last executing test programs: 2.921258615s ago: executing program 2 (id=134): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r0, 0x0, 0x0, 0x80000) 2.76995632s ago: executing program 2 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000002c0)) 2.699862941s ago: executing program 0 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.439830488s ago: executing program 2 (id=142): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000014c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r1, r2, 0x0, 0x0, 0x4}) close(r0) 2.318919731s ago: executing program 2 (id=143): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@cgroup=r0, r0, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) 2.221846393s ago: executing program 2 (id=144): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000480)=[{0x3, 0xe000, 0x0, 0x0}, {0x100, 0x810, 0x0, 0x0}], 0x2}) 1.618502239s ago: executing program 0 (id=148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r0, &(0x7f0000008500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x10e}], 0x1}}], 0x1, 0x40000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0}, &(0x7f0000000240)=0x40) 1.453935012s ago: executing program 0 (id=150): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x9, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x10001, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x4, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0x9f, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x7) 1.230465118s ago: executing program 3 (id=152): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) 1.210075729s ago: executing program 0 (id=154): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xfffffffc, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.069988443s ago: executing program 1 (id=155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0xa061, 0x0, 0x0) 1.036026434s ago: executing program 3 (id=156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @remote, 0x9}}, 0x0, 0x0, 0x4d, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8) syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaab72693b59bc786dd6000000000740601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="c6d035f9c7"], 0x0) 1.015683784s ago: executing program 0 (id=157): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000180)='./file7\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x1105, &(0x7f00000040c0)="$eJzs2T9v00AcBuD37PBnwsjdLSQYGFBVFL5AB5CyssKCUCc6NROIgQ/Dx4FO7FV3GCqxG7mJm4CCkEKgy/NIyZ1f+Xe+G+8uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMJgkX0uyVyXtmFVJStJ1p7PzJN2Y3/1UVyl5fjSbPz2ZPpsnqS9fLy+SMlQNZWkf37/dTttpe6d9snf44PP87bs3r46Pj06Ww5R0ObvY/VLKcj4AAADAz/q/1lzz9wEAAIA/2dlBAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCW+mb4/3DZb8ewSlKSrjudnSfpFumt9bob/3meAAAAwPZKqrxsNuWLY4CVR/nSlKt8aL+XoX+QjxvqAQAAgN/qx0v29fv1cnO1H3+YydW+fMjuZZL9/cXzssm3w6ROcvDL4GcX71+Pv9LX/3otAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCDHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAACwVwAAAP//jRjXMw==") setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=0x80, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x4) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 895.955267ms ago: executing program 1 (id=158): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) 820.534529ms ago: executing program 3 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x20044044) 779.28173ms ago: executing program 1 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4008054) 630.351723ms ago: executing program 3 (id=161): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="3c00508028000880040002000400020004000100041001000400020004000200040002000400010004000100080004000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000080) 367.99244ms ago: executing program 3 (id=162): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x37) 339.305451ms ago: executing program 1 (id=163): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f00000000c0)={0x8, 0x1, 0x10000, 0x3f, 0x1a, "3eccd25569e209000400"}) 212.389384ms ago: executing program 3 (id=164): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000000100)='0', 0x1) 158.041936ms ago: executing program 1 (id=165): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 145.883216ms ago: executing program 0 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002140)={0x2, &(0x7f0000002100)=[{0x40, 0xba, 0x81, 0x7ff}, {0x6, 0xe0, 0x0, 0x8}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 40.321059ms ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000014c0)={r3, &(0x7f00000017c0), &(0x7f0000001380)=""/72}, 0x20) 0s ago: executing program 2 (id=168): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r2, 0x404}, {r1}], 0x2, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 73.294788][ T5755] cgroup: Unknown subsys name 'net' [ 73.429978][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.804261][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.190620][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.214091][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.221437][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.231049][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.231328][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.238743][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.246831][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.255202][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.259816][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.275208][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.282917][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.283364][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.290262][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.314569][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.320273][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.330121][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.330472][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.338243][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.344987][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.352594][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.364123][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.374181][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.383562][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.391025][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.721032][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 76.826237][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.922632][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.931330][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.939048][ T5768] bridge_slave_0: entered allmulticast mode [ 76.946159][ T5768] bridge_slave_0: entered promiscuous mode [ 76.955387][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.962503][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.969758][ T5768] bridge_slave_1: entered allmulticast mode [ 76.977034][ T5768] bridge_slave_1: entered promiscuous mode [ 77.012095][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 77.022397][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 77.055759][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.087107][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.094336][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.101501][ T5769] bridge_slave_0: entered allmulticast mode [ 77.108756][ T5769] bridge_slave_0: entered promiscuous mode [ 77.117965][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.143416][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.151312][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.158539][ T5769] bridge_slave_1: entered allmulticast mode [ 77.166299][ T5769] bridge_slave_1: entered promiscuous mode [ 77.238025][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.250078][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.261819][ T5768] team0: Port device team_slave_0 added [ 77.270875][ T5768] team0: Port device team_slave_1 added [ 77.348944][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.356215][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.382291][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.403547][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.410508][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.437603][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.449015][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.458515][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.465955][ T5770] bridge_slave_0: entered allmulticast mode [ 77.472657][ T5770] bridge_slave_0: entered promiscuous mode [ 77.483637][ T5769] team0: Port device team_slave_0 added [ 77.489748][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.497318][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.509119][ T5767] bridge_slave_0: entered allmulticast mode [ 77.516047][ T5767] bridge_slave_0: entered promiscuous mode [ 77.524597][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.531715][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.538967][ T5767] bridge_slave_1: entered allmulticast mode [ 77.545659][ T5767] bridge_slave_1: entered promiscuous mode [ 77.557028][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.564565][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.571758][ T5770] bridge_slave_1: entered allmulticast mode [ 77.578600][ T5770] bridge_slave_1: entered promiscuous mode [ 77.586469][ T5769] team0: Port device team_slave_1 added [ 77.628804][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.647293][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.660148][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.671861][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.738174][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.745222][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.771438][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.793565][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.800538][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.826572][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.841593][ T5767] team0: Port device team_slave_0 added [ 77.850193][ T5767] team0: Port device team_slave_1 added [ 77.862372][ T5768] hsr_slave_0: entered promiscuous mode [ 77.870332][ T5768] hsr_slave_1: entered promiscuous mode [ 77.879449][ T5770] team0: Port device team_slave_0 added [ 77.909817][ T5770] team0: Port device team_slave_1 added [ 77.919680][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.927008][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.955454][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.999520][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.006625][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.033250][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.055020][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.061991][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.088164][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.130391][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.137515][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.164338][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.178742][ T5769] hsr_slave_0: entered promiscuous mode [ 78.185792][ T5769] hsr_slave_1: entered promiscuous mode [ 78.191864][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.199692][ T5769] Cannot create hsr debugfs directory [ 78.298940][ T5767] hsr_slave_0: entered promiscuous mode [ 78.305798][ T5767] hsr_slave_1: entered promiscuous mode [ 78.311791][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.320107][ T5773] Bluetooth: hci1: command tx timeout [ 78.326908][ T5767] Cannot create hsr debugfs directory [ 78.337335][ T5770] hsr_slave_0: entered promiscuous mode [ 78.346133][ T5770] hsr_slave_1: entered promiscuous mode [ 78.352128][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.361187][ T5770] Cannot create hsr debugfs directory [ 78.393623][ T5773] Bluetooth: hci3: command tx timeout [ 78.479844][ T5773] Bluetooth: hci2: command tx timeout [ 78.479859][ T5774] Bluetooth: hci0: command tx timeout [ 78.656239][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.681024][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.692146][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.716990][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.769170][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.780728][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.791239][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.809664][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.893943][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.911734][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.927410][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.937494][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.031563][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.044338][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.062490][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.072706][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.098515][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.164729][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.181655][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.228004][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.235740][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.261190][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.274656][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.281778][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.296379][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.327544][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.334713][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.349333][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.356487][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.395812][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.452640][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.463008][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.470122][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.480200][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.487344][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.543822][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.561479][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.568596][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.627425][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.634601][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.735702][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.003929][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.065404][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.141012][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.158538][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.169722][ T5768] veth0_vlan: entered promiscuous mode [ 80.214293][ T5768] veth1_vlan: entered promiscuous mode [ 80.269593][ T5769] veth0_vlan: entered promiscuous mode [ 80.287873][ T5768] veth0_macvtap: entered promiscuous mode [ 80.299300][ T5768] veth1_macvtap: entered promiscuous mode [ 80.323671][ T5767] veth0_vlan: entered promiscuous mode [ 80.332568][ T5769] veth1_vlan: entered promiscuous mode [ 80.340149][ T5770] veth0_vlan: entered promiscuous mode [ 80.365838][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.375745][ T5770] veth1_vlan: entered promiscuous mode [ 80.389276][ T5767] veth1_vlan: entered promiscuous mode [ 80.395837][ T5773] Bluetooth: hci1: command tx timeout [ 80.409468][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.438188][ T5769] veth0_macvtap: entered promiscuous mode [ 80.456113][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.465174][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.473856][ T5773] Bluetooth: hci3: command tx timeout [ 80.481797][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.491079][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.517931][ T5769] veth1_macvtap: entered promiscuous mode [ 80.554281][ T5773] Bluetooth: hci0: command tx timeout [ 80.554983][ T5774] Bluetooth: hci2: command tx timeout [ 80.569085][ T5770] veth0_macvtap: entered promiscuous mode [ 80.588592][ T5770] veth1_macvtap: entered promiscuous mode [ 80.596359][ T5767] veth0_macvtap: entered promiscuous mode [ 80.615701][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.627931][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.639959][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.652483][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.663761][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.676582][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.703118][ T5767] veth1_macvtap: entered promiscuous mode [ 80.725922][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.735067][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.744484][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.753341][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.781205][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.785640][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.798827][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.808556][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.818942][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.830023][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.840914][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.868023][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.879005][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.891527][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.901994][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.911875][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.922440][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.936068][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.967613][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.978447][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.988480][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.998993][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.010129][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.019086][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.030008][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.040906][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.051496][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.061473][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.072299][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.083548][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.097951][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.107424][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.118545][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.130428][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.139446][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.148234][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.162352][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.176529][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.185739][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.195121][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.332135][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.340819][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.411337][ T5835] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 81.470889][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.484381][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.506250][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.516300][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.600898][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.624544][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.737995][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.783288][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.895269][ T4992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.905883][ T4992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.116851][ T5845] sctp: [Deprecated]: syz.3.8 (pid 5845) Use of int in max_burst socket option deprecated. [ 82.116851][ T5845] Use struct sctp_assoc_value instead [ 82.296886][ T5851] binder: 5850:5851 ioctl 40046205 0 returned -22 [ 82.462340][ T5856] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 82.475303][ T5774] Bluetooth: hci1: command tx timeout [ 82.553567][ T5774] Bluetooth: hci3: command tx timeout [ 82.639792][ T5774] Bluetooth: hci0: command tx timeout [ 82.644842][ T5773] Bluetooth: hci2: command tx timeout [ 82.935526][ T5864] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.164719][ T5872] syz.2.17[5872]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.207134][ T5872] loop2: detected capacity change from 0 to 2048 [ 83.251910][ T5872] loop2: p1 p3 p4 [ 83.251910][ T5872] p1: [ 83.280840][ T5872] loop2: p4 size 589824 extends beyond EOD, truncated [ 83.795567][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.811851][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 83.841246][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 84.192795][ T5881] loop2: detected capacity change from 0 to 32768 [ 84.252350][ T5881] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.405645][ T5881] XFS (loop2): Ending clean mount [ 84.467922][ T5881] XFS (loop2): Quotacheck needed: Please wait. [ 84.540312][ T4992] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x11d0, inode 0x1144 dinode [ 84.553812][ T5773] Bluetooth: hci1: command tx timeout [ 84.598105][ T4992] XFS (loop2): Unmount and run xfs_repair [ 84.623265][ T4992] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 84.634547][ T5773] Bluetooth: hci3: command tx timeout [ 84.659156][ T4992] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 84.713872][ T5773] Bluetooth: hci0: command tx timeout [ 84.714077][ T5774] Bluetooth: hci2: command tx timeout [ 84.734685][ T4992] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.744093][ T4992] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 84.752973][ T4992] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a 4.Xh............ [ 84.767488][ T4992] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 84.780843][ T4992] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 a2 ce e4 0c ................ [ 84.797799][ T4992] 00000060: ff ff ff ff a6 fb 00 84 00 00 00 00 00 00 00 05 ................ [ 84.821658][ T4992] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 84.885996][ T5881] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 85.111799][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.392857][ T5924] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 85.455259][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.455686][ T5924] CPU: 0 PID: 5924 Comm: syz.1.34 Not tainted syzkaller #0 [ 85.470165][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 85.480260][ T5924] Call Trace: [ 85.483560][ T5924] [ 85.486511][ T5924] dump_stack_lvl+0x18c/0x250 [ 85.491230][ T5924] ? show_regs_print_info+0x20/0x20 [ 85.496464][ T5924] ? load_image+0x420/0x420 [ 85.501008][ T5924] sysfs_create_dir_ns+0x26e/0x2a0 [ 85.506143][ T5924] ? __lock_acquire+0x7d80/0x7d80 [ 85.511195][ T5924] ? sysfs_warn_dup+0xa0/0xa0 [ 85.515895][ T5924] ? rcu_is_watching+0x15/0xb0 [ 85.520698][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 85.525934][ T5924] kobject_add_internal+0x617/0xc90 [ 85.531171][ T5924] kobject_add+0x164/0x240 [ 85.535622][ T5924] ? kobject_init+0x1d0/0x1d0 [ 85.540339][ T5924] ? get_device_parent+0x366/0x390 [ 85.545480][ T5924] device_add+0x3fa/0xc40 [ 85.549849][ T5924] tty_register_device_attr+0x425/0x950 [ 85.555413][ T5924] ? tty_register_device+0x30/0x30 [ 85.560562][ T5924] ? tty_port_init+0x132/0x1a0 [ 85.565361][ T5924] ? gsm_dlci_alloc+0x32a/0x630 [ 85.570237][ T5924] ? __might_fault+0xaa/0x120 [ 85.574940][ T5924] gsm_activate_mux+0x110/0x2a0 [ 85.579824][ T5924] gsmld_ioctl+0x12ca/0x1900 [ 85.584454][ T5924] ? gsmld_write+0x120/0x120 [ 85.589077][ T5924] ? __init_ldsem+0x150/0x150 [ 85.593776][ T5924] ? __fget_files+0x28/0x460 [ 85.598406][ T5924] ? gsmld_write+0x120/0x120 [ 85.603032][ T5924] tty_ioctl+0x9b5/0xdc0 [ 85.607304][ T5924] ? tty_get_icount+0xb0/0xb0 [ 85.612020][ T5924] __se_sys_ioctl+0xfd/0x170 [ 85.616645][ T5924] do_syscall_64+0x55/0xb0 [ 85.621099][ T5924] ? clear_bhb_loop+0x40/0x90 [ 85.625806][ T5924] ? clear_bhb_loop+0x40/0x90 [ 85.630517][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.636466][ T5924] RIP: 0033:0x7fc267d9de99 [ 85.640905][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.660540][ T5924] RSP: 002b:00007fc268c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.668990][ T5924] RAX: ffffffffffffffda RBX: 00007fc268026090 RCX: 00007fc267d9de99 [ 85.675145][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 85.676969][ T5924] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 85.676986][ T5924] RBP: 00007fc267e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 85.676998][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.677011][ T5924] R13: 00007fc268026128 R14: 00007fc268026090 R15: 00007ffe7f74ac38 [ 85.677037][ T5924] [ 85.709948][ T5811] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 85.784619][ T5811] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.807938][ T5924] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.821995][ T5811] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.838986][ T5811] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.903397][ T5811] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.952147][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.236725][ T5811] usb 1-1: GET_CAPABILITIES returned 0 [ 86.252227][ T5811] usbtmc 1-1:16.0: can't read capabilities [ 86.560666][ T5757] usb 1-1: USB disconnect, device number 2 [ 86.793067][ T5947] Falling back ldisc for ttyS3. [ 86.814704][ T788] cfg80211: failed to load regulatory.db [ 87.025820][ T5952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 87.099689][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.361787][ T5964] hugetlbfs: syz.1.44 (5964): Using mlock ulimits for SHM_HUGETLB is obsolete [ 87.662892][ T5972] loop0: detected capacity change from 0 to 512 [ 87.680480][ T5972] ======================================================= [ 87.680480][ T5972] WARNING: The mand mount option has been deprecated and [ 87.680480][ T5972] and is ignored by this kernel. Remove the mand [ 87.680480][ T5972] option from the mount to silence this warning. [ 87.680480][ T5972] ======================================================= [ 87.762321][ T5972] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.796979][ T5972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.855891][ T5972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.902758][ T5972] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.148364][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.485922][ T6005] loop0: detected capacity change from 0 to 64 [ 88.681012][ T6011] loop2: detected capacity change from 0 to 64 [ 88.721481][ T6012] loop0: detected capacity change from 0 to 128 [ 88.730683][ T6012] EXT4-fs: Ignoring removed nobh option [ 88.765324][ T6012] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.827365][ T6012] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.010735][ T5767] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.025677][ T6018] loop2: detected capacity change from 0 to 256 [ 89.059448][ T6018] FAT-fs (loop2): Unrecognized mount option "uRf8=0" or missing value [ 89.161480][ T6020] netlink: 164 bytes leftover after parsing attributes in process `syz.0.66'. [ 89.166487][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 89.319385][ T6020] netlink: 164 bytes leftover after parsing attributes in process `syz.0.66'. [ 89.498482][ T6020] netlink: 164 bytes leftover after parsing attributes in process `syz.0.66'. [ 89.531481][ T6015] loop1: detected capacity change from 0 to 32768 [ 89.591090][ T6015] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 89.661720][ T6015] XFS (loop1): Ending clean mount [ 89.883064][ T5768] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 90.082377][ T6026] loop2: detected capacity change from 0 to 32768 [ 90.200095][ T6023] loop3: detected capacity change from 0 to 32768 [ 90.660075][ T6051] loop0: detected capacity change from 0 to 64 [ 90.739505][ T6051] hfs: keylen 1794 too large [ 90.757912][ T6051] hfs: keylen 1794 too large [ 90.793030][ T6051] hfs: keylen 1794 too large [ 90.843476][ T5757] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.945361][ T5832] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.974906][ T5832] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.033332][ T5757] usb 2-1: Using ep0 maxpacket: 8 [ 91.056610][ T5757] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 91.093835][ T5757] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.114059][ T6057] loop2: detected capacity change from 0 to 8192 [ 91.129149][ T5757] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.153736][ T5757] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.155791][ T6057] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.177271][ T5757] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.203565][ T5757] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.222972][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.270679][ T6057] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 91.348835][ T6057] REISERFS (device loop2): using ordered data mode [ 91.399359][ T6057] reiserfs: using flush barriers [ 91.423284][ T6057] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.466013][ T6057] REISERFS (device loop2): checking transaction log (loop2) [ 91.478858][ T5757] usb 2-1: usb_control_msg returned -32 [ 91.486460][ T5757] usbtmc 2-1:16.0: can't read capabilities [ 91.490184][ T6057] REISERFS (device loop2): Using r5 hash to sort names [ 91.501713][ T6057] REISERFS (device loop2): using 3.5.x disk format [ 91.535413][ T6057] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 91.919977][ T6070] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 92.114431][ T5811] usb 2-1: USB disconnect, device number 2 [ 92.482967][ T6086] loop3: detected capacity change from 0 to 4096 [ 92.625326][ T6091] netlink: 84 bytes leftover after parsing attributes in process `syz.2.92'. [ 92.833567][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 92.861412][ T6099] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 92.886104][ T6096] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 92.894698][ T6099] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 92.932722][ T6099] Zero length message leads to an empty skb [ 93.389141][ T6111] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 93.839093][ T6122] set_capacity_and_notify: 2 callbacks suppressed [ 93.839107][ T6122] loop2: detected capacity change from 0 to 256 [ 93.884401][ T6122] exfat: Deprecated parameter 'namecase' [ 93.929726][ T6122] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 93.957570][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 94.184122][ T6133] input: syz0 as /devices/virtual/input/input6 [ 94.838347][ T6147] loop1: detected capacity change from 0 to 4096 [ 94.983129][ T6147] ntfs3: loop1: ino=21, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" mmap(write) compressed not supported [ 95.553257][ T6166] netlink: 220 bytes leftover after parsing attributes in process `syz.1.125'. [ 95.562547][ T6166] tc_dump_action: action bad kind [ 95.709792][ T6171] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.3.129: Invalid inode table block 0 in block_group 0 [ 95.739863][ T6171] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 95.742606][ T6172] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.2.128: Invalid inode table block 0 in block_group 0 [ 95.774838][ T6169] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.0.127: Invalid inode table block 0 in block_group 0 [ 95.784626][ T6173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.130: Invalid inode table block 0 in block_group 0 [ 95.788044][ T6171] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2036: comm syz.3.129: mark_inode_dirty error [ 95.801007][ T6172] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 95.817836][ T6169] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 95.821950][ T6173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 95.836730][ T6171] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.3.129: Invalid inode table block 0 in block_group 0 [ 95.849302][ T6175] netlink: 'syz.2.128': attribute type 2 has an invalid length. [ 95.896994][ T6176] loop1: detected capacity change from 0 to 256 [ 96.539154][ T6201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.140'. [ 97.240080][ T6214] loop3: detected capacity change from 0 to 8192 [ 97.246664][ T5832] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.463601][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 97.500532][ T5832] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.517167][ T5832] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.566506][ T5832] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.583692][ T5832] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.614896][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.630514][ T5832] usb 3-1: config 0 descriptor?? [ 97.695622][ T6220] loop1: detected capacity change from 0 to 256 [ 97.756075][ T6220] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 98.089343][ T5832] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.120926][ T5832] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.150064][ T5832] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.165262][ T5832] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.173843][ T5832] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.185570][ T5832] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 98.368517][ T5832] usb 3-1: USB disconnect, device number 2 [ 98.378390][ T6236] loop0: detected capacity change from 0 to 8192 [ 98.439427][ T6236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.496287][ T6236] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 98.518603][ T6244] macvlan1: entered promiscuous mode [ 98.535333][ T6236] REISERFS (device loop0): using ordered data mode [ 98.542313][ T6236] reiserfs: using flush barriers [ 98.549163][ T6244] macvlan1: left promiscuous mode [ 98.569947][ T6236] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.590037][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 98.590297][ T6236] REISERFS (device loop0): checking transaction log (loop0) [ 98.627663][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 98.804346][ T6236] REISERFS (device loop0): Using r5 hash to sort names [ 98.812013][ T6236] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 98.909895][ T27] audit: type=1804 audit(1784724869.656:2): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.157" name="/newroot/34/file7/file0" dev="loop0" ino=2 res=1 errno=0 [ 99.038621][ T11] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1024 with error 117 [ 99.064425][ T11] EXT4-fs (sda1): This should not happen!! Data will be lost [ 99.064425][ T11] [ 99.253506][ T5757] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.445122][ T5757] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 99.453752][ T5757] usb 4-1: config 0 has no interface number 0 [ 99.459984][ T5757] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.474403][ T5757] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 99.484942][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.492966][ T5757] usb 4-1: Product: syz [ 99.520884][ T5757] usb 4-1: Manufacturer: syz [ 99.532529][ T5757] usb 4-1: SerialNumber: syz [ 99.557215][ T5757] usb 4-1: config 0 descriptor?? SYZFAIL: SIGSEGV pc-offset:0xfffffffffffd7867 pc:0x7f3437a7bca9 addr:0x1 code=1 (errno 11: Resource temporarily unavailable) [ 99.569564][ T2958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.605897][ T5757] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 99.723275][ T5755] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 99.768731][ T5755] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.082356][ T2958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.360650][ T2958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.383417][ T5766] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.430894][ T5766] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.444630][ T8] usb 4-1: USB disconnect, device number 2 [ 100.454516][ T8] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 100.520731][ T2958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.741348][ T6257] EXT4-fs error: 493 callbacks suppressed [ 100.741363][ T6257] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 100.774829][ T6256] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 100.784505][ T6258] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 100.788293][ T6256] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 100.814726][ T6256] EXT4-fs error (device sda1): ext4_evict_inode:254: inode #2033: comm syz-executor: mark_inode_dirty error [ 100.826702][ T6256] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.843607][ T6256] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 100.856709][ T6256] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 100.866192][ T6256] EXT4-fs error (device sda1): ext4_evict_inode:254: inode #2032: comm syz-executor: mark_inode_dirty error [ 100.879216][ T6256] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.920619][ T6255] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 100.971190][ T6255] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 100.984576][ T6255] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.999659][ T6255] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 101.116536][ T6255] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 101.257163][ T5768] syz-executor (5768) used greatest stack depth: 19856 bytes left [ 101.635665][ T2958] hsr_slave_0: left promiscuous mode [ 101.641648][ T2958] hsr_slave_1: left promiscuous mode [ 101.648092][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.656667][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.665400][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.672795][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.682808][ T2958] bridge_slave_1: left allmulticast mode [ 101.688655][ T2958] bridge_slave_1: left promiscuous mode [ 101.695717][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.706471][ T2958] bridge_slave_0: left allmulticast mode [ 101.712125][ T2958] bridge_slave_0: left promiscuous mode [ 101.719614][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.742630][ T2958] veth1_macvtap: left promiscuous mode [ 101.749234][ T2958] veth0_macvtap: left promiscuous mode [ 101.755661][ T2958] veth1_vlan: left promiscuous mode [ 101.761084][ T2958] veth0_vlan: left promiscuous mode [ 102.268770][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 102.302288][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 102.337219][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.371457][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.616908][ T2958] bond0 (unregistering): Released all slaves [ 103.095230][ T2958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.140413][ T2958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.209892][ T2958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.278963][ T2958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.419528][ T2958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.497196][ T2958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.546656][ T2958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.635808][ T2958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.781377][ T2958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.860325][ T2958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.910819][ T2958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.957356][ T2958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.369303][ T2958] hsr_slave_0: left promiscuous mode [ 105.388470][ T2958] hsr_slave_1: left promiscuous mode [ 105.396798][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.407590][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.418209][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.428867][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.441504][ T2958] bridge_slave_1: left allmulticast mode [ 105.450748][ T2958] bridge_slave_1: left promiscuous mode [ 105.460257][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.471587][ T2958] bridge_slave_0: left allmulticast mode [ 105.477508][ T2958] bridge_slave_0: left promiscuous mode [ 105.483227][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.495879][ T2958] hsr_slave_0: left promiscuous mode [ 105.501626][ T2958] hsr_slave_1: left promiscuous mode [ 105.508314][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.515888][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.526422][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.533853][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.541401][ T2958] bridge_slave_1: left allmulticast mode [ 105.547076][ T2958] bridge_slave_1: left promiscuous mode [ 105.552740][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.562236][ T2958] bridge_slave_0: left allmulticast mode [ 105.568245][ T2958] bridge_slave_0: left promiscuous mode [ 105.574188][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.588099][ T2958] hsr_slave_0: left promiscuous mode [ 105.595749][ T2958] hsr_slave_1: left promiscuous mode [ 105.601503][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.612838][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.621253][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.628722][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.636424][ T2958] bridge_slave_1: left allmulticast mode [ 105.642053][ T2958] bridge_slave_1: left promiscuous mode [ 105.647792][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.656477][ T2958] bridge_slave_0: left allmulticast mode [ 105.662129][ T2958] bridge_slave_0: left promiscuous mode [ 105.668024][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.712236][ T2958] veth1_macvtap: left promiscuous mode [ 105.717864][ T2958] veth0_macvtap: left promiscuous mode [ 105.725235][ T2958] veth1_vlan: left promiscuous mode [ 105.730576][ T2958] veth0_vlan: left promiscuous mode [ 105.741329][ T2958] veth1_macvtap: left promiscuous mode [ 105.752571][ T2958] veth0_macvtap: left promiscuous mode [ 105.758562][ T2958] veth1_vlan: left promiscuous mode [ 105.768078][ T2958] veth0_vlan: left promiscuous mode [ 105.776110][ T2958] veth1_macvtap: left promiscuous mode [ 105.781639][ T2958] veth0_macvtap: left promiscuous mode [ 105.787326][ T2958] veth1_vlan: left promiscuous mode [ 105.792668][ T2958] veth0_vlan: left promiscuous mode [ 106.509393][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 106.543144][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 106.579568][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.626064][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.889148][ T2958] bond0 (unregistering): Released all slaves [ 107.331764][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 107.366881][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 107.402527][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.438803][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.682075][ T2958] bond0 (unregistering): Released all slaves [ 108.074941][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 108.110618][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 108.148701][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.188664][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.470134][ T2958] bond0 (unregistering): Released all slaves