread_nolock,,errors=continue. Quota mode: writeback. [ 60.847546][ T4462] loop0: detected capacity change from 0 to 512 [ 60.860086][ T4410] loop4: detected capacity change from 0 to 65536 [ 60.916090][ T4462] EXT4-fs (loop0): Ignoring removed orlov option [ 60.938797][ T4462] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 60.967402][ T4410] XFS (loop4): Mounting V5 Filesystem [ 61.075946][ T4410] XFS (loop4): Ending clean mount [ 61.288439][ T4024] XFS (loop4): Unmounting Filesystem [ 61.627243][ T4482] loop0: detected capacity change from 0 to 8192 [ 61.670349][ T4488] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 61.673989][ T4482] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.688519][ T4482] REISERFS (device loop0): using ordered data mode [ 61.710022][ T4482] reiserfs: using flush barriers [ 61.717446][ T4482] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.753668][ T4482] REISERFS (device loop0): checking transaction log (loop0) [ 61.786291][ T4482] REISERFS (device loop0): Using r5 hash to sort names [ 61.806741][ T4482] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 61.828276][ T4482] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 61.907659][ T4482] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 61.920401][ T4482] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 61.924960][ T4482] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 63.272334][ T4516] fuse: Bad value for 'fd' [ 63.932336][ T4539] loop0: detected capacity change from 0 to 1024 [ 63.965630][ T4539] EXT4-fs (loop0): Ignoring removed nobh option [ 63.976059][ T4539] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.658128][ T4539] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,nodioread_nolock,dioread_nolock,,errors=continue. Quota mode: writeback. [ 64.825659][ T4547] udc-core: couldn't find an available UDC or it's busy [ 64.827749][ T4547] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.908648][ T4551] udc-core: couldn't find an available UDC or it's busy [ 64.911915][ T4551] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.916507][ T4551] udc-core: couldn't find an available UDC or it's busy [ 64.949272][ T4551] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.843260][ T4567] device syzkaller0 entered promiscuous mode [ 67.711364][ T4575] loop0: detected capacity change from 0 to 512 [ 67.789233][ T4575] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.801082][ T4575] EXT4-fs (loop0): invalid journal inode [ 67.803023][ T4575] EXT4-fs (loop0): can't get journal size [ 67.871964][ T4575] EXT4-fs (loop0): 1 truncate cleaned up [ 67.873664][ T4575] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 67.934216][ T26] audit: type=1400 audit(67.900:2): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4572 comm="syz.2.123" [ 68.504927][ T4577] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 69.713610][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.715818][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.237773][ T4602] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 70.789340][ C0] sched: RT throttling activated [ 71.450681][ T4622] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 71.995948][ T4629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.139'. [ 73.394689][ T4642] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 73.916065][ T4639] loop2: detected capacity change from 0 to 8192 [ 73.996910][ T4639] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 74.809526][ T4639] REISERFS (device loop2): using ordered data mode [ 74.811321][ T4639] reiserfs: using flush barriers [ 74.850299][ T4639] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.856182][ T4639] REISERFS (device loop2): checking transaction log (loop2) [ 74.873885][ T7] cfg80211: failed to load regulatory.db [ 76.132151][ T4655] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 76.375496][ T4658] loop0: detected capacity change from 0 to 512 [ 76.424823][ T4655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.432877][ T4655] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 76.612200][ T4658] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.614520][ T4658] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 76.616738][ T4658] System zones: 0-1, 15-15, 18-18, 34-34 [ 76.624072][ T4658] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.633194][ T4658] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 76.635910][ T4658] EXT4-fs warning (device loop0): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.482499][ T4658] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 77.490257][ T4639] REISERFS (device loop2): Using tea hash to sort names [ 77.493256][ T4658] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.147: bad orphan inode 16 [ 77.529809][ T4639] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 77.540337][ T4658] ext4_test_bit(bit=15, block=18) = 1 [ 77.542009][ T4658] is_bad_inode(inode)=0 [ 77.543142][ T4658] NEXT_ORPHAN(inode)=0 [ 77.544312][ T4658] max_ino=32 [ 77.545162][ T4658] i_nlink=2 [ 77.546076][ T4658] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 77.655444][ T4672] loop1: detected capacity change from 0 to 256 [ 77.747516][ T4672] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 77.905347][ T4680] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 79.271643][ T4703] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 79.279973][ T4703] ubi31: attaching mtd0 [ 79.294060][ T4703] ubi31: scanning is finished [ 79.295422][ T4703] ubi31: empty MTD device detected [ 79.845836][ T4703] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 81.367768][ T4721] process 'syz.0.165' launched '/dev/fd/3' with NULL argv: empty string added [ 84.511160][ T4758] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 85.874670][ T4169] Bluetooth: hci3: command 0x0409 tx timeout [ 86.253847][ T4772] loop4: detected capacity change from 0 to 256 [ 86.281065][ T4772] exfat: Deprecated parameter 'namecase' [ 86.282862][ T4772] exfat: Deprecated parameter 'utf8' [ 86.284380][ T4772] exfat: Deprecated parameter 'utf8' [ 86.301081][ T4772] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 86.576908][ T4742] chnl_net:caif_netlink_parms(): no params data found [ 87.951219][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 88.180800][ T4785] loop4: detected capacity change from 0 to 64 [ 88.253162][ T4781] tipc: Enabled bearer , priority 0 [ 88.327744][ T4781] device syzkaller0 entered promiscuous mode [ 88.427309][ T4780] tipc: Resetting bearer [ 88.469482][ T4780] tipc: Disabling bearer [ 88.507991][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.520768][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.534119][ T4742] device bridge_slave_0 entered promiscuous mode [ 88.597242][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.599696][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.326593][ T4742] device bridge_slave_1 entered promiscuous mode [ 89.336360][ T4785] Zero length message leads to an empty skb [ 90.287471][ T4742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.380095][ T4172] Bluetooth: hci3: command 0x040f tx timeout [ 90.521200][ T4742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.615537][ T4806] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 90.620403][ T4806] ubi31: attaching mtd0 [ 90.629515][ T4806] ubi31: scanning is finished [ 90.780976][ T4806] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 90.820200][ T4742] team0: Port device team_slave_0 added [ 90.861778][ T4742] team0: Port device team_slave_1 added [ 90.997928][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.014851][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.086522][ T4742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.105539][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.107586][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.124951][ T4809] loop4: detected capacity change from 0 to 1024 [ 91.135001][ T4742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.180061][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 91.215338][ T4809] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.231663][ T4742] device hsr_slave_0 entered promiscuous mode [ 91.269799][ T4742] device hsr_slave_1 entered promiscuous mode [ 91.309746][ T4742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.311939][ T4742] Cannot create hsr debugfs directory [ 91.316782][ T4812] bridge1: port 1(ip6gretap1) entered blocking state [ 91.319092][ T4812] bridge1: port 1(ip6gretap1) entered disabled state [ 91.330019][ T4812] device ip6gretap1 entered promiscuous mode [ 91.348476][ T4821] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 91.368393][ T4818] device veth3 entered promiscuous mode [ 91.377038][ T4818] bridge1: port 2(veth3) entered blocking state [ 91.381349][ T4818] bridge1: port 2(veth3) entered disabled state [ 91.533169][ T4824] loop0: detected capacity change from 0 to 256 [ 91.560166][ T4824] exfat: Deprecated parameter 'namecase' [ 91.625714][ T4824] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 91.638978][ T4742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.681677][ T4742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.727101][ T4742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.809103][ T4742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.430897][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 92.706344][ T26] audit: type=1326 audit(92.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.3.193" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe6ff7a8 code=0x0 [ 92.721080][ T4835] tipc: Enabled bearer , priority 10 [ 92.794427][ T4835] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 92.797928][ T4835] tipc: Enabled bearer , priority 10 [ 94.123163][ T4845] loop0: detected capacity change from 0 to 128 [ 96.400467][ T4332] tipc: Node number set to 746621976 [ 96.438799][ T4742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.913312][ T4742] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.948588][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.951866][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.004421][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.014038][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.021550][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.023636][ T4112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.027110][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.030509][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.033572][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.035637][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.038353][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.042226][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.045625][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.050613][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.053839][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.057174][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.072585][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.077992][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.127879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.133683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.509868][ T4742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.524446][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.810997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.813823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.545992][ T4894] loop4: detected capacity change from 0 to 256 [ 101.558367][ T4894] exfat: Deprecated parameter 'utf8' [ 101.597909][ T4894] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 101.604172][ T4742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.606712][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.613650][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.904846][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.908026][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.928545][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.940089][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.947354][ T4742] device veth0_vlan entered promiscuous mode [ 101.957872][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.962383][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.999173][ T4742] device veth1_vlan entered promiscuous mode [ 102.024977][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.028330][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.165060][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.732845][ T4882] delete_channel: no stack [ 102.780124][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.837006][ T4742] device veth0_macvtap entered promiscuous mode [ 102.864326][ T4742] device veth1_macvtap entered promiscuous mode [ 102.908483][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.919741][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.922476][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.939441][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.949847][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.957339][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.965760][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.972665][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.978950][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.985707][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.052559][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.065351][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.095902][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.098990][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.112506][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.913887][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.916774][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.956902][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.990878][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.993691][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.026951][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.046704][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.064174][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.088703][ T4742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.108762][ T4742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.245001][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.247331][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.250445][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.263731][ T4742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.266265][ T4742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.268726][ T4742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.277709][ T4742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.293826][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d36a698a: rx timeout, send abort [ 104.308583][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 104.415207][ T4935] sctp: failed to load transform for md5: -2 [ 104.430684][ T4938] sctp: failed to load transform for md5: -2 [ 104.464955][ T4514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.468478][ T4514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.491875][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.561272][ T434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.563719][ T434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.569058][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.635738][ T4965] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 110.780609][ T4995] loop0: detected capacity change from 0 to 1024 [ 110.869581][ T4995] EXT4-fs (loop0): Ignoring removed nobh option [ 110.871289][ T4995] EXT4-fs (loop0): Ignoring removed bh option [ 110.874311][ T4995] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.945782][ T4997] loop2: detected capacity change from 0 to 512 [ 110.991495][ T4995] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.229: bad orphan inode 32767 [ 111.003794][ T4995] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,noload,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 111.051897][ T4997] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.230: casefold flag without casefold feature [ 111.212086][ T4997] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.230: couldn't read orphan inode 15 (err -117) [ 111.549853][ T4995] TCP: TCP_TX_DELAY enabled [ 111.925063][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 111.935284][ T4997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.707490][ T5016] loop5: detected capacity change from 0 to 256 [ 113.701928][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.743961][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.746339][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.794311][ T5016] device bridge_slave_0 left promiscuous mode [ 113.814401][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.965252][ T5016] device bridge_slave_1 left promiscuous mode [ 113.967137][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.057649][ T5016] bond0: (slave bond_slave_0): Releasing backup interface [ 114.217440][ T5016] bond0: (slave bond_slave_1): Releasing backup interface [ 115.172159][ T5016] team0: Port device team_slave_0 removed [ 115.993655][ T5016] team0: Port device team_slave_1 removed [ 116.000763][ T5016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.006490][ T5016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.037279][ T5016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.047485][ T5016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.947549][ T5029] team0: Mode changed to "loadbalance" [ 118.308201][ T5071] loop4: detected capacity change from 0 to 512 [ 118.364610][ T5071] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 118.453828][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 122.029435][ T5095] ODEBUG: Out of memory. ODEBUG disabled [ 122.503229][ T5102] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 122.683871][ T5099] loop2: detected capacity change from 0 to 40427 [ 122.838677][ T5099] F2FS-fs (loop2): invalid crc value [ 122.846874][ T5109] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 122.859791][ T5099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.911258][ T5099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.172172][ T4036] attempt to access beyond end of device [ 124.172172][ T4036] loop2: rw=2049, want=45128, limit=40427 [ 127.370671][ T5152] loop2: detected capacity change from 0 to 1764 [ 127.414593][ T5165] loop5: detected capacity change from 0 to 128 [ 128.417132][ T5165] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.480312][ T5152] loop2: detected capacity change from 0 to 256 [ 129.578137][ T5179] syz.5.274 (pid 5179) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 130.280232][ T5152] FAT-fs (loop2): Directory bread(block 64) failed [ 130.282459][ T5152] FAT-fs (loop2): Directory bread(block 65) failed [ 130.284446][ T5152] FAT-fs (loop2): Directory bread(block 66) failed [ 130.286280][ T5152] FAT-fs (loop2): Directory bread(block 67) failed [ 130.288111][ T5152] FAT-fs (loop2): Directory bread(block 68) failed [ 130.290036][ T5152] FAT-fs (loop2): Directory bread(block 69) failed [ 130.291826][ T5152] FAT-fs (loop2): Directory bread(block 70) failed [ 130.293640][ T5152] FAT-fs (loop2): Directory bread(block 71) failed [ 130.295451][ T5152] FAT-fs (loop2): Directory bread(block 72) failed [ 130.297262][ T5152] FAT-fs (loop2): Directory bread(block 73) failed [ 130.461996][ T4371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.621267][ T5172] loop0: detected capacity change from 0 to 32768 [ 130.641785][ T5172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.275 (5172) [ 130.747003][ T5172] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 130.767621][ T5172] BTRFS info (device loop0): turning off barriers [ 130.777606][ T4371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.780767][ T5172] BTRFS info (device loop0): setting nodatasum [ 130.788652][ T5172] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.793316][ T5188] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 130.809570][ T5172] BTRFS info (device loop0): use lzo compression, level 0 [ 130.811637][ T5172] BTRFS info (device loop0): using free space tree [ 130.813342][ T5172] BTRFS info (device loop0): has skinny extents [ 130.840476][ T5184] loop2: detected capacity change from 0 to 40427 [ 130.880132][ T4371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.885009][ T5184] F2FS-fs (loop2): invalid crc value [ 130.901200][ T5184] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.072746][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.074685][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.560196][ T5184] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.692491][ T4371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.820461][ T5172] BTRFS error (device loop0): open_ctree failed: -12 [ 135.356735][ T4036] attempt to access beyond end of device [ 135.356735][ T4036] loop2: rw=2049, want=45128, limit=40427 [ 136.908201][ T5240] netlink: 156 bytes leftover after parsing attributes in process `syz.2.284'. [ 138.618107][ T5251] loop0: detected capacity change from 0 to 8 [ 138.703698][ T5251] squashfs: Unknown parameter '€ëø¡J›Žš^øË€]5dÝÓÁþëØHÏ`™ºÍ8 $%gkX*[8ÔîۂÓqܗ*' [ 140.184680][ T5275] 9pnet_virtio: no channels available for device ./file0/file0 [ 140.316921][ T5277] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.319401][ T5277] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.376211][ T5282] loop2: detected capacity change from 0 to 512 [ 140.530369][ T5282] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noinit_itable,errors=remount-ro,min_batch_time=0x0000000000000000,bsdgroups,init_itable,. Quota mode: writeback. [ 140.615181][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 142.323845][ T5308] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 150.098053][ T5367] loop2: detected capacity change from 0 to 512 [ 150.483775][ T5375] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 150.486628][ T5375] ubi31: attaching mtd0 [ 150.488309][ T5375] ubi31: scanning is finished [ 150.736267][ T5375] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 150.738562][ T5375] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 150.740827][ T5375] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 150.742736][ T5375] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 150.744959][ T5375] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 150.746885][ T5375] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 150.749138][ T5375] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1087488590 [ 150.752108][ T5375] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 150.769508][ T5376] ubi31: background thread "ubi_bgt31d" started, PID 5376 [ 151.171741][ T5367] EXT4-fs (loop2): Ignoring removed orlov option [ 152.451896][ T5367] EXT4-fs: error -4 creating inode table initialization thread [ 152.454712][ T5367] EXT4-fs (loop2): mount failed [ 154.483692][ T5408] loop2: detected capacity change from 0 to 8 [ 154.498361][ T5408] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 156.039589][ T5407] loop5: detected capacity change from 0 to 1764 [ 156.116166][ T4122] udevd[4122]: incorrect cramfs checksum on /dev/loop2 [ 156.134059][ T5421] loop0: detected capacity change from 0 to 1024 [ 156.800567][ T5421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.880755][ T5407] loop5: detected capacity change from 0 to 256 [ 156.920902][ T5444] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 156.995673][ T5407] FAT-fs (loop5): Directory bread(block 64) failed [ 156.999638][ T5407] FAT-fs (loop5): Directory bread(block 65) failed [ 157.001567][ T5407] FAT-fs (loop5): Directory bread(block 66) failed [ 157.003352][ T5407] FAT-fs (loop5): Directory bread(block 67) failed [ 157.014319][ T5407] FAT-fs (loop5): Directory bread(block 68) failed [ 157.016309][ T5407] FAT-fs (loop5): Directory bread(block 69) failed [ 157.018247][ T5407] FAT-fs (loop5): Directory bread(block 70) failed [ 157.031856][ T5407] FAT-fs (loop5): Directory bread(block 71) failed [ 157.033705][ T5407] FAT-fs (loop5): Directory bread(block 72) failed [ 157.035747][ T5407] FAT-fs (loop5): Directory bread(block 73) failed [ 157.276365][ T5447] loop0: detected capacity change from 0 to 40427 [ 157.285110][ T5447] F2FS-fs (loop0): invalid crc value [ 157.291890][ T5447] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.311940][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.319676][ T5447] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.326703][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.330641][ T5434] device bridge_slave_0 left promiscuous mode [ 157.332517][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.361968][ T5434] device bridge_slave_1 left promiscuous mode [ 157.363840][ T5434] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.494814][ T5434] bond0: (slave bond_slave_0): Releasing backup interface [ 158.510578][ T5434] bond0: (slave bond_slave_1): Releasing backup interface [ 159.115289][ T4025] attempt to access beyond end of device [ 159.115289][ T4025] loop0: rw=2049, want=45128, limit=40427 [ 159.253648][ T5434] team0: Port device team_slave_0 removed [ 159.296782][ T5434] team0: Port device team_slave_1 removed [ 159.319168][ T5434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.329480][ T5434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.333838][ T5434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.336045][ T5434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.555766][ T5448] netlink: 'syz.3.328': attribute type 10 has an invalid length. [ 160.748970][ T5448] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.889622][ T5486] loop5: detected capacity change from 0 to 1024 [ 163.987064][ T5486] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.014465][ T4371] device hsr_slave_0 left promiscuous mode [ 164.509597][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 164.927985][ T4071] Bluetooth: hci0: command 0x0406 tx timeout [ 164.929978][ T4071] Bluetooth: hci1: command 0x0406 tx timeout [ 164.932094][ T4371] device hsr_slave_1 left promiscuous mode [ 165.015278][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 165.097398][ T5510] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 165.175311][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.177711][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.203196][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.205358][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.210430][ T5515] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 165.225425][ T4371] device bridge_slave_1 left promiscuous mode [ 165.236715][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.413742][ T4371] device bridge_slave_0 left promiscuous mode [ 165.415787][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.779893][ T4371] device veth1_macvtap left promiscuous mode [ 165.782517][ T4371] device veth0_macvtap left promiscuous mode [ 165.784466][ T4371] device veth1_vlan left promiscuous mode [ 165.786290][ T4371] device veth0_vlan left promiscuous mode [ 166.091569][ T5535] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 166.094564][ T5535] ubi: mtd0 is already attached to ubi31 [ 167.778584][ T5545] loop5: detected capacity change from 0 to 1024 [ 167.919269][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 167.950003][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 167.968222][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.094381][ T5545] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.938409][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.582306][ T4371] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 173.237350][ T4371] bond0 (unregistering): Released all slaves [ 173.873212][ T5584] loop2: detected capacity change from 0 to 1024 [ 174.925432][ T5584] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.950690][ T5601] loop0: detected capacity change from 0 to 1024 [ 175.294983][ T5615] loop5: detected capacity change from 0 to 164 [ 175.555983][ T5615] Unsupported NM flag settings (8) [ 176.014494][ T5601] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.243246][ T5622] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 179.119190][ T5646] netlink: 'syz.2.371': attribute type 10 has an invalid length. [ 179.340862][ T5643] loop0: detected capacity change from 0 to 164 [ 179.513847][ T5641] Unsupported NM flag settings (8) [ 179.720872][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.725311][ T5646] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 180.429035][ T5661] loop0: detected capacity change from 0 to 164 [ 180.778683][ T5661] Unsupported NM flag settings (8) [ 181.067121][ T5670] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 181.436855][ T5680] loop5: detected capacity change from 0 to 1024 [ 181.587046][ T5680] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.032763][ T5716] loop0: detected capacity change from 0 to 1024 [ 183.147359][ T5716] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.475626][ T5728] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 183.958187][ T5746] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 185.470878][ T5774] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 185.558967][ T5775] loop5: detected capacity change from 0 to 164 [ 185.839216][ T5775] Unsupported NM flag settings (8) [ 186.775232][ T5796] loop5: detected capacity change from 0 to 164 [ 187.136469][ T5793] Unsupported NM flag settings (8) [ 188.362573][ T5810] loop5: detected capacity change from 0 to 256 [ 189.881013][ T5815] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 189.884035][ T5815] ubi: mtd0 is already attached to ubi31 [ 190.017740][ T5828] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 191.272678][ T5853] loop0: detected capacity change from 0 to 2048 [ 191.314296][ T5853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.567719][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.570563][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.280953][ T5864] loop2: detected capacity change from 0 to 1024 [ 193.423023][ T5864] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.472259][ T5873] binder: 5871:5873 tried to acquire reference to desc 0, got 1 instead [ 193.493948][ T5873] binder: 5871:5873 got reply transaction with bad transaction stack, transaction 41 has target 5871:0 [ 193.529211][ T5873] binder: 5871:5873 transaction failed 29201/-71, size 0-0 line 2837 [ 193.537721][ T21] binder: release 5871:5873 transaction 41 out, still active [ 193.540789][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.803007][ T4268] binder: send failed reply for transaction 41, target dead [ 195.598011][ T5895] netlink: 'syz.3.418': attribute type 10 has an invalid length. [ 195.634075][ T5895] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 198.383404][ T5917] tipc: Started in network mode [ 198.384851][ T5917] tipc: Node identity 5e817871dd63, cluster identity 4711 [ 198.386971][ T5917] tipc: Enabled bearer , priority 0 [ 198.512407][ T5921] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 198.575959][ T5907] tipc: Resetting bearer [ 198.864629][ T5907] tipc: Disabling bearer [ 199.053192][ T5932] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 199.056178][ T5932] ubi: mtd0 is already attached to ubi31 [ 199.536982][ T5936] loop2: detected capacity change from 0 to 164 [ 199.689851][ T5936] Unsupported NM flag settings (8) [ 201.574661][ T5940] loop0: detected capacity change from 0 to 4096 [ 201.815442][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.438'. [ 201.818334][ T5940] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 201.832821][ T5950] dccp_close: ABORT with 64 bytes unread [ 202.732230][ T5973] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 203.052351][ T5982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 203.055229][ T5982] ubi: mtd0 is already attached to ubi31 [ 204.459882][ T5997] netlink: 'syz.3.453': attribute type 10 has an invalid length. [ 205.651739][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.656030][ T5997] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 207.431210][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 210.652762][ T6044] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 210.762711][ T6048] loop5: detected capacity change from 0 to 2048 [ 210.799368][ T6056] loop0: detected capacity change from 0 to 2048 [ 211.400572][ T6048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.416023][ T6056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.459876][ T6058] loop2: detected capacity change from 0 to 2048 [ 211.521989][ T4172] Bluetooth: hci3: command 0x0406 tx timeout [ 214.092428][ T6064] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 217.186624][ T6096] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 219.198594][ T6115] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 219.201484][ T6115] ubi: mtd0 is already attached to ubi31 [ 224.669076][ T6166] loop5: detected capacity change from 0 to 2048 [ 224.678859][ T6171] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 224.803220][ T6176] tipc: Enabling of bearer rejected, failed to enable media [ 224.810345][ T6166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.511696][ T6183] loop0: detected capacity change from 0 to 164 [ 225.534726][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.487'. [ 225.566435][ T6178] loop2: detected capacity change from 0 to 2048 [ 225.582558][ T6181] Unsupported NM flag settings (8) [ 225.616329][ T6178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.761231][ T6186] bridge1: port 1(ip6gretap1) entered blocking state [ 225.763070][ T6186] bridge1: port 1(ip6gretap1) entered disabled state [ 225.765782][ T6186] device ip6gretap1 entered promiscuous mode [ 225.843525][ T6190] device veth3 entered promiscuous mode [ 225.849189][ T6190] bridge1: port 2(veth3) entered blocking state [ 225.851537][ T6190] bridge1: port 2(veth3) entered disabled state [ 227.053591][ T6201] loop0: detected capacity change from 0 to 164 [ 228.071672][ T6199] loop5: detected capacity change from 0 to 2048 [ 228.115489][ T6199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.120296][ T6197] Unsupported NM flag settings (8) [ 228.147260][ T6205] loop2: detected capacity change from 0 to 256 [ 228.201668][ T6205] exfat: Deprecated parameter 'utf8' [ 228.216482][ T6205] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 230.649125][ T6236] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 230.652115][ T6236] ubi: mtd0 is already attached to ubi31 [ 231.604606][ T6244] tipc: Started in network mode [ 231.606023][ T6244] tipc: Node identity 080211000001, cluster identity 4711 [ 231.613283][ T6244] tipc: Enabled bearer , priority 0 [ 231.621103][ T6246] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 231.624065][ T6246] ubi: mtd0 is already attached to ubi31 [ 231.745012][ T6249] loop2: detected capacity change from 0 to 2048 [ 231.786947][ T6249] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.133578][ T4073] tipc: Node number set to 134418688 [ 234.383447][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 234.554848][ T6279] loop5: detected capacity change from 0 to 164 [ 234.716115][ T6279] Unsupported NM flag settings (8) [ 235.138631][ T6270] bridge1: port 1(ip6gretap1) entered blocking state [ 235.146984][ T6270] bridge1: port 1(ip6gretap1) entered disabled state [ 235.241808][ T6270] device ip6gretap1 entered promiscuous mode [ 237.416631][ T6283] device veth3 entered promiscuous mode [ 237.421053][ T6283] bridge1: port 2(veth3) entered blocking state [ 237.422904][ T6283] bridge1: port 2(veth3) entered disabled state [ 237.935699][ T6306] loop5: detected capacity change from 0 to 164 [ 238.195538][ T6304] Unsupported NM flag settings (8) [ 238.982174][ T6314] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 239.178181][ T6326] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 239.181318][ T6326] ubi: mtd0 is already attached to ubi31 [ 239.366257][ T6328] loop2: detected capacity change from 0 to 164 [ 240.825031][ T6327] Unsupported NM flag settings (8) [ 241.411222][ T6349] loop0: detected capacity change from 0 to 164 [ 245.124910][ T6374] loop2: detected capacity change from 0 to 164 [ 245.325159][ T6367] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 245.330461][ T6371] Unsupported NM flag settings (8) [ 246.248498][ T6401] loop5: detected capacity change from 0 to 164 [ 246.908902][ T6404] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 246.953836][ T6397] Unsupported NM flag settings (8) [ 247.088603][ T6407] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 250.109589][ T6432] loop0: detected capacity change from 0 to 164 [ 250.702404][ T6430] Unsupported NM flag settings (8) [ 250.788149][ T6437] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 252.488827][ T6443] binder: 6440:6443 ioctl 4018620d 0 returned -22 [ 253.287017][ T6448] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 253.377949][ T6446] loop5: detected capacity change from 0 to 164 [ 253.503112][ T6455] netlink: 'syz.4.540': attribute type 10 has an invalid length. [ 253.531976][ T6442] Unsupported NM flag settings (8) [ 253.547850][ T6447] loop0: detected capacity change from 0 to 8192 [ 253.565515][ T6455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.570403][ T6455] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 253.580203][ T6447] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 253.585432][ T6447] REISERFS (device loop0): using ordered data mode [ 253.588733][ T6447] reiserfs: using flush barriers [ 253.591919][ T6447] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.596990][ T6447] REISERFS (device loop0): checking transaction log (loop0) [ 253.610243][ T6447] REISERFS (device loop0): Using r5 hash to sort names [ 253.612575][ T6447] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 253.961243][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.966803][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.014022][ T6476] loop5: detected capacity change from 0 to 2048 [ 254.043659][ T6476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.160246][ T6481] loop2: detected capacity change from 0 to 164 [ 256.245897][ T6487] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 256.270831][ T6479] Unsupported NM flag settings (8) [ 256.326552][ T6486] loop0: detected capacity change from 0 to 2048 [ 256.361133][ T6486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.600676][ T6494] loop5: detected capacity change from 0 to 2048 [ 256.631574][ T6493] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 256.647005][ T6494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.774659][ T6516] binder: 6513:6516 ioctl 4018620d 0 returned -22 [ 259.398159][ T6517] loop0: detected capacity change from 0 to 8192 [ 259.430951][ T6535] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 259.540826][ T6528] loop2: detected capacity change from 0 to 4096 [ 259.594896][ T6517] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 259.597855][ T6517] REISERFS (device loop0): using ordered data mode [ 259.600892][ T6517] reiserfs: using flush barriers [ 259.619937][ T6517] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.624695][ T6517] REISERFS (device loop0): checking transaction log (loop0) [ 259.651670][ T6528] ntfs: (device loop2): parse_options(): Unrecognized mount option disablå_sparse. [ 260.253460][ T6517] REISERFS (device loop0): Using r5 hash to sort names [ 260.256447][ T6517] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 260.481519][ T6509] dccp_close: ABORT with 64 bytes unread [ 261.174724][ T6552] binder: 6551:6552 ioctl 4018620d 0 returned -22 [ 261.484080][ T6552] loop2: detected capacity change from 0 to 8192 [ 261.531718][ T6552] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 261.534390][ T6552] REISERFS (device loop2): using ordered data mode [ 261.536151][ T6552] reiserfs: using flush barriers [ 261.548874][ T6559] binder: 6558:6559 ioctl 4018620d 0 returned -22 [ 261.577454][ T6552] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.640999][ T6552] REISERFS (device loop2): checking transaction log (loop2) [ 261.663694][ T6552] REISERFS (device loop2): Using r5 hash to sort names [ 261.672540][ T6552] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 261.771507][ T6559] loop5: detected capacity change from 0 to 8192 [ 262.170837][ T6559] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 262.174589][ T6559] REISERFS (device loop5): using ordered data mode [ 262.176363][ T6559] reiserfs: using flush barriers [ 262.184971][ T6559] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.189897][ T6559] REISERFS (device loop5): checking transaction log (loop5) [ 262.193336][ T6559] REISERFS (device loop5): Using r5 hash to sort names [ 262.195443][ T6559] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 262.577149][ T6569] loop0: detected capacity change from 0 to 164 [ 263.099159][ T6569] Unsupported NM flag settings (8) [ 263.860041][ T6580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 265.605832][ T6608] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 265.648879][ T6610] loop0: detected capacity change from 0 to 164 [ 265.723589][ T6610] Unsupported NM flag settings (8) [ 266.133644][ T6616] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 267.077490][ T6623] binder: 6622:6623 ioctl 4018620d 0 returned -22 [ 267.148785][ T6624] loop0: detected capacity change from 0 to 4096 [ 267.154859][ T6624] ntfs: (device loop0): parse_options(): Unrecognized mount option disablå_sparse. [ 267.197899][ T6625] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 267.276154][ T6623] loop5: detected capacity change from 0 to 8192 [ 267.338957][ T6623] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 267.345525][ T6609] loop2: detected capacity change from 0 to 164 [ 267.347566][ T6623] REISERFS (device loop5): using ordered data mode [ 267.357008][ T6623] reiserfs: using flush barriers [ 267.365820][ T6623] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 267.381555][ T6623] REISERFS (device loop5): checking transaction log (loop5) [ 267.389080][ T6623] REISERFS (device loop5): Using r5 hash to sort names [ 267.406706][ T6623] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 267.422430][ T6609] Unsupported NM flag settings (8) [ 268.228816][ T6619] dccp_close: ABORT with 64 bytes unread [ 268.522188][ T6642] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 269.167133][ T6654] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 269.182681][ T6656] binder: 6655:6656 ioctl 4018620d 0 returned -22 [ 269.239724][ T6656] loop0: detected capacity change from 0 to 8192 [ 269.337854][ T6656] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 269.340786][ T6656] REISERFS (device loop0): using ordered data mode [ 269.343557][ T6656] reiserfs: using flush barriers [ 269.355544][ T6663] loop5: detected capacity change from 0 to 2048 [ 269.367786][ T6656] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.402074][ T6656] REISERFS (device loop0): checking transaction log (loop0) [ 269.411506][ T6666] loop2: detected capacity change from 0 to 1024 [ 269.415843][ T6656] REISERFS (device loop0): Using r5 hash to sort names [ 269.418075][ T6656] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 269.436080][ T6663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.474404][ C0] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(190723116136768) <= P.seqno(190723116136767) <= S.SWH(190723116136791)) and (P.ackno exists or LAWL(153394699387855) <= P.ackno(153394699387855) <= S.AWH(153394699387855), sending SYNC... [ 269.683160][ T6666] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.912322][ T6673] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 272.013955][ T6698] binder: 6697:6698 ioctl 4018620d 0 returned -22 [ 272.144670][ T6702] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 272.147923][ T6702] ubi: mtd0 is already attached to ubi31 [ 272.159145][ T6687] loop5: detected capacity change from 0 to 4096 [ 272.185409][ T6687] ntfs: (device loop5): parse_options(): Unrecognized mount option disablå_sparse. [ 272.238171][ T6698] loop0: detected capacity change from 0 to 8192 [ 272.965220][ T6709] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 273.568635][ T6698] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 273.572758][ T6698] REISERFS (device loop0): using ordered data mode [ 273.575694][ T6698] reiserfs: using flush barriers [ 273.578374][ T6698] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 273.583541][ T6698] REISERFS (device loop0): checking transaction log (loop0) [ 273.590810][ T6698] REISERFS (device loop0): Using r5 hash to sort names [ 273.593162][ T6698] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 273.901936][ T6718] binder: 6716:6718 ioctl 4018620d 0 returned -22 [ 274.559673][ T6728] binder: 6725:6728 ioctl 4018620d 0 returned -22 [ 276.095553][ T6718] loop5: detected capacity change from 0 to 8192 [ 276.232654][ T6728] loop2: detected capacity change from 0 to 8192 [ 277.134573][ T6728] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 277.137457][ T6728] REISERFS (device loop2): using ordered data mode [ 277.139260][ T6728] reiserfs: using flush barriers [ 277.147568][ T6728] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.160527][ T6728] REISERFS (device loop2): checking transaction log (loop2) [ 277.177286][ T6728] REISERFS (device loop2): Using r5 hash to sort names [ 277.185039][ T6728] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 278.810579][ T6766] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 278.823341][ T6764] binder: 6763:6764 ioctl 4018620d 0 returned -22 [ 278.978276][ T6770] binder: 6769:6770 ioctl 4018620d 0 returned -22 [ 279.063479][ T6774] binder: 6771:6774 ioctl 4018620d 0 returned -22 [ 279.222489][ T6768] loop0: detected capacity change from 0 to 8192 [ 279.486246][ T6768] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 279.489145][ T6768] REISERFS (device loop0): using ordered data mode [ 279.779941][ T6768] reiserfs: using flush barriers [ 279.783483][ T6768] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.803207][ T6768] REISERFS (device loop0): checking transaction log (loop0) [ 279.836833][ T6768] REISERFS (device loop0): Using r5 hash to sort names [ 279.839035][ T6768] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 279.918960][ T6770] loop5: detected capacity change from 0 to 8192 [ 280.101033][ T6770] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 280.103808][ T6770] REISERFS (device loop5): using ordered data mode [ 280.105499][ T6770] reiserfs: using flush barriers [ 280.129547][ T6770] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 280.134295][ T6770] REISERFS (device loop5): checking transaction log (loop5) [ 280.176171][ T6770] REISERFS (device loop5): Using r5 hash to sort names [ 280.178895][ T6770] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 280.978813][ T6782] loop2: detected capacity change from 0 to 1024 [ 281.321995][ T6782] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.612807][ T6795] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 282.584356][ T6811] binder: 6810:6811 ioctl 4018620d 0 returned -22 [ 282.714654][ T6815] binder: 6814:6815 ioctl 4018620d 0 returned -22 [ 282.770983][ T6809] loop2: detected capacity change from 0 to 4096 [ 282.830421][ T6809] ntfs: (device loop2): parse_options(): Unrecognized mount option disablå_sparse. [ 282.848211][ T6815] loop5: detected capacity change from 0 to 8192 [ 283.613240][ T6815] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 283.616122][ T6815] REISERFS (device loop5): using ordered data mode [ 283.636129][ T6811] loop0: detected capacity change from 0 to 8192 [ 283.642224][ T6815] reiserfs: using flush barriers [ 283.943432][ T6826] netlink: 'syz.3.627': attribute type 10 has an invalid length. [ 284.417269][ T6815] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.424831][ T6811] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 284.427416][ T6811] REISERFS (device loop0): using ordered data mode [ 284.429163][ T6811] reiserfs: using flush barriers [ 284.526831][ T6815] REISERFS (device loop5): checking transaction log (loop5) [ 284.541363][ T6815] REISERFS (device loop5): Using r5 hash to sort names [ 284.543620][ T6815] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 284.552147][ T6811] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.556775][ T6811] REISERFS (device loop0): checking transaction log (loop0) [ 284.781825][ T6811] REISERFS (device loop0): Using r5 hash to sort names [ 284.783995][ T6811] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 285.346322][ T6836] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 285.350424][ T6836] ubi: mtd0 is already attached to ubi31 [ 286.240360][ T6849] loop5: detected capacity change from 0 to 164 [ 286.426476][ T6849] Unsupported NM flag settings (8) [ 287.315763][ T6848] loop2: detected capacity change from 0 to 4096 [ 287.318618][ T6848] ntfs: (device loop2): parse_options(): Unrecognized mount option disablå_sparse. [ 287.377751][ T6856] loop0: detected capacity change from 0 to 1024 [ 287.388435][ T6860] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 287.426803][ T6859] loop2: detected capacity change from 0 to 1024 [ 287.553395][ T6859] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.577087][ T6856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.699849][ T6881] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 290.775857][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.779984][ T6881] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 293.268423][ T6901] loop0: detected capacity change from 0 to 4096 [ 293.316216][ T6901] ntfs: (device loop0): parse_options(): Unrecognized mount option disablå_sparse. [ 293.811495][ T6906] loop0: detected capacity change from 0 to 1024 [ 294.214138][ T6906] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 294.514784][ T6913] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 294.826106][ T6917] loop5: detected capacity change from 0 to 4099 [ 294.936065][ T6917] ntfs: (device loop5): parse_options(): Unrecognized mount option disablå_sparse. [ 295.361985][ T6910] dccp_close: ABORT with 64 bytes unread [ 295.483894][ T6925] loop2: detected capacity change from 0 to 4096 [ 295.503061][ T6925] ntfs: (device loop2): parse_options(): Unrecognized mount option disablå_sparse. [ 297.607488][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 297.811863][ T6941] loop2: detected capacity change from 0 to 256 [ 298.041113][ T6958] loop5: detected capacity change from 0 to 1024 [ 299.264057][ T6965] loop0: detected capacity change from 0 to 4096 [ 299.285230][ T6941] FAT-fs (loop2): Directory bread(block 64) failed [ 299.287202][ T6941] FAT-fs (loop2): Directory bread(block 65) failed [ 299.289251][ T6941] FAT-fs (loop2): Directory bread(block 66) failed [ 299.313417][ T6941] FAT-fs (loop2): Directory bread(block 67) failed [ 299.319769][ T6941] FAT-fs (loop2): Directory bread(block 68) failed [ 299.321573][ T6941] FAT-fs (loop2): Directory bread(block 69) failed [ 299.335900][ T6941] FAT-fs (loop2): Directory bread(block 70) failed [ 299.337842][ T6941] FAT-fs (loop2): Directory bread(block 71) failed [ 299.497051][ T6941] FAT-fs (loop2): Directory bread(block 72) failed [ 299.507182][ T6941] FAT-fs (loop2): Directory bread(block 73) failed [ 299.727246][ T6965] ntfs: (device loop0): parse_options(): Unrecognized mount option disablå_sparse. [ 299.747539][ T6973] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 299.768077][ T6958] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.555740][ T6980] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 301.205021][ T6990] loop0: detected capacity change from 0 to 1024 [ 301.713735][ T6990] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.352405][ T7014] loop5: detected capacity change from 0 to 1024 [ 303.818882][ T7014] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 304.884059][ T7006] dccp_close: ABORT with 64 bytes unread [ 305.068366][ T7026] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 306.123472][ T7033] loop2: detected capacity change from 0 to 1024 [ 306.690611][ T7035] loop5: detected capacity change from 0 to 8 [ 306.844132][ T7035] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 307.211850][ T7031] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 307.255549][ T7033] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 307.373774][ T4122] udevd[4122]: incorrect cramfs checksum on /dev/loop5 [ 309.150475][ T7055] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 309.872753][ T7049] loop2: detected capacity change from 0 to 4096 [ 309.921589][ T7049] ntfs: (device loop2): parse_options(): Unrecognized mount option disablå_sparse. [ 310.887630][ T7071] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 310.915521][ T7065] loop0: detected capacity change from 0 to 2048 [ 311.107505][ T7065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.307984][ T7074] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 312.070775][ T7068] loop5: detected capacity change from 0 to 4096 [ 312.985011][ T7077] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 313.260316][ T7068] ntfs: (device loop5): parse_options(): Unrecognized mount option disablå_sparse. [ 314.337473][ T7092] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 315.267157][ T7100] loop2: detected capacity change from 0 to 1024 [ 315.690056][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.691931][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.780971][ T7100] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.604753][ T7110] Can't find ip_set type has [ 317.547729][ T7115] loop5: detected capacity change from 0 to 2048 [ 317.748147][ T7124] binder: 7123:7124 ioctl 4018620d 0 returned -22 [ 318.547474][ T7127] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 319.267553][ T7124] loop2: detected capacity change from 0 to 8192 [ 319.454236][ T7115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.542507][ T7124] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 319.548458][ T7124] REISERFS (device loop2): using ordered data mode [ 319.551432][ T7124] reiserfs: using flush barriers [ 319.569458][ T7124] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 319.574534][ T7124] REISERFS (device loop2): checking transaction log (loop2) [ 319.587885][ T7124] REISERFS (device loop2): Using r5 hash to sort names [ 319.597195][ T7124] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 321.728614][ T7147] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 322.784589][ T7163] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 322.803542][ T7165] binder: 7164:7165 ioctl 4018620d 0 returned -22 [ 323.145864][ T7165] loop0: detected capacity change from 0 to 8192 [ 323.192328][ T7176] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 323.210000][ T7176] ubi: mtd0 is already attached to ubi31 [ 323.262612][ T7165] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 323.265672][ T7165] REISERFS (device loop0): using ordered data mode [ 323.267513][ T7165] reiserfs: using flush barriers [ 323.271348][ T7165] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 323.438824][ T7165] REISERFS (device loop0): checking transaction log (loop0) [ 323.450375][ T7165] REISERFS (device loop0): Using r5 hash to sort names [ 323.452714][ T7165] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 324.791909][ T7194] loop2: detected capacity change from 0 to 1024 [ 325.291637][ T7194] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.102474][ T7201] Can't find ip_set type has [ 327.089855][ T7213] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 328.268022][ T7231] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 330.444080][ T7250] netlink: 'syz.2.734': attribute type 10 has an invalid length. [ 330.762517][ T7255] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 331.294090][ T7254] loop5: detected capacity change from 0 to 2048 [ 331.442890][ T7254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.452656][ T7263] loop0: detected capacity change from 0 to 2048 [ 332.704156][ T7266] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 332.729858][ T7263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.222625][ T7276] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 334.275762][ T7286] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 335.803925][ T7301] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 335.815985][ T7303] netlink: 'syz.5.748': attribute type 10 has an invalid length. [ 335.865631][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.872857][ T7303] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 336.901262][ T7316] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 336.904360][ T7316] ubi: mtd0 is already attached to ubi31 [ 338.565771][ T7329] loop5: detected capacity change from 0 to 8 [ 338.761014][ T7329] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 338.782879][ T4122] udevd[4122]: incorrect cramfs checksum on /dev/loop5 [ 339.472179][ T7336] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 339.523003][ T4122] udevd[4122]: incorrect cramfs checksum on /dev/loop5 [ 340.592433][ T7350] Can't find ip_set type hash:n [ 340.899021][ T7345] loop0: detected capacity change from 0 to 4096 [ 340.921478][ T7345] ntfs: (device loop0): parse_options(): Unrecognized mount option disablå_sparse. [ 341.478215][ T7334] dccp_close: ABORT with 64 bytes unread [ 342.265214][ T7369] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 343.245019][ T7382] binder: 7381:7382 ioctl 4018620d 0 returned -22 [ 343.426195][ T7388] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 343.492447][ T7382] loop0: detected capacity change from 0 to 8192 [ 344.333671][ T7394] Can't find ip_set type hash:n [ 345.117436][ T7382] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 345.124668][ T7382] REISERFS (device loop0): using ordered data mode [ 345.131104][ T7382] reiserfs: using flush barriers [ 345.315954][ T7382] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 345.321183][ T7382] REISERFS (device loop0): checking transaction log (loop0) [ 345.343172][ T7382] REISERFS (device loop0): Using r5 hash to sort names [ 345.345668][ T7382] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 346.986502][ T7416] netlink: 'syz.5.779': attribute type 1 has an invalid length. [ 347.881398][ T7419] loop2: detected capacity change from 0 to 2048 [ 348.085270][ T7426] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 348.144755][ T7427] loop5: detected capacity change from 0 to 8 [ 348.162917][ T7419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.200028][ T7427] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 348.437834][ T4243] udevd[4243]: incorrect cramfs checksum on /dev/loop5 [ 351.673901][ T7458] Can't find ip_set type hash:ne [ 351.976014][ T7454] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 352.010647][ T7461] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 353.486537][ T7490] loop0: detected capacity change from 0 to 1024 [ 354.207588][ T7490] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.235429][ T7489] loop5: detected capacity change from 0 to 2048 [ 355.056959][ T7489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.153728][ T7503] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 355.156657][ T7503] ubi: mtd0 is already attached to ubi31 [ 356.945085][ T7509] Can't find ip_set type hash:ne [ 357.141760][ T7513] binder: 7511:7513 ioctl 4018620d 0 returned -22 [ 359.472304][ T7529] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 359.540288][ T7526] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 359.567079][ T7513] loop0: detected capacity change from 0 to 8192 [ 359.602841][ T7513] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 359.605740][ T7513] REISERFS (device loop0): using ordered data mode [ 359.607514][ T7513] reiserfs: using flush barriers [ 359.616244][ T7513] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 359.621368][ T7513] REISERFS (device loop0): checking transaction log (loop0) [ 359.624939][ T7513] REISERFS (device loop0): Using r5 hash to sort names [ 359.627407][ T7513] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 362.435170][ T7569] Can't find ip_set type hash:ne [ 362.777173][ T7582] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 363.192939][ T7591] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 363.314379][ T7597] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 363.317360][ T7597] ubi: mtd0 is already attached to ubi31 [ 366.227195][ T7621] netlink: 'syz.2.831': attribute type 10 has an invalid length. [ 366.576667][ T7628] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 366.618752][ T7629] loop0: detected capacity change from 0 to 2048 [ 366.652714][ T7629] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.895917][ T7624] loop5: detected capacity change from 0 to 2048 [ 367.811452][ T7624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.486900][ T7651] loop0: detected capacity change from 0 to 2048 [ 368.535790][ T7651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.050079][ T7665] loop5: detected capacity change from 0 to 164 [ 371.486986][ T7674] netlink: 'syz.4.845': attribute type 10 has an invalid length. [ 372.744032][ T7679] loop5: detected capacity change from 0 to 1024 [ 372.906728][ T7679] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.961985][ T7712] loop5: detected capacity change from 0 to 1024 [ 375.116416][ T7704] loop0: detected capacity change from 0 to 8192 [ 375.228342][ T7712] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.876233][ T7704] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 375.884547][ T7704] REISERFS (device loop0): using ordered data mode [ 375.886719][ T7704] reiserfs: using flush barriers [ 375.918500][ T7704] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 376.040400][ T7704] REISERFS (device loop0): checking transaction log (loop0) [ 376.079883][ T7704] REISERFS (device loop0): Using r5 hash to sort names [ 376.082155][ T7704] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 376.135770][ T7734] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 376.350297][ T7736] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 376.918723][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.918830][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.421034][ T7760] loop5: detected capacity change from 0 to 164 [ 379.662808][ T7760] Unsupported NM flag settings (8) [ 379.976934][ T7763] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 380.155023][ T7762] loop2: detected capacity change from 0 to 8192 [ 380.318553][ T7762] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 380.322979][ T7762] REISERFS (device loop2): using ordered data mode [ 380.324809][ T7762] reiserfs: using flush barriers [ 380.330896][ T7762] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 380.335814][ T7762] REISERFS (device loop2): checking transaction log (loop2) [ 381.015858][ T7762] REISERFS (device loop2): Using r5 hash to sort names [ 381.018359][ T7762] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 382.888533][ T7766] loop0: detected capacity change from 0 to 164 [ 382.956763][ T7793] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 383.113217][ T7795] loop5: detected capacity change from 0 to 2048 [ 383.130678][ T7766] Unsupported NM flag settings (8) [ 383.197478][ T7802] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 383.208490][ T7795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.382659][ T7804] loop2: detected capacity change from 0 to 164 [ 383.546819][ T7804] Unsupported NM flag settings (8) [ 385.728483][ T7814] loop5: detected capacity change from 0 to 2048 [ 385.808320][ T7814] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.119845][ T7826] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 388.249414][ T7833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.882'. [ 389.199013][ T7830] loop5: detected capacity change from 0 to 8192 [ 389.342191][ T7830] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 389.344899][ T7830] REISERFS (device loop5): using ordered data mode [ 389.346809][ T7830] reiserfs: using flush barriers [ 389.362175][ T7830] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 389.366767][ T7830] REISERFS (device loop5): checking transaction log (loop5) [ 389.424640][ T7830] REISERFS (device loop5): Using r5 hash to sort names [ 389.426906][ T7830] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 390.316380][ T7841] loop2: detected capacity change from 0 to 8192 [ 390.382720][ T7841] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 390.385525][ T7841] REISERFS (device loop2): using ordered data mode [ 390.418213][ T7841] reiserfs: using flush barriers [ 390.442307][ T7841] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 390.447014][ T7841] REISERFS (device loop2): checking transaction log (loop2) [ 390.837252][ T7841] REISERFS (device loop2): Using r5 hash to sort names [ 390.846093][ T7841] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 390.899144][ T7852] netlink: 'syz.3.886': attribute type 10 has an invalid length. [ 392.637537][ T7866] loop5: detected capacity change from 0 to 2048 [ 393.504006][ T7866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.818812][ T1534] Bluetooth: hci5: command 0x0409 tx timeout [ 395.022880][ T7888] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 395.130425][ T7891] netlink: 36 bytes leftover after parsing attributes in process `syz.3.894'. [ 396.068976][ T7867] chnl_net:caif_netlink_parms(): no params data found [ 397.085766][ T4170] Bluetooth: hci5: command 0x041b tx timeout [ 398.316476][ C1] ------------[ cut here ]------------ [ 398.318346][ C1] refcount_t: addition on 0; use-after-free. [ 398.320202][ C1] WARNING: CPU: 1 PID: 20 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 398.322890][ C1] Modules linked in: [ 398.323946][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.185-syzkaller #0 [ 398.326376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 398.329165][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 398.331397][ C1] pc : refcount_warn_saturate+0x134/0x1f8 [ 398.333030][ C1] lr : refcount_warn_saturate+0x134/0x1f8 [ 398.334669][ C1] sp : ffff80001b387680 [ 398.335758][ C1] x29: ffff80001b387680 x28: ffff0000ea1e7000 x27: ffff0000c80d8400 [ 398.337935][ C1] x26: 1fffe0001814f001 x25: dfff800000000000 x24: 1fffe0001901b081 [ 398.340202][ C1] x23: ffff0000cd17cc00 x22: ffff0000dde31bd4 x21: ffff0000d6d57880 [ 398.342398][ C1] x20: ffff0000dde31bd4 x19: ffff80001659e000 x18: 0000000000000101 [ 398.344708][ C1] x17: 0000000000000000 x16: ffff8000083008fc x15: 00000000ffffffff [ 398.346867][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 398.349150][ C1] x11: 0000000000000100 x10: 0000000000000000 x9 : 7760ecaf8783b400 [ 398.351355][ C1] x8 : 7760ecaf8783b400 x7 : 0000000000000001 x6 : 0000000000000001 [ 398.353690][ C1] x5 : ffff80001b386f78 x4 : ffff80001423f280 x3 : ffff800008300a0c [ 398.355827][ C1] x2 : 0000000000000001 x1 : 0000000100000100 x0 : 000000000000002a [ 398.358023][ C1] Call trace: [ 398.358944][ C1] refcount_warn_saturate+0x134/0x1f8 [ 398.360448][ C1] tipc_crypto_xmit+0x1634/0x2220 [ 398.361867][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 398.363274][ C1] tipc_disc_timeout+0x4c8/0x608 [ 398.364688][ C1] call_timer_fn+0x19c/0x858 [ 398.365974][ C1] __run_timers+0x46c/0x6c4 [ 398.367175][ C1] run_timer_softirq+0x7c/0x114 [ 398.368483][ C1] handle_softirqs+0x344/0xbf0 [ 398.369802][ C1] run_ksoftirqd+0x7c/0x2a0 [ 398.371042][ C1] smpboot_thread_fn+0x4b0/0x920 [ 398.372441][ C1] kthread+0x374/0x454 [ 398.373562][ C1] ret_from_fork+0x10/0x20 [ 398.374811][ C1] irq event stamp: 761771 [ 398.375991][ C1] hardirqs last enabled at (761770): [] __up_console_sem+0xb4/0x100 [ 398.378678][ C1] hardirqs last disabled at (761771): [] el1_dbg+0x24/0x80 [ 398.380623][ T7931] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 398.381088][ C1] softirqs last enabled at (761500): [] handle_softirqs+0xa4c/0xbf0 [ 398.386718][ T7927] loop5: detected capacity change from 0 to 164 [ 398.387373][ C1] softirqs last disabled at (761541): [] run_ksoftirqd+0x7c/0x2a0 [ 398.391592][ C1] ---[ end trace c39c20f19b3425f4 ]--- [ 398.393153][ C1] ------------[ cut here ]------------ [ 398.394663][ C1] refcount_t: underflow; use-after-free. [ 398.396504][ C1] WARNING: CPU: 1 PID: 20 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 398.398984][ C1] Modules linked in: [ 398.400045][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G W 5.15.185-syzkaller #0 [ 398.402607][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.405458][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 398.407631][ C1] pc : refcount_warn_saturate+0x154/0x1f8 [ 398.409212][ C1] lr : refcount_warn_saturate+0x154/0x1f8 [ 398.410820][ C1] sp : ffff80001b387680 [ 398.411991][ C1] x29: ffff80001b387680 x28: ffff0000ea1e7000 x27: 0000000000000000 [ 398.414180][ C1] x26: 1fffe0001814f001 x25: dfff800000000000 x24: 1fffe0001901b081 [ 398.416476][ C1] x23: ffff0000c69368b8 x22: ffff0000dde31a80 x21: ffff0000d6d57880 [ 398.418752][ C1] x20: ffff0000dde31bd4 x19: ffff80001659e000 x18: 0000000000000101 [ 398.420915][ C1] x17: 0000000000000000 x16: ffff8000111a97c4 x15: 00000000ffffffff [ 398.423180][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 398.425359][ C1] x11: 0000000000000100 x10: 0000000000000000 x9 : 7760ecaf8783b400 [ 398.427700][ C1] x8 : 7760ecaf8783b400 x7 : 0000000000000001 x6 : 0000000000000001 [ 398.429963][ C1] x5 : ffff80001b386f78 x4 : ffff80001423f280 x3 : ffff800008503958 [ 398.432117][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000026 [ 398.434393][ C1] Call trace: [ 398.435306][ C1] refcount_warn_saturate+0x154/0x1f8 [ 398.436832][ C1] tipc_crypto_xmit+0x177c/0x2220 [ 398.438171][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 398.439640][ C1] tipc_disc_timeout+0x4c8/0x608 [ 398.441041][ C1] call_timer_fn+0x19c/0x858 [ 398.442307][ C1] __run_timers+0x46c/0x6c4 [ 398.443455][ C1] run_timer_softirq+0x7c/0x114 [ 398.444807][ C1] handle_softirqs+0x344/0xbf0 [ 398.446126][ C1] run_ksoftirqd+0x7c/0x2a0 [ 398.447317][ C1] smpboot_thread_fn+0x4b0/0x920 [ 398.448725][ C1] kthread+0x374/0x454 [ 398.449823][ C1] ret_from_fork+0x10/0x20 [ 398.451012][ C1] irq event stamp: 761799 [ 398.452198][ C1] hardirqs last enabled at (761798): [] __up_console_sem+0xb4/0x100 [ 398.454859][ C1] hardirqs last disabled at (761799): [] el1_dbg+0x24/0x80 [ 398.457319][ C1] softirqs last enabled at (761500): [] handle_softirqs+0xa4c/0xbf0 [ 398.459995][ C1] softirqs last disabled at (761541): [] run_ksoftirqd+0x7c/0x2a0 [ 398.462666][ C1] ---[ end trace c39c20f19b3425f5 ]--- [ 398.464606][ C1] ------------[ cut here ]------------ [ 398.466179][ C1] refcount_t: saturated; leaking memory. [ 398.467934][ C1] WARNING: CPU: 1 PID: 20 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 398.470493][ C1] Modules linked in: [ 398.471592][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G W 5.15.185-syzkaller #0 [ 398.474334][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.477123][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 398.479364][ C1] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 398.480983][ C1] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 398.482522][ C1] sp : ffff80001b387680 [ 398.483670][ C1] x29: ffff80001b387680 x28: ffff0000ea1e6400 x27: ffff0000c80d8400 [ 398.485939][ C1] x26: 1fffe0001814f001 x25: dfff800000000000 x24: 1fffe0001901b081 [ 398.488136][ C1] x23: ffff0000ea009400 x22: ffff0000dde31bd4 x21: 000000007ffffffe [ 398.490302][ C1] x20: ffff0000dde31bd4 x19: ffff80001659e000 x18: 0000000000000101 [ 398.492611][ C1] x17: 0000000000000000 x16: ffff8000083008fc x15: 00000000ffffffff [ 398.494834][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 398.497121][ C1] x11: 0000000000000100 x10: 0000000000000000 x9 : 7760ecaf8783b400 [ 398.499313][ C1] x8 : 7760ecaf8783b400 x7 : 0000000000000001 x6 : 0000000000000001 [ 398.501494][ C1] x5 : ffff80001b386f78 x4 : ffff80001423f280 x3 : ffff800008300a0c [ 398.503738][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000026 [ 398.505999][ C1] Call trace: [ 398.506875][ C1] refcount_warn_saturate+0x1b4/0x1f8 [ 398.508311][ C1] tipc_crypto_xmit+0x1634/0x2220 [ 398.509779][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 398.511236][ C1] tipc_disc_timeout+0x4c8/0x608 [ 398.512633][ C1] call_timer_fn+0x19c/0x858 [ 398.513914][ C1] __run_timers+0x46c/0x6c4 [ 398.515146][ C1] run_timer_softirq+0x7c/0x114 [ 398.516475][ C1] handle_softirqs+0x344/0xbf0 [ 398.517764][ C1] run_ksoftirqd+0x7c/0x2a0 [ 398.518987][ C1] smpboot_thread_fn+0x4b0/0x920 [ 398.520402][ C1] kthread+0x374/0x454 [ 398.521579][ C1] ret_from_fork+0x10/0x20 [ 398.522755][ C1] irq event stamp: 761925 [ 398.523966][ C1] hardirqs last enabled at (761924): [] __up_console_sem+0xb4/0x100 [ 398.526683][ C1] hardirqs last disabled at (761925): [] el1_dbg+0x24/0x80 [ 398.529027][ C1] softirqs last enabled at (761500): [] handle_softirqs+0xa4c/0xbf0 [ 398.531640][ C1] softirqs last disabled at (761541): [] run_ksoftirqd+0x7c/0x2a0 [ 398.534313][ C1] ---[ end trace c39c20f19b3425f6 ]--- [ 398.742805][ T7927] Unsupported NM flag settings (8) [ 398.990132][ T7919] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 399.136701][ T330] ------------[ cut here ]------------ [ 399.138339][ T330] refcount_t: saturated; leaking memory. [ 399.141137][ T330] WARNING: CPU: 1 PID: 330 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8 [ 399.143708][ T330] Modules linked in: [ 399.144790][ T330] CPU: 1 PID: 330 Comm: kworker/u4:4 Tainted: G W 5.15.185-syzkaller #0 [ 399.147438][ T330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.150310][ T330] Workqueue: netns cleanup_net [ 399.151757][ T330] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 399.153958][ T330] pc : refcount_warn_saturate+0x174/0x1f8 [ 399.155638][ T330] lr : refcount_warn_saturate+0x174/0x1f8 [ 399.157252][ T330] sp : ffff80001f4a7260 [ 399.158406][ T330] x29: ffff80001f4a7260 x28: 1ffff00003e94e54 x27: dfff800000000000 [ 399.160720][ T330] x26: 00000000c0000000 x25: 00000000c0000000 x24: 0000000000000cc0 [ 399.162932][ T330] x23: ffff0000dde31bd4 x22: 0000000000000046 x21: 000000007ffffffe [ 399.165205][ T330] x20: ffff0000dde31bd4 x19: ffff80001659e000 x18: 1fffe0003422158e [ 399.167404][ T330] x17: 1fffe0003422158e x16: ffff8000111a97c4 x15: ffff8000141fec20 [ 399.169670][ T330] x14: ffff0001a110ac80 x13: 1ffff0000282c06b x12: 0000000000ff0100 [ 399.171906][ T330] x11: 0000000000000000 x10: 0000000000000000 x9 : 154043d048b2b700 [ 399.174128][ T330] x8 : 154043d048b2b700 x7 : 0000000000000000 x6 : 0000000000000000 [ 399.176376][ T330] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a732684 [ 399.178595][ T330] x2 : ffff0001a110ad10 x1 : 0000000100000000 x0 : 0000000000000026 [ 399.180808][ T330] Call trace: [ 399.181701][ T330] refcount_warn_saturate+0x174/0x1f8 [ 399.183184][ T330] nf_nat_masq_schedule+0x48c/0x57c [ 399.184652][ T330] masq_device_event+0x9c/0xe0 [ 399.186042][ T330] raw_notifier_call_chain+0xd4/0x164 [ 399.187535][ T330] dev_close_many+0x2cc/0x440 [ 399.188792][ T330] unregister_netdevice_many+0x3d4/0x17d0 [ 399.190426][ T330] unregister_netdevice_queue+0x2ac/0x2f8 [ 399.192058][ T330] nsim_destroy+0x58/0x164 [ 399.193340][ T330] __nsim_dev_port_del+0x144/0x1a4 [ 399.194778][ T330] nsim_dev_reload_destroy+0x144/0x204 [ 399.196310][ T330] nsim_dev_reload_down+0xe8/0x154 [ 399.197703][ T330] devlink_reload+0x1e8/0x5c8 [ 399.199014][ T330] devlink_pernet_pre_exit+0x194/0x33c [ 399.200546][ T330] cleanup_net+0x470/0xa98 [ 399.201762][ T330] process_one_work+0x79c/0x1140 [ 399.203165][ T330] worker_thread+0x8f4/0x101c [ 399.204513][ T330] kthread+0x374/0x454 [ 399.205637][ T330] ret_from_fork+0x10/0x20 [ 399.206845][ T330] irq event stamp: 1670110 [ 399.208033][ T330] hardirqs last enabled at (1670109): [] finish_lock_switch+0xb0/0x1c4 [ 399.210784][ T330] hardirqs last disabled at (1670110): [] el1_dbg+0x24/0x80 [ 399.213211][ T330] softirqs last enabled at (1670104): [] handle_softirqs+0xa4c/0xbf0 [ 399.215974][ T330] softirqs last disabled at (1670041): [] __irq_exit_rcu+0x240/0x440 [ 399.218683][ T330] ---[ end trace c39c20f19b3425f7 ]--- [ 399.220765][ T4170] Bluetooth: hci5: command 0x040f tx timeout [ 399.249733][ T330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.384306][ T330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.472053][ T330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.551441][ T330] bond0: (slave netdevsim0): Releasing backup interface [ 399.602406][ T330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.919772][ T330] tipc: Disabling bearer [ 399.922031][ T330] tipc: Disabling bearer [ 399.923744][ T330] tipc: Left network mode [ 400.092718][ T330] device ip6gretap1 left promiscuous mode [ 400.094454][ T330] bridge1: port 1(ip6gretap1) entered disabled state [ 401.564786][ T330] bridge1: port 2(veth3) entered disabled state [ 401.627163][ T330] device hsr_slave_0 left promiscuous mode [ 401.659702][ T330] device hsr_slave_1 left promiscuous mode [ 401.769590][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.771785][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.775181][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.777379][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.780128][ T330] device bridge_slave_1 left promiscuous mode [ 401.781982][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.831200][ T330] device bridge_slave_0 left promiscuous mode [ 401.833287][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.969774][ T330] device veth1_macvtap left promiscuous mode [ 401.971630][ T330] device veth0_macvtap left promiscuous mode [ 401.973530][ T330] device veth1_vlan left promiscuous mode [ 401.975162][ T330] device veth0_vlan left promiscuous mode [ 402.498705][ T330] team0 (unregistering): Port device team_slave_1 removed [ 402.507628][ T330] team0 (unregistering): Port device team_slave_0 removed [ 402.516164][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.552311][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.626061][ T330] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 402.727501][ T330] bond0 (unregistering): Released all slaves [ 406.039521][ T330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.105720][ T330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.145715][ T330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.198223][ T330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.370267][ T330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.432884][ T330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.485630][ T330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.556977][ T330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.732865][ T330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.785318][ T330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.832364][ T330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.885763][ T330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.095764][ T330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.156576][ T330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.206335][ T330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.255694][ T330] bond0: (slave netdevsim0): Releasing backup interface [ 407.293622][ T330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.669618][ T330] tipc: Left network mode [ 408.129496][ T330] tipc: Disabling bearer [ 408.131614][ T330] tipc: Left network mode